Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3234203d3e20323636303039.roa
File:                     3138312e3139312e3130342e302f32322d3234203d3e20323636303039.roa (raw, json)
Hash identifier:          HGkjdc18zKTnkT9g3qnlWz8FTRavZyuDTValICrujR0=
Subject key identifier:   08:D6:18:71:59:2A:03:DF:37:ED:B4:A4:F0:60:3B:39:7B:A3:C9:A5
Certificate issuer:       /CN=87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149
Certificate serial:       0EB2BF11EC1A66E1FCF3B4A52EDEEDA74A48E65A
Authority key identifier: 87:43:0C:CF:52:56:6F:CF:E1:A1:9B:4C:1F:3D:DE:5C:6D:6B:A1:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3234203d3e20323636303039.roa
Signing time:             Thu 14 Nov 2024 12:42:04 +0000
ROA not before:           Thu 14 Nov 2024 12:37:04 +0000
ROA not after:            Thu 13 Nov 2025 12:42:04 +0000
asID:                     266009
IP address blocks:        181.191.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:bf:11:ec:1a:66:e1:fc:f3:b4:a5:2e:de:ed:a7:4a:48:e6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149
        Validity
            Not Before: Nov 14 12:37:04 2024 GMT
            Not After : Nov 13 12:42:04 2025 GMT
        Subject: CN=08D61871592A03DF37EDB4A4F0603B397BA3C9A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:0f:6e:a6:d3:fc:3f:66:88:f0:e9:28:e6:
                    22:6f:86:b4:72:3a:8f:16:d7:0f:40:39:50:f9:8c:
                    48:2f:00:d2:2e:40:b1:80:19:25:5d:b9:0d:2f:42:
                    0a:53:01:ed:5d:19:de:d6:8b:a3:fb:56:50:d6:17:
                    56:7b:b3:ee:dc:2b:fc:52:30:7d:b6:78:f8:90:df:
                    73:a0:0d:12:cd:38:49:c1:66:7b:b9:76:12:38:cf:
                    7c:ff:5f:d0:08:6e:8b:d1:73:4c:07:18:c2:58:ba:
                    0d:1a:99:c9:b6:0a:c9:6e:1f:27:cf:f7:6d:b9:18:
                    ff:34:1b:97:84:51:99:a4:a9:1d:90:1c:46:78:df:
                    4a:d1:22:96:dd:22:19:a8:e2:7a:7f:09:e0:f0:eb:
                    5c:15:fc:c9:50:57:ba:98:8a:f5:4c:70:75:af:26:
                    a6:a4:f4:78:96:69:c6:b2:cf:2c:b1:27:35:cd:a3:
                    46:e8:17:3b:34:bc:93:e4:cb:61:20:ae:df:4c:65:
                    9d:7f:bd:42:2a:b7:3e:fe:d4:da:7a:b7:bc:0d:c8:
                    e3:86:5e:04:c0:97:59:3e:19:fd:b5:53:c9:6d:e9:
                    95:f7:23:03:33:ab:23:4e:78:04:3a:cb:dd:26:2e:
                    5a:32:f2:f0:b4:9f:7d:fc:d1:4f:43:35:16:6c:3f:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:18:71:59:2A:03:DF:37:ED:B4:A4:F0:60:3B:39:7B:A3:C9:A5
            X509v3 Authority Key Identifier:
                keyid:87:43:0C:CF:52:56:6F:CF:E1:A1:9B:4C:1F:3D:DE:5C:6D:6B:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87430CCF52566FCFE1A19B4C1F3DDE5C6D6BA149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3234203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:5a:48:64:55:27:d1:13:3c:99:5a:15:39:28:23:ad:a8:
         b8:c8:70:cb:75:de:f8:d3:a5:cb:ce:4f:fa:be:b0:ac:6a:7c:
         ae:c5:ca:5f:3a:90:77:37:b2:14:b9:71:9e:c7:89:01:f5:64:
         67:df:d4:e7:e7:76:01:35:7b:04:d8:36:eb:08:a7:52:83:db:
         33:3d:3f:d6:40:a3:30:97:9a:ca:da:95:7c:c3:4d:c8:10:6d:
         f4:04:61:98:14:38:88:90:21:a0:82:be:58:4a:f8:cc:d7:15:
         5c:eb:7f:97:ae:ce:04:64:cd:40:1c:f8:8d:19:86:96:d8:df:
         bc:41:27:d1:c3:e7:62:e4:0b:41:93:af:30:85:8d:da:69:9d:
         9b:25:ed:2a:76:12:02:34:d5:37:72:b1:48:f4:2b:ac:da:f0:
         9b:82:0a:c2:0f:5a:fc:ff:1b:ee:dd:b3:30:9a:a6:06:0c:fa:
         7d:48:07:74:dc:f9:d0:89:9e:49:92:ff:5d:46:27:9b:62:c7:
         cf:91:3c:ad:0a:62:c2:04:65:36:c6:70:f0:7a:7f:4d:af:32:
         d4:91:19:f1:92:17:01:83:e7:63:6e:08:71:77:67:70:1a:83:
         6a:f0:69:74:ea:14:bf:79:0d:c8:79:32:18:64:ce:1e:c1:bb:
         74:a4:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:39:31 2025 by rpki-client