Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32342d3234203d3e203631383130.roa
File:                     3230312e3135382e35382e302f32342d3234203d3e203631383130.roa (raw, json)
Hash identifier:          HQux7mPced5e3iddyJ3FlyG91F4GrmN352V8aX0fH2w=
Subject key identifier:   68:66:6C:80:07:D8:E1:E4:A0:7A:A8:5A:CD:01:6F:34:C8:DC:BC:51
Certificate issuer:       /CN=EB381F59182781F3F3725AE1D618F2BD4CD1820A
Certificate serial:       6256DAF3B73E0B4A94D1E4A67E1804DFF747102A
Authority key identifier: EB:38:1F:59:18:27:81:F3:F3:72:5A:E1:D6:18:F2:BD:4C:D1:82:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32342d3234203d3e203631383130.roa
Signing time:             Wed 05 Oct 2022 17:20:00 +0000
ROA not before:           Wed 05 Oct 2022 17:15:00 +0000
ROA not after:            Wed 04 Oct 2023 17:20:00 +0000
asID:                     61810
IP address blocks:        201.158.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:da:f3:b7:3e:0b:4a:94:d1:e4:a6:7e:18:04:df:f7:47:10:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB381F59182781F3F3725AE1D618F2BD4CD1820A
        Validity
            Not Before: Oct  5 17:15:00 2022 GMT
            Not After : Oct  4 17:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:b1:dd:23:15:ee:86:f2:79:7a:24:ba:2b:
                    d6:d7:fa:03:c0:70:af:28:66:e1:2a:93:4c:93:fa:
                    b4:35:d4:1b:49:6a:ce:fa:31:05:f6:98:66:59:fd:
                    c6:4e:d0:97:12:8d:42:0a:eb:47:a2:16:83:81:f8:
                    54:3c:7a:83:10:b9:9a:8c:38:3b:23:d9:7f:51:71:
                    f4:f5:d5:df:da:ef:8d:e8:b7:2e:4b:e2:15:4f:1a:
                    c6:ed:6c:34:14:50:b4:94:e5:23:6d:5c:60:80:25:
                    92:81:c5:37:1d:e3:59:20:d9:49:ef:ba:88:be:97:
                    59:50:69:cc:94:32:dc:35:e7:41:2f:43:be:3a:e7:
                    db:bf:64:93:ad:3f:95:c3:a3:8c:cf:65:c2:32:0e:
                    25:c6:8f:5e:33:3a:5d:a4:95:3e:2b:5e:3e:5e:94:
                    07:44:c0:76:44:27:cf:25:68:7c:0a:60:f0:67:9f:
                    6a:c8:ac:03:57:61:91:d5:ad:b0:62:9f:2b:54:9d:
                    00:59:0a:8a:3d:cd:a9:a7:5c:68:e8:c8:a2:12:28:
                    bc:16:31:43:35:6a:01:e6:63:36:4c:11:0d:aa:7b:
                    94:5f:27:3c:ee:85:5d:91:0f:4f:91:b9:e0:50:77:
                    80:6b:20:ad:e6:9b:26:21:23:d4:b2:1c:28:c2:f9:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:6C:80:07:D8:E1:E4:A0:7A:A8:5A:CD:01:6F:34:C8:DC:BC:51
            X509v3 Authority Key Identifier:
                keyid:EB:38:1F:59:18:27:81:F3:F3:72:5A:E1:D6:18:F2:BD:4C:D1:82:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB381F59182781F3F3725AE1D618F2BD4CD1820A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaTnimA75AzPmXN7SS36PbzagoFnghVxjiRux2MKEnfC/0/3230312e3135382e35382e302f32342d3234203d3e203631383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:04:07:fc:52:c9:b4:69:ab:d1:9f:be:3e:4c:ed:89:c2:25:
         f3:39:d1:c1:0a:19:f3:7d:70:74:9b:a3:56:e4:63:df:5c:8c:
         a5:d8:ee:4d:64:27:87:2a:c9:3e:a0:a4:dc:04:5c:bf:29:23:
         b2:0a:ed:e3:64:c2:9d:33:32:63:b5:63:11:f7:a1:ac:12:8d:
         d2:62:33:4f:5c:f2:b4:ba:86:97:b0:7d:d8:cc:ef:6f:a1:bd:
         c7:9b:9f:be:20:2d:39:c5:19:80:3c:fb:7f:b6:79:7b:53:54:
         37:cc:2b:70:89:3e:9a:50:b7:e0:6d:97:bb:2b:ca:e2:a4:99:
         ac:33:75:6b:02:c5:ad:6e:21:fb:9f:6d:8d:8c:22:c4:e3:cc:
         8c:93:e9:8c:5a:4a:37:2b:77:7c:5b:d3:c1:b5:64:b0:b8:94:
         1f:e7:01:2a:9b:88:79:6b:46:e2:99:95:53:cd:ad:a4:fe:37:
         98:42:6f:7e:e4:6a:db:52:ff:5e:78:0f:7c:a5:a2:a9:8a:2e:
         1e:45:49:61:22:d8:bd:4c:c6:f6:00:26:b1:13:93:25:43:ef:
         17:e1:64:81:ba:fa:87:0a:4d:6c:9e:6b:cd:17:17:80:8e:57:
         5a:35:50:ef:d9:a5:6f:06:f7:7e:16:63:45:2e:8c:e1:ee:19:
         9a:c4:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:32 2025 by rpki-client