Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33322e302f32332d3233203d3e20323632383735.roa
File:                     3138312e3233332e33322e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          iZod/35gaEk2XZs9QCTqcORU5DSNaTsggD0u114HgPU=
Subject key identifier:   04:1D:7F:14:DE:22:A7:D4:48:1F:FA:92:BB:72:E3:BE:CD:6E:45:CC
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       31835A45C6A5036DE582197DCBBE70B90DD79315
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33322e302f32332d3233203d3e20323632383735.roa
Signing time:             Fri 28 Mar 2025 01:41:55 +0000
ROA not before:           Fri 28 Mar 2025 01:36:55 +0000
ROA not after:            Fri 27 Mar 2026 01:41:55 +0000
asID:                     262875
IP address blocks:        181.233.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:83:5a:45:c6:a5:03:6d:e5:82:19:7d:cb:be:70:b9:0d:d7:93:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Mar 28 01:36:55 2025 GMT
            Not After : Mar 27 01:41:55 2026 GMT
        Subject: CN=041D7F14DE22A7D4481FFA92BB72E3BECD6E45CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:ce:19:b1:4f:62:f0:9d:3a:ae:c0:20:5d:
                    19:11:e3:e4:70:d5:b5:8e:4f:0d:ba:ee:37:aa:45:
                    c4:be:8e:71:2f:70:79:9d:62:50:b0:ae:ba:81:cd:
                    27:3d:9c:fa:3c:10:91:4e:39:2f:2f:96:cd:51:9b:
                    13:80:64:45:18:f4:3f:9f:21:34:11:55:3e:df:a3:
                    a7:23:26:3c:a9:5d:3b:02:7a:67:b8:9e:73:71:69:
                    58:4e:2d:42:57:73:92:48:67:b3:2c:e3:b1:8b:13:
                    61:0f:ca:98:b2:eb:01:0f:7b:54:a7:10:f7:d7:95:
                    a3:04:60:40:58:ec:31:d2:e9:de:0e:34:41:66:ce:
                    0b:14:d2:df:d8:59:87:64:be:3b:63:12:3f:b9:36:
                    21:30:a2:f0:8e:87:51:62:55:19:b2:6a:34:09:2b:
                    4c:fa:86:ab:ef:1d:e4:b3:aa:72:cc:f5:32:98:72:
                    fd:a7:a0:95:0b:34:c0:a8:e6:37:f6:fb:9a:db:f5:
                    50:9e:10:eb:aa:34:ac:fd:49:39:80:34:1b:0d:8b:
                    ca:c1:63:33:a1:a4:2b:0d:cf:07:c3:bc:7e:7e:a9:
                    29:13:a8:fb:51:2a:1c:05:9f:52:b1:5f:7e:70:84:
                    6a:e3:92:ae:ba:95:ba:0f:0f:06:e7:3f:5c:23:39:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:7F:14:DE:22:A7:D4:48:1F:FA:92:BB:72:E3:BE:CD:6E:45:CC
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33322e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:03:45:a8:2a:d7:c0:98:27:f2:9a:25:fb:63:48:ab:d7:a8:
         c0:43:39:97:b6:4d:e2:35:43:83:30:df:89:fc:2e:b9:17:dd:
         00:f3:e3:da:b2:d7:e7:e4:89:60:65:ef:55:d2:2a:83:ea:45:
         25:fc:0b:86:03:a8:81:28:74:8c:ad:be:b2:eb:5c:e4:3a:13:
         0b:f9:62:3d:0b:8e:6c:10:04:3e:26:fc:07:16:0b:db:2c:17:
         aa:f7:98:97:a1:c0:95:82:2b:3b:7a:28:f3:68:d5:a6:d1:10:
         89:33:f9:94:c8:38:e3:06:5b:a5:59:bd:d9:1b:e0:32:21:66:
         43:c7:10:a6:67:a5:7a:1f:51:2d:26:2c:a5:ca:53:e8:e4:e1:
         68:68:49:20:ba:f0:46:c0:ca:d3:ff:b5:2a:84:a6:57:60:f8:
         45:df:5e:a5:a6:a7:6a:f0:9c:60:c5:c5:01:8b:d5:6a:25:3b:
         76:79:5e:2f:ec:03:4a:ce:2c:74:1c:aa:99:6c:c8:43:64:f1:
         3e:87:73:a6:45:50:6a:c7:57:f6:69:66:40:c9:dd:75:24:c6:
         cb:b4:9e:40:9c:a9:c3:2d:73:e1:1b:d1:1c:49:35:d4:cc:e8:
         bc:74:2a:dd:75:8b:e5:65:ae:a9:f3:9e:a6:4a:b7:fc:9e:e4:
         66:60:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:06 2025 by rpki-client