Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
File:                     3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          t3ZUKstXTAAwrv3gKOaJD2L2yT8EaHLWxjjZPJom5zs=
Subject key identifier:   3E:96:85:12:3F:0A:16:2F:83:A6:4E:25:0F:64:57:6E:E9:CD:4D:6D
Certificate issuer:       /CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
Certificate serial:       3DDA98F4D0967F05155F9801815901303EFC03BE
Authority key identifier: 98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
Signing time:             Mon 15 Jul 2024 18:29:44 +0000
ROA not before:           Mon 15 Jul 2024 18:24:44 +0000
ROA not after:            Mon 14 Jul 2025 18:29:44 +0000
asID:                     264987
IP address blocks:        181.191.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:da:98:f4:d0:96:7f:05:15:5f:98:01:81:59:01:30:3e:fc:03:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9842039AC3B384E016FBCFF2C783844A2F64CE38
        Validity
            Not Before: Jul 15 18:24:44 2024 GMT
            Not After : Jul 14 18:29:44 2025 GMT
        Subject: CN=3E9685123F0A162F83A64E250F64576EE9CD4D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:ae:93:8a:27:4e:f7:6e:02:30:55:5b:cd:
                    99:b2:96:90:f0:6e:60:19:e8:77:cd:a7:be:35:63:
                    73:af:fb:36:89:e7:55:43:dd:65:c0:7e:23:bc:ae:
                    f8:f1:32:50:d2:22:ad:a4:75:b2:93:ab:b4:20:38:
                    ff:35:7d:99:67:73:2d:d5:6a:d7:0d:eb:39:b5:ba:
                    80:f9:45:bc:52:1f:7e:89:af:70:15:e3:fb:39:2f:
                    5e:85:6a:d7:ba:de:dd:11:43:ed:92:39:9f:09:96:
                    ea:9f:40:bf:17:1b:10:69:37:28:0c:bf:9e:13:f4:
                    a1:78:02:d7:c5:f0:6f:1f:bb:90:b3:2d:46:22:c9:
                    79:25:34:71:dd:67:e9:58:df:b3:95:9b:2a:7c:7d:
                    2a:b0:7f:8f:dc:7c:02:83:36:ee:d1:16:d7:81:fc:
                    13:d5:32:65:24:06:ba:83:e3:3c:c8:fb:69:9b:7e:
                    b2:2e:40:39:87:91:b8:02:f9:a1:8c:cc:ab:3c:14:
                    ae:97:96:21:be:00:93:88:b2:3f:76:48:4a:ff:2b:
                    c8:73:0b:58:70:47:53:4b:fc:8d:7a:fe:87:79:60:
                    f1:d4:b5:02:97:c5:b7:37:38:bc:69:5b:c8:4e:f4:
                    25:0c:b2:45:66:45:d9:24:ce:d4:62:7b:be:d0:4b:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:96:85:12:3F:0A:16:2F:83:A6:4E:25:0F:64:57:6E:E9:CD:4D:6D
            X509v3 Authority Key Identifier:
                keyid:98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:d6:2e:cf:fc:b9:df:39:49:f4:85:3d:74:30:1a:0a:7d:
         65:99:23:ad:86:2c:24:36:75:31:c3:b1:97:6e:8d:f4:0f:70:
         40:36:f8:d8:3b:75:02:36:f5:40:6a:f9:3d:97:4d:5f:1e:cd:
         aa:17:26:b9:f1:22:bc:9c:ab:d7:37:5f:ff:e0:84:6a:15:15:
         12:28:d4:dc:c3:48:ab:d2:1f:5c:e3:a8:58:40:8f:55:c8:54:
         6f:eb:7c:2f:87:11:d0:54:6d:43:b8:2b:8e:e7:08:6e:b0:ce:
         ca:0a:d6:93:09:ce:9d:c1:e6:1b:58:df:14:34:ab:be:6d:2b:
         3d:04:48:a7:a5:9b:3c:95:0a:9a:e0:cb:20:7d:a1:c4:fe:d7:
         21:7e:a0:7a:85:ba:61:09:e5:01:1f:90:37:69:37:a9:28:0d:
         fc:2f:74:ef:6a:f4:52:cb:e5:69:e2:1b:56:d1:ec:8b:d6:cb:
         f7:81:b6:d7:1f:3c:ca:f8:b3:8c:46:4a:24:03:c8:58:88:31:
         e5:e7:83:00:fe:2f:07:8b:b8:c2:fb:0e:5b:dd:e5:a7:8c:77:
         64:49:83:71:24:09:39:40:08:eb:22:5f:b5:43:1d:55:22:ec:
         6e:72:b2:2d:2d:30:d6:61:61:af:2f:a2:21:57:e2:b3:5f:02:
         89:dc:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:29:10 2025 by rpki-client