Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          nti8eMnBcRhYLIe/CHHWPIz0ZNWQKwUlgfViDIZR/qQ=
Subject key identifier:   51:DA:B9:9A:7F:63:2E:D1:4D:AE:D7:61:54:9E:30:4A:B6:B2:19:2F
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       2D73ED7D874D6B7EAA6D35250457096F3B5DDE87
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 21:40:22 +0000
ROA not before:           Mon 23 Jan 2023 21:35:22 +0000
ROA not after:            Mon 22 Jan 2024 21:40:22 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:ed:7d:87:4d:6b:7e:aa:6d:35:25:04:57:09:6f:3b:5d:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 21:35:22 2023 GMT
            Not After : Jan 22 21:40:22 2024 GMT
        Subject: CN=51DAB99A7F632ED14DAED761549E304AB6B2192F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:da:c9:7f:2c:68:87:0f:ce:96:cc:0e:ca:
                    5f:2c:de:28:b1:b8:2d:c4:6d:3f:cf:ac:f8:6f:39:
                    92:e3:0a:fa:df:67:d8:4b:9b:73:ae:a7:37:c2:91:
                    13:6c:cf:f3:2f:8b:15:16:ad:ef:79:08:fe:ea:94:
                    13:55:52:17:9e:6e:a7:8d:ae:e1:52:50:c1:67:bd:
                    cd:bb:a7:43:d7:6c:6c:2a:9b:61:fc:5a:2e:da:ad:
                    2e:eb:70:1a:f5:95:80:3b:80:f2:73:cb:20:4d:46:
                    04:d4:73:c6:8d:23:03:e9:4d:4b:4a:b4:9f:f2:76:
                    e4:27:76:c3:52:ac:95:27:50:1f:6e:33:ce:b5:a5:
                    7a:5e:70:fe:3a:15:d5:29:7e:5a:ae:f7:ab:16:c1:
                    85:71:d8:46:0f:79:1f:8c:81:d8:2c:be:dc:1e:69:
                    2d:f4:df:f2:fa:bd:0a:fc:f2:0d:36:14:ed:e1:bd:
                    a3:64:da:55:73:b3:a5:27:4d:29:3d:68:c2:c0:d5:
                    dd:19:4b:1d:c9:4a:5a:5c:e1:e9:5c:dc:85:eb:bb:
                    3d:1f:53:2b:85:30:4e:49:d2:da:54:e5:7b:9d:28:
                    ca:74:a5:db:dc:9c:0b:53:27:db:40:38:d5:85:87:
                    e8:b0:06:eb:ac:01:ee:8b:0a:f4:d6:bb:d5:21:dd:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:B9:9A:7F:63:2E:D1:4D:AE:D7:61:54:9E:30:4A:B6:B2:19:2F
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:22:4a:00:3f:b6:81:41:ca:a6:26:9d:67:34:13:53:83:d9:
         49:d3:ec:9e:bc:94:23:59:f1:96:8e:4a:92:6d:40:c4:0f:ac:
         dc:00:ea:1e:f8:8c:82:ce:c7:c8:2d:36:be:bf:c8:5c:ad:96:
         a2:72:eb:5b:53:06:14:89:c5:e5:8a:eb:4c:54:2e:97:8f:5c:
         d5:dd:0e:41:a2:a4:5a:67:99:25:3c:4a:aa:66:81:1e:8c:64:
         bf:50:bf:42:bc:87:f8:7d:80:cd:86:90:59:ce:64:53:e7:a7:
         39:42:b8:de:b5:8a:57:3d:a3:dd:0d:79:a9:f3:1c:9b:0d:7f:
         1c:fc:9f:10:a4:23:15:3a:e9:1e:e4:86:6a:88:18:8d:c9:86:
         9e:09:2a:4f:e3:1f:0a:89:68:96:ab:ef:4c:7a:71:68:11:4d:
         e9:84:5e:b6:6c:94:8a:ab:c3:d3:79:15:bd:50:c3:1f:ca:df:
         27:38:a7:32:8f:49:ba:96:af:25:3f:50:d1:16:e7:57:af:7e:
         fb:e9:96:2f:03:49:78:00:ac:8b:e2:6c:8c:a8:95:a6:4f:d9:
         6b:aa:6a:57:82:96:cd:26:60:88:49:6f:31:97:59:f9:83:bd:
         d5:1e:57:d8:80:ef:c1:49:75:15:ff:37:93:93:c6:3a:a7:d4:
         78:91:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:30 2025 by rpki-client