Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34372e302f32342d3332203d3e203631373132.roa
File:                     3133312e37322e34372e302f32342d3332203d3e203631373132.roa (raw, json)
Hash identifier:          rejDiujTzm3eLKPoTmNKYSzbXadNv9dsHD4Y3XLg55M=
Subject key identifier:   14:B6:12:24:78:63:94:15:72:09:4F:56:EE:31:17:18:A3:7F:C7:92
Certificate issuer:       /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial:       436AC439027BB3E1E41B8B37EE6937BFEA3D5E3A
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34372e302f32342d3332203d3e203631373132.roa
Signing time:             Sat 01 Mar 2025 12:42:31 +0000
ROA not before:           Sat 01 Mar 2025 12:37:31 +0000
ROA not after:            Sat 28 Feb 2026 12:42:31 +0000
asID:                     61712
IP address blocks:        131.72.47.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6a:c4:39:02:7b:b3:e1:e4:1b:8b:37:ee:69:37:bf:ea:3d:5e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
        Validity
            Not Before: Mar  1 12:37:31 2025 GMT
            Not After : Feb 28 12:42:31 2026 GMT
        Subject: CN=14B612247863941572094F56EE311718A37FC792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:9f:40:ed:13:19:94:b0:4e:03:26:60:f6:
                    31:74:85:5f:0b:f9:b9:be:66:af:85:04:05:96:7d:
                    68:de:53:08:5a:be:d7:a2:cd:bd:82:d9:6d:db:88:
                    a1:6c:30:b3:97:4f:f3:bf:a2:97:50:5d:2d:92:23:
                    21:28:de:27:86:84:c5:cd:bb:82:54:98:fd:ec:19:
                    40:27:62:66:55:41:82:23:1c:9a:2b:c1:32:cf:8a:
                    eb:8b:aa:fb:b7:44:f3:95:db:d1:1d:63:b8:cb:e7:
                    20:f0:f6:41:28:ce:11:1a:8b:17:25:9e:a6:07:f4:
                    9c:8d:5d:c4:e7:b2:70:c8:6d:77:65:2a:81:a5:c8:
                    b7:47:3c:99:62:e5:7d:60:af:35:48:0a:15:f6:82:
                    b0:c4:c8:00:14:2e:e8:0b:68:d8:0f:37:68:a3:1a:
                    bf:16:fe:dc:0d:18:39:f7:7d:c2:5e:5a:19:7a:a5:
                    92:b1:05:88:df:97:3b:08:8a:c2:6e:31:fe:95:39:
                    42:e9:35:bf:83:69:f0:17:c2:75:07:8b:24:dd:18:
                    4b:d6:26:7f:24:78:58:ca:d4:3d:f3:5c:be:d5:e7:
                    0a:3f:9a:51:bd:db:3a:39:87:28:d2:ef:94:05:fc:
                    10:25:a4:6e:a0:b0:24:d7:ef:7c:2a:4c:15:db:06:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B6:12:24:78:63:94:15:72:09:4F:56:EE:31:17:18:A3:7F:C7:92
            X509v3 Authority Key Identifier:
                keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34372e302f32342d3332203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:88:e3:bb:5a:55:b0:ed:e2:df:00:53:72:e4:e5:9d:b2:
         5f:d4:32:fe:09:a3:c6:a8:92:cc:a3:58:75:d4:f3:a1:60:e0:
         28:e7:de:a2:0a:5c:d2:95:03:85:e0:68:bf:7a:67:ea:12:4f:
         02:5c:0d:86:f8:c9:5f:c6:b3:4e:fa:ea:a2:32:5d:97:bd:52:
         07:7e:d3:9d:dc:63:53:6a:86:85:c2:4b:ed:2b:21:09:0c:47:
         78:a3:37:bf:14:f6:d5:e3:ce:40:12:2e:81:86:f9:e3:44:80:
         1a:ec:f2:28:30:0a:29:f2:c6:6a:f7:f1:22:b8:82:96:32:14:
         be:48:a4:04:15:78:ac:05:ba:03:89:fc:85:08:77:49:98:30:
         b7:32:92:ea:dc:17:c2:47:a2:b0:6e:3e:c7:c1:0c:a1:2a:fb:
         74:59:9b:e6:a1:50:85:27:b9:20:0c:06:cd:59:1f:d4:02:d4:
         45:4f:e7:ba:3e:08:f5:48:95:b3:10:50:2c:7f:fd:61:db:8c:
         e7:6d:08:b2:55:0b:f1:04:5e:30:33:06:1f:01:c5:6f:c5:b2:
         91:8e:5c:fe:5c:f5:8b:73:bc:25:16:f8:ac:80:81:3b:c2:78:
         56:6c:9a:5d:f5:32:5f:a1:5f:22:63:c1:07:bb:a9:9a:a2:67:
         d2:c7:3a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:53 2025 by rpki-client