Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231392e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231392e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          0UmvcGraHfY4dbOCrCEDcFHXt1n5mR/F+pRGlAhzGKE=
Subject key identifier:   FF:7B:CB:9F:1D:BE:3A:D7:13:DB:97:E7:FC:89:6D:18:4F:E7:79:BE
Certificate issuer:       /CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
Certificate serial:       2D8E16A080538656C36304478A49A9D47E5D2C5F
Authority key identifier: B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231392e302f32342d3234203d3e20323637353630.roa
Signing time:             Wed 11 Dec 2024 11:59:39 +0000
ROA not before:           Wed 11 Dec 2024 11:54:39 +0000
ROA not after:            Wed 10 Dec 2025 11:59:39 +0000
asID:                     267560
IP address blocks:        181.191.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:16:a0:80:53:86:56:c3:63:04:47:8a:49:a9:d4:7e:5d:2c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
        Validity
            Not Before: Dec 11 11:54:39 2024 GMT
            Not After : Dec 10 11:59:39 2025 GMT
        Subject: CN=FF7BCB9F1DBE3AD713DB97E7FC896D184FE779BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:ae:75:d5:7f:7d:e8:96:cd:d6:71:9d:70:
                    7e:14:15:bd:68:71:d9:3b:9a:49:cf:a1:bf:f6:ac:
                    8e:a2:9c:d3:39:86:f8:37:ae:6f:9f:f0:2d:62:97:
                    1f:78:99:4d:e9:24:80:94:d3:a4:a7:a5:5d:ef:ff:
                    0a:53:2a:29:e1:88:72:33:18:c0:9e:b7:79:a6:0f:
                    09:15:3e:ec:da:93:98:00:17:0b:c9:bb:94:b3:8e:
                    8c:f7:33:17:a2:4d:72:66:ca:58:1c:e7:29:0e:d9:
                    e3:3f:fe:94:2e:42:ae:c4:be:a4:1c:46:c3:95:8c:
                    68:32:fb:51:94:ae:d8:68:6e:d4:07:c0:16:19:66:
                    e0:2c:11:56:92:2c:5e:6a:30:fe:76:40:3a:41:90:
                    0d:c8:b8:bb:d2:3f:0d:27:4c:4a:2f:fc:c8:68:f7:
                    4d:56:e6:2c:d2:8a:82:c4:b1:8c:15:7a:bb:82:8e:
                    70:6f:44:7b:6b:60:2f:07:b4:2e:3c:bb:19:35:3a:
                    9f:cb:3e:b2:94:84:7a:33:ac:9a:d3:93:c1:5f:68:
                    a0:c2:61:49:12:f0:2d:3a:0a:2b:af:b3:1f:77:c2:
                    03:99:20:11:bf:31:ba:b2:79:b5:ea:fa:3b:cc:10:
                    11:ad:ee:94:84:b4:54:1f:5f:ca:fe:79:7b:b0:82:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:CB:9F:1D:BE:3A:D7:13:DB:97:E7:FC:89:6D:18:4F:E7:79:BE
            X509v3 Authority Key Identifier:
                keyid:B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231392e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:f2:ac:1d:4a:5b:f0:0d:88:57:d9:40:a1:e8:ed:1b:af:
         18:69:e9:f5:70:b4:52:c6:88:2b:5d:f9:72:92:a8:59:d5:8d:
         f8:d8:31:2e:c4:a9:ef:aa:d5:80:d6:6c:f1:74:7d:f5:76:97:
         76:d5:7f:3b:3f:ce:36:b5:a1:d7:98:f1:36:d2:f9:88:3a:ae:
         c7:71:4e:20:01:64:46:86:48:54:ad:2e:b4:5b:a5:f2:72:27:
         9e:af:1f:0c:67:20:15:ba:96:a2:96:0f:20:46:82:73:70:65:
         a3:b2:37:7a:8a:8b:78:ec:01:d6:52:09:a6:ec:86:9c:e7:18:
         e0:a9:1a:99:46:1a:ac:16:e8:b5:6c:4e:67:33:b8:a0:65:cf:
         57:dc:15:46:81:bc:43:6a:26:d0:a9:b2:bb:38:38:60:a6:25:
         f7:48:b1:92:1e:06:49:9e:84:a2:d8:ab:e7:e8:a3:72:f6:71:
         a6:cf:ec:38:0e:55:b3:6f:5c:13:d9:6e:3d:40:e9:a4:b1:f9:
         fd:53:77:07:30:78:b5:c2:3e:0e:fd:51:d8:33:d6:69:12:fa:
         4b:a9:dc:df:ea:f6:dd:32:80:a4:17:8f:44:13:4d:fc:21:29:
         74:2c:9c:1a:56:43:56:60:22:f3:4e:0e:c3:09:cd:27:1f:01:
         85:fa:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:13 2025 by rpki-client