Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3234203d3e203631383130.roa
File:                     3230312e3135382e35362e302f32332d3234203d3e203631383130.roa (raw, json)
Hash identifier:          XIAmWr4OTCC63sAU5RlT66vpgMHB/aQgWVxnMAAIWvc=
Subject key identifier:   26:E4:3C:50:26:06:12:51:69:4D:BB:30:2A:3B:F4:D4:FC:09:34:66
Certificate issuer:       /CN=EB381F59182781F3F3725AE1D618F2BD4CD1820A
Certificate serial:       2CD6B78F956DC96964A9F19C23326E85200E4048
Authority key identifier: EB:38:1F:59:18:27:81:F3:F3:72:5A:E1:D6:18:F2:BD:4C:D1:82:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3234203d3e203631383130.roa
Signing time:             Tue 19 Sep 2023 17:39:22 +0000
ROA not before:           Tue 19 Sep 2023 17:34:22 +0000
ROA not after:            Tue 17 Sep 2024 17:39:22 +0000
asID:                     61810
IP address blocks:        201.158.56.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d6:b7:8f:95:6d:c9:69:64:a9:f1:9c:23:32:6e:85:20:0e:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB381F59182781F3F3725AE1D618F2BD4CD1820A
        Validity
            Not Before: Sep 19 17:34:22 2023 GMT
            Not After : Sep 17 17:39:22 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5d:3e:43:32:c3:ae:79:02:02:40:ee:3c:c7:
                    c7:d5:80:fb:d2:ee:9e:73:7a:45:26:54:98:b4:6e:
                    1f:ea:56:b5:a8:00:07:51:07:a9:52:a4:83:57:2c:
                    44:ed:1f:57:d4:19:56:5a:0e:80:63:98:48:0f:2c:
                    1b:da:b1:b1:dd:31:7e:5d:cf:e1:55:cf:e4:90:cb:
                    f7:e5:6b:c1:e8:ab:06:5d:a8:b8:2d:82:fe:c8:18:
                    8d:51:b4:22:58:b0:10:88:37:32:bf:fc:3a:a2:df:
                    d1:ea:bc:4d:53:dd:ea:fc:e5:51:9e:3d:e4:f5:c6:
                    6f:71:02:8a:7c:1e:39:5d:b4:d1:86:05:fa:c6:52:
                    5e:54:d6:62:32:40:22:31:69:07:8c:36:9d:89:ec:
                    92:16:31:8c:19:ec:00:fe:16:58:b8:ba:de:21:66:
                    32:10:2a:85:52:72:bf:ee:f4:90:ae:17:2e:2a:93:
                    d4:32:f0:fe:48:df:c6:d4:44:93:6e:09:15:fc:fd:
                    bf:9b:c1:97:64:4a:06:47:13:77:ee:f3:ca:b2:06:
                    86:22:68:69:7e:b6:cb:69:84:21:2a:e5:43:ce:80:
                    b2:af:6b:0f:0b:05:f9:f5:2d:77:a8:ad:35:82:11:
                    c7:6d:70:26:e4:77:5e:18:64:4d:d4:2e:a9:e8:35:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:3C:50:26:06:12:51:69:4D:BB:30:2A:3B:F4:D4:FC:09:34:66
            X509v3 Authority Key Identifier:
                keyid:EB:38:1F:59:18:27:81:F3:F3:72:5A:E1:D6:18:F2:BD:4C:D1:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35362e302f32332d3234203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:01:37:44:34:33:aa:48:e3:10:34:5a:72:7b:ab:84:b3:
         c0:72:14:e4:b2:3d:d6:ae:af:dc:e3:1e:76:fc:7d:7b:6b:4d:
         59:32:cc:a0:7d:06:ae:8b:7b:5a:91:77:5f:db:55:f9:73:24:
         62:82:0a:2e:ab:62:1c:6f:11:4b:68:a0:9d:b0:74:f7:fd:b9:
         1c:18:d3:d2:3e:c6:09:56:37:5f:e8:8b:18:d3:76:0d:80:27:
         12:1f:68:f4:93:14:47:08:b3:e6:f9:e3:0d:99:49:7b:c0:01:
