Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130362e302f32332d3233203d3e203631373332.roa
File:                     3133312e37322e3130362e302f32332d3233203d3e203631373332.roa (raw, json)
Hash identifier:          mQrFkQbKyb/ejhdk8MH9AURW4xfnT0xP6U975inMIpY=
Subject key identifier:   F8:D3:D2:14:17:57:48:87:49:5C:4A:5A:7D:BD:C0:4F:1D:E9:0F:53
Certificate issuer:       /CN=4FAD91E56F0594990903F5CFDF1A51C367F178C1
Certificate serial:       7F83075BC89AD4067D42825DA9EBF9E51A1B2B3D
Authority key identifier: 4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130362e302f32332d3233203d3e203631373332.roa
Signing time:             Thu 05 May 2022 21:40:22 +0000
ROA not before:           Thu 05 May 2022 21:35:22 +0000
ROA not after:            Thu 04 May 2023 21:40:22 +0000
asID:                     61732
IP address blocks:        131.72.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:83:07:5b:c8:9a:d4:06:7d:42:82:5d:a9:eb:f9:e5:1a:1b:2b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FAD91E56F0594990903F5CFDF1A51C367F178C1
        Validity
            Not Before: May  5 21:35:22 2022 GMT
            Not After : May  4 21:40:22 2023 GMT
        Subject: CN=F8D3D21417574887495C4A5A7DBDC04F1DE90F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:79:08:d9:b2:ae:d2:ac:a5:f5:e3:1f:72:
                    e5:10:9d:4c:df:e1:e5:bf:d5:46:ce:99:23:89:09:
                    0e:64:10:b6:84:d8:36:a9:63:44:1b:dc:39:6b:ca:
                    2e:67:94:52:42:53:0c:94:ab:9b:9d:c3:31:ce:1a:
                    99:c7:e7:e8:ec:b4:7c:8d:7d:81:d4:e5:2b:1e:d2:
                    74:7d:95:4b:46:fd:a5:27:71:97:17:aa:f0:64:28:
                    10:d0:0f:4a:84:24:cd:7e:92:46:76:8b:87:cb:aa:
                    c4:df:2a:db:d7:8b:5d:2d:b0:21:59:72:24:54:93:
                    d4:a4:43:06:b1:91:5c:20:a7:7a:69:d7:f9:04:b3:
                    24:58:9f:46:d9:7b:e9:8b:ff:68:01:0a:cc:a7:c9:
                    4c:57:65:8d:c5:b5:1b:74:b7:94:dc:d6:8f:a5:f6:
                    2e:67:2f:bb:cf:a1:5d:24:4c:2d:99:99:28:a2:83:
                    2f:9c:2b:33:12:1c:af:65:6d:7c:a5:ae:83:b6:8e:
                    18:b2:97:d5:8a:0d:5e:6a:79:3c:e6:f1:95:34:a8:
                    ec:b5:c9:03:ef:cd:24:08:81:45:6c:2e:18:93:f7:
                    80:de:a9:92:70:60:60:4b:c1:ea:39:8a:ea:00:b2:
                    ef:23:50:9c:28:7b:21:63:da:e9:5e:b1:80:ef:8f:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:D2:14:17:57:48:87:49:5C:4A:5A:7D:BD:C0:4F:1D:E9:0F:53
            X509v3 Authority Key Identifier:
                keyid:4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130362e302f32332d3233203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:08:c3:42:db:9e:fd:a6:e7:41:fd:bd:8c:93:a7:70:03:
         97:72:b5:2c:6a:98:f0:c6:2e:92:f1:a4:fb:61:e3:c5:1f:bd:
         3c:44:c9:cc:65:1f:ab:52:31:16:98:fd:04:8b:9b:65:c0:c7:
         8b:e1:eb:a0:ae:cc:b0:da:41:4b:1b:3d:13:85:6b:c5:85:99:
         17:47:fd:22:b0:af:54:24:81:4c:77:62:a9:c9:d7:9c:48:16:
         c5:c9:5a:ed:ab:33:5d:e8:4c:d3:29:9f:1f:f3:19:ad:dc:84:
         5d:02:cf:6d:97:14:a0:c0:f3:36:e5:c8:1e:f1:63:48:8f:8c:
         21:5a:5b:e3:f1:24:6c:5b:ad:dc:a5:76:02:1e:0f:2a:38:69:
         da:d7:05:49:2d:31:81:7e:cd:d3:c1:cd:e0:aa:0c:4f:db:ec:
         9d:9c:44:27:cf:00:8f:59:9b:40:04:b3:ae:3f:1a:00:00:a2:
         45:e7:d3:11:b8:2c:13:f1:dd:9f:b5:61:0b:86:75:5d:b3:5e:
         6b:ee:e8:18:57:44:56:80:a9:5d:c8:1b:e3:90:6d:33:d4:5a:
         69:75:3d:b5:25:b4:3a:af:76:75:33:45:fc:2d:21:ea:ea:13:
         b6:22:0d:5f:61:bd:f1:80:58:00:f9:89:24:45:59:10:2f:f0:
         ce:c5:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:52 2025 by rpki-client