Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa
File:                     3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa (raw, json)
Hash identifier:          eYpoJ9zK5q5USbrsm51cH2zNhC8iVYXI0HhG1KzGVyc=
Subject key identifier:   2F:3C:58:FB:41:43:88:E7:AC:17:62:BE:22:E5:12:6C:18:4A:F8:35
Certificate issuer:       /CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
Certificate serial:       2A4DAFF2313C8BF7D68AC6ADC0DA7E29FCBF4109
Authority key identifier: 25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa
Signing time:             Mon 30 Dec 2024 11:47:34 +0000
ROA not before:           Mon 30 Dec 2024 11:42:34 +0000
ROA not after:            Mon 29 Dec 2025 11:47:34 +0000
asID:                     266002
IP address blocks:        181.191.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4d:af:f2:31:3c:8b:f7:d6:8a:c6:ad:c0:da:7e:29:fc:bf:41:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
        Validity
            Not Before: Dec 30 11:42:34 2024 GMT
            Not After : Dec 29 11:47:34 2025 GMT
        Subject: CN=2F3C58FB414388E7AC1762BE22E5126C184AF835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d4:c9:0c:ab:32:d6:f6:09:0a:3b:ad:40:ec:
                    d2:f6:24:44:58:a5:65:43:17:8e:57:e7:f0:ff:2f:
                    d8:73:d5:4b:ba:85:90:a3:81:da:d6:09:b2:2c:e6:
                    02:af:5c:40:0c:f0:b0:97:76:ea:56:ca:da:96:40:
                    2c:31:7b:34:90:bb:24:7d:07:d3:d5:56:d8:02:d6:
                    65:b1:64:73:59:e4:da:1a:1c:6f:3f:a6:a6:9a:69:
                    83:e2:6b:70:b9:3b:14:c5:8d:50:d2:9d:df:cb:77:
                    dd:4b:4c:79:93:36:ea:01:77:81:37:23:17:1c:35:
                    f0:10:b5:ab:d5:89:dc:88:21:39:fd:e5:5c:0b:55:
                    29:3d:49:31:c8:7f:03:54:14:bb:1e:d8:1a:4d:b5:
                    b5:93:a4:d4:81:a1:dd:77:04:79:31:35:5d:10:78:
                    ce:f6:5d:b8:11:3b:91:93:07:6e:ed:bd:ff:b1:36:
                    8a:4d:3e:42:30:c6:7c:9b:06:89:c8:55:10:66:12:
                    26:c2:75:3e:ad:ae:4b:e6:ca:4e:b5:d5:04:71:f8:
                    66:68:df:b2:78:3a:a7:b2:39:17:c9:bf:30:5c:ef:
                    ef:81:17:09:77:1b:1f:ab:83:e1:45:ee:3d:13:4b:
                    08:22:ce:25:76:c6:ae:97:5e:61:28:e5:46:4b:94:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:58:FB:41:43:88:E7:AC:17:62:BE:22:E5:12:6C:18:4A:F8:35
            X509v3 Authority Key Identifier:
                keyid:25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3138312e3139312e39322e302f32322d3234203d3e20323636303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:a2:6b:98:34:58:51:39:3d:f3:24:f4:c0:69:28:92:87:
         aa:24:98:91:7c:24:4b:e4:87:ad:74:b6:13:e2:a3:3c:4b:cf:
         b8:49:ae:f5:79:64:13:7d:04:8d:98:66:b5:c7:8a:ca:6e:00:
         88:26:e8:c8:58:4a:f7:71:6d:8a:b9:f3:71:4c:26:9f:9a:d0:
         f7:01:f1:75:d8:a4:d8:39:3c:44:f6:e8:88:80:be:47:14:2f:
         c6:21:97:22:f3:6c:b6:e7:c3:2a:de:77:b9:ce:3f:b2:85:9a:
         16:51:ad:9c:ed:d5:64:e7:7d:7b:29:2d:a5:ed:6e:5a:2d:84:
         eb:c3:f7:ff:5e:18:d1:92:f6:cb:a7:ad:66:6c:f4:7b:76:68:
         8d:58:32:84:23:fd:44:23:26:ed:40:b5:ba:cb:c7:e0:1d:72:
         a7:30:8e:bf:9e:4d:cc:2f:4b:28:65:38:f1:06:ff:93:6f:a2:
         eb:de:97:ce:04:8f:74:49:52:98:33:98:97:f2:ea:25:04:6d:
         ab:19:11:b1:ac:af:6a:8b:89:a3:68:5a:b2:60:a5:78:8d:57:
         a1:94:4c:b5:a2:b8:ad:fd:27:b1:e2:39:bf:58:22:a9:39:36:
         f3:c4:74:9c:25:a4:da:f1:63:66:cd:24:94:a1:cf:40:46:52:
         c5:10:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:07:50 2025 by rpki-client