         24:51:93:23:fe:93:9c:af:7b:ea:ed:4c:f8:c0:69:61:a4:ab:
         72:56:bb:e8:11:7d:5f:a5:81:fa:43:52:75:3e:0c:3f:c2:8a:
         d9:c6:5c:48:24:73:da:79:3a:90:2a:1d:69:a5:da:44:29:9c:
         6c:af:c5:e3:e6:a1:e0:22:2a:86:7a:e1:8f:75:18:97:0a:a5:
         28:ba:a3:26:d2:bf:49:9f:23:50:42:4f:c1:95:75:0f:5d:52:
         7f:61:d4:a0:48:a2:a3:6c:bd:99:1a:b3:8c:41:ee:28:a5:ac:
         63:0c:3b:bb:1e:85:eb:71:f1:0b:7a:1f:a7:36:22:e3:71:5c:
         9e:9b:77:9b:a2:55:eb:54:7a:38:d3:f5:e5:8d:83:e5:63:4e:
         dc:d8:84:c7
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULNa3j5VtyWlkqfGcIzJuhSAOQEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIzODFGNTkxODI3ODFGM0YzNzI1QUUxRDYxOEYyQkQ0
Q0QxODIwQTAeFw0yMzA5MTkxNzM0MjJaFw0yNDA5MTcxNzM5MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUY1RDNFNDMzMkMzQUU3OTAy
MDI0MEVFM0NDN0M3RDU4MEZCRDJFRTlFNzM3QTQ1MjY1NDk4QjQ2RTFGRUE1NkI1
QTgwMDA3NTEwN0E5NTJBNDgzNTcyQzQ0RUQxRjU3RDQxOTU2NUEwRTgwNjM5ODQ4
MEYyQzFCREFCMUIxREQzMTdFNURDRkUxNTVDRkU0OTBDQkY3RTU2QkMxRThBQjA2
NURBOEI4MkQ4MkZFQzgxODhENTFCNDIyNThCMDEwODgzNzMyQkZGQzNBQTJERkQx
RUFCQzRENTNEREVBRkNFNTUxOUUzREU0RjVDNjZGNzEwMjhBN0MxRTM5NURCNEQx
ODYwNUZBQzY1MjVFNTRENjYyMzI0MDIyMzE2OTA3OEMzNjlEODlFQzkyMTYzMThD
MTlFQzAwRkUxNjU4QjhCQURFMjE2NjMyMTAyQTg1NTI3MkJGRUVGNDkwQUUxNzJF
MkE5M0Q0MzJGMEZFNDhERkM2RDQ0NDkzNkUwOTE1RkNGREJGOUJDMTk3NjQ0QTA2
NDcxMzc3RUVGM0NBQjIwNjg2MjI2ODY5N0VCNkNCNjk4NDIxMkFFNTQzQ0U4MEIy
QUY2QjBGMEIwNUY5RjUyRDc3QThBRDM1ODIxMUM3NkQ3MDI2RTQ3NzVFMTg2NDRE
RDQyRUE5RTgzNTg5RUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA710+QzLDrnkCAkDuPMfH1YD70u6ec3pFJlSYtG4f6la1qAAHUQep
UqSDVyxE7R9X1BlWWg6AY5hIDywb2rGx3TF+Xc/hVc/kkMv35WvB6KsGXai4LYL+
yBiNUbQiWLAQiDcyv/w6ot/R6rxNU93q/OVRnj3k9cZvcQKKfB45XbTRhgX6xlJe
VNZiMkAiMWkHjDadieySFjGMGewA/hZYuLreIWYyECqFUnK/7vSQrhcuKpPUMvD+
SN/G1ESTbgkV/P2/m8GXZEoGRxN37vPKsgaGImhpfrbLaYQhKuVDzoCyr2sPCwX5
9S13qK01ghHHbXAm5HdeGGRN1C6p6DWJ6wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCbkPFAmBhJRaU27MCo79NT8CTRmMB8GA1UdIwQYMBaAFOs4H1kYJ4Hz83Ja4dYY
8r1M0YIKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hhVG5pbUE3NUF6UG1Y
TjdTUzM2UGJ6YWdvRm5naFZ4amlSdXgyTUtFbmZDLzAvRUIzODFGNTkxODI3ODFG
M0YzNzI1QUUxRDYxOEYyQkQ0Q0QxODIwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQjM4MUY1OTE4Mjc4MUYzRjM3MjVBRTFENjE4RjJCRDRDRDE4
MjBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IYVRuaW1BNzVBelBtWE43U1Mz
NlBiemFnb0ZuZ2hWeGppUnV4Mk1LRW5mQy8wLzMyMzAzMTJlMzEzNTM4MmUzNTM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM4MzEzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcme
ODANBgkqhkiG9w0BAQsFAAOCAQEAspIBN0Q0M6pI4xA0WnJ7q4SzwHIU5LI91q6v
3OMedvx9e2tNWTLMoH0Grot7WpF3X9tV+XMkYoIKLqtiHG8RS2ignbB09/25HBjT
0j7GCVY3X+iLGNN2DYAnEh9o9JMURwiz5vnjDZlJe8ABJFGTI/6TnK976u1M+MBp
YaSrcla76BF9X6WB+kNSdT4MP8KK2cZcSCRz2nk6kCodaaXaRCmcbK/F4+ah4CIq
hnrhj3UYlwqlKLqjJtK/SZ8jUEJPwZV1D11Sf2HUoEiio2y9mRqzjEHuKKWsYww7
ux6F63HxC3ofpzYi43Fcnpt3m6JV61R6ONP15Y2D5WNO3NiExw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:04 2025 by rpki-client