Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/3230312e3138322e3137322e302f32342d3234203d3e20323637353234.roa
File:                     3230312e3138322e3137322e302f32342d3234203d3e20323637353234.roa (raw, json)
Hash identifier:          Bp4KZEYENa+VVvYTmUGzDvG+mLC9fs7uZ4MLN8R+Rwk=
Subject key identifier:   EC:48:22:1E:E9:B6:3C:31:F8:19:A4:34:17:4D:7A:07:A5:06:DA:5E
Certificate issuer:       /CN=5489051296CE799761D50A1125A05964C2356CDC
Certificate serial:       5F09748E6FCB29206CC8725F2D90A1791E117D02
Authority key identifier: 54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/3230312e3138322e3137322e302f32342d3234203d3e20323637353234.roa
Signing time:             Wed 10 Feb 2021 01:26:59 +0000
ROA not before:           Wed 10 Feb 2021 01:21:59 +0000
ROA not after:            Wed 09 Feb 2022 01:26:59 +0000
asID:                     267524
IP address blocks:        201.182.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:74:8e:6f:cb:29:20:6c:c8:72:5f:2d:90:a1:79:1e:11:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5489051296CE799761D50A1125A05964C2356CDC
        Validity
            Not Before: Feb 10 01:21:59 2021 GMT
            Not After : Feb  9 01:26:59 2022 GMT
        Subject: CN=3082010A0282010100A482D023DB6256B4900CAE99CD9646DF4755EF5C31A42FF7C95B09A693634AC50CBF4D4AFDB603B0AD5512E81527855D9BAA255F2733D806DAA28D61B7EF5165A6157CDE1E7D186AF98065CE777E620E7D167BBEDBD28121D3BDAEB50FEBB3CA498FED8868779529222D63B0FD50F19FA94BD2E98038AF3E829C0C67459EB32FBAF814C1960954411FA3D7E7A18CF9210961F0B5AB4A22BF553EF44C1B04F5A02AA309ACC3298E750F956EDDF110E4158F471564A528C67AEB32468F6DF32705FB94BFA10B54A3560934686E0BA64F32503417728DD4FD2DA70BAF4393D751E72A960613DFE138DD340F746F64A033D6FA2EFB236D9B1408F2696E84D88052E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:d0:23:db:62:56:b4:90:0c:ae:99:cd:96:
                    46:df:47:55:ef:5c:31:a4:2f:f7:c9:5b:09:a6:93:
                    63:4a:c5:0c:bf:4d:4a:fd:b6:03:b0:ad:55:12:e8:
                    15:27:85:5d:9b:aa:25:5f:27:33:d8:06:da:a2:8d:
                    61:b7:ef:51:65:a6:15:7c:de:1e:7d:18:6a:f9:80:
                    65:ce:77:7e:62:0e:7d:16:7b:be:db:d2:81:21:d3:
                    bd:ae:b5:0f:eb:b3:ca:49:8f:ed:88:68:77:95:29:
                    22:2d:63:b0:fd:50:f1:9f:a9:4b:d2:e9:80:38:af:
                    3e:82:9c:0c:67:45:9e:b3:2f:ba:f8:14:c1:96:09:
                    54:41:1f:a3:d7:e7:a1:8c:f9:21:09:61:f0:b5:ab:
                    4a:22:bf:55:3e:f4:4c:1b:04:f5:a0:2a:a3:09:ac:
                    c3:29:8e:75:0f:95:6e:dd:f1:10:e4:15:8f:47:15:
                    64:a5:28:c6:7a:eb:32:46:8f:6d:f3:27:05:fb:94:
                    bf:a1:0b:54:a3:56:09:34:68:6e:0b:a6:4f:32:50:
                    34:17:72:8d:d4:fd:2d:a7:0b:af:43:93:d7:51:e7:
                    2a:96:06:13:df:e1:38:dd:34:0f:74:6f:64:a0:33:
                    d6:fa:2e:fb:23:6d:9b:14:08:f2:69:6e:84:d8:80:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:22:1E:E9:B6:3C:31:F8:19:A4:34:17:4D:7A:07:A5:06:DA:5E
            X509v3 Authority Key Identifier:
                keyid:54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/5489051296CE799761D50A1125A05964C2356CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/3230312e3138322e3137322e302f32342d3234203d3e20323637353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:35:9d:92:47:c4:88:12:08:4c:56:fc:1f:9a:bb:99:4d:
         97:45:c6:1f:19:a1:ab:60:a9:0d:8c:89:16:68:51:13:42:e4:
         2a:cd:8a:9f:62:8c:57:9b:bb:d4:00:94:e8:82:5b:7b:a6:09:
         71:09:12:13:ce:18:19:67:bd:6c:b4:6a:0d:6a:0a:89:b7:80:
         7b:c6:63:a5:b7:88:3e:4f:86:c9:38:5f:fe:6a:20:01:72:d5:
         95:aa:3b:a0:ad:f1:b7:f3:7a:24:81:68:c6:12:ed:ab:5b:41:
         d0:11:81:a8:b4:90:c5:5a:a0:c0:d5:6f:5f:14:bc:8d:e9:40:
         da:31:a7:af:31:5a:a0:dc:49:f1:39:cb:b7:0c:4d:67:60:c5:
         bb:70:dd:11:17:4d:4c:6a:cc:fb:0e:7c:cd:65:2f:a1:66:73:
         e9:2e:b4:9d:9b:f3:13:64:40:55:51:f5:55:b3:0d:d9:ec:68:
         ec:37:0e:38:de:8b:8a:53:ba:ec:66:30:cd:43:a2:08:0e:9d:
         04:0c:58:eb:f4:8f:e7:22:d7:b4:02:9b:1d:87:98:0b:4b:ac:
         d6:aa:f7:26:88:8d:26:e8:43:12:ac:c5:73:fa:7c:55:46:10:
         c9:d0:c9:26:59:23:ed:16:ab:d5:b9:24:ab:ee:e9:a0:61:37:
         25:6a:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:21 2025 by rpki-client