Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32332d3233203d3e20323636303030.roa
File:                     3138312e3139312e34302e302f32332d3233203d3e20323636303030.roa (raw, json)
Hash identifier:          0tYeVng57g8oxuoYeVgwEn0+ekuixjYIjlyf7Z/0x+M=
Subject key identifier:   ED:EE:E9:E6:97:B3:D4:76:70:F9:14:76:2A:2A:B5:17:E4:2D:5D:97
Certificate issuer:       /CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
Certificate serial:       4B421B987B74BFF1BC999F4B3BD386275982088E
Authority key identifier: D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32332d3233203d3e20323636303030.roa
Signing time:             Mon 18 Dec 2023 16:15:30 +0000
ROA not before:           Mon 18 Dec 2023 16:10:30 +0000
ROA not after:            Mon 16 Dec 2024 16:15:30 +0000
asID:                     266000
IP address blocks:        181.191.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:42:1b:98:7b:74:bf:f1:bc:99:9f:4b:3b:d3:86:27:59:82:08:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
        Validity
            Not Before: Dec 18 16:10:30 2023 GMT
            Not After : Dec 16 16:15:30 2024 GMT
        Subject: CN=EDEEE9E697B3D47670F914762A2AB517E42D5D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:48:02:bb:33:6b:b1:90:ac:20:82:87:d7:
                    3e:82:d6:8e:da:74:90:8a:06:37:23:4d:57:0f:e8:
                    94:e8:c0:cf:77:f8:24:22:4d:28:3e:f9:91:c4:8c:
                    87:07:fa:fb:26:c7:f2:50:43:f6:92:b4:35:8b:96:
                    b6:aa:b1:ef:f1:83:7e:bf:eb:c4:b5:d0:a3:12:44:
                    44:86:47:56:bd:c1:38:81:b5:d7:49:3d:eb:37:e4:
                    bf:f4:8b:47:7d:1a:f6:d5:04:62:c6:a6:2c:7c:b6:
                    e6:0b:83:60:93:a6:b9:bd:e7:17:77:36:ee:4e:91:
                    53:e0:68:4b:c9:18:9d:13:d0:b3:11:3c:08:fa:c8:
                    fc:96:77:e7:26:3d:11:0b:b2:49:2e:8d:28:89:37:
                    c9:cd:84:c8:05:86:e8:c6:32:1e:97:25:e3:8c:09:
                    40:83:53:84:71:00:10:7c:5b:1d:d0:f6:07:46:27:
                    a4:69:22:b2:98:39:dc:cd:09:7f:c1:7a:75:d0:54:
                    ee:c8:c9:68:e2:fc:82:97:ee:0f:67:d6:2a:a3:19:
                    a0:73:3f:17:07:d3:86:cf:a0:59:dc:89:5e:20:12:
                    f7:bb:9a:53:8d:de:48:3b:a7:14:93:fd:26:a1:cd:
                    ce:ab:4f:4e:82:fb:2d:eb:34:b3:f0:4d:f9:23:9f:
                    16:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:E9:E6:97:B3:D4:76:70:F9:14:76:2A:2A:B5:17:E4:2D:5D:97
            X509v3 Authority Key Identifier:
                keyid:D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32332d3233203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:74:26:2e:38:e0:d2:5a:d3:40:59:b7:41:ba:73:e3:9f:42:
         98:34:6c:83:7b:06:f1:ab:88:94:60:96:80:4b:2d:26:3a:94:
         ac:78:9b:7c:57:f9:f1:16:1d:e5:50:01:19:9c:97:d3:ce:80:
         cf:72:db:ff:21:ff:0c:b0:6f:95:3e:33:34:81:9b:7d:5c:1a:
         13:a7:25:82:ea:df:ad:80:c0:0f:f4:83:a2:55:64:dd:6c:59:
         d8:9c:86:89:18:be:d2:98:9c:38:80:ab:2b:64:c3:4f:0b:b3:
         dd:a7:90:47:4c:3a:74:f4:6a:d6:ed:9a:7d:33:f8:4e:62:5b:
         44:38:e3:16:e2:86:b6:a8:7a:18:5c:8b:d2:4b:00:09:e5:54:
         b9:d5:00:fd:39:a9:22:21:3e:3e:ee:34:cd:cb:a8:aa:da:3a:
         9a:84:ab:15:22:d1:bd:9e:26:ad:e7:47:a4:ba:7e:09:77:a6:
         f4:cd:a8:0f:5a:f7:c0:8e:2a:b6:13:6e:90:95:ef:20:9a:a8:
         f6:14:02:c0:b6:2b:e5:4d:52:fe:e8:d0:b6:2b:a9:69:36:b8:
         b4:b3:7e:20:4e:4a:2c:32:73:c9:ad:7d:94:c9:d6:b1:7f:8d:
         cd:05:1c:99:73:d5:8a:7d:6a:0a:bb:c7:b9:93:1b:94:f7:d5:
         b3:f7:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:10 2025 by rpki-client