Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa
File:                     3133312e3139362e37382e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier:          DWNWWXXv+9iBnclc7tARtJf4kvNPCB8i9Z96nsKSCFk=
Subject key identifier:   AA:AB:B7:77:17:E2:C3:57:D4:93:AC:96:11:27:95:94:D5:65:BB:95
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       36C4487050C7B246702F4A1982595A3EAC9E3144
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:52 +0000
ROA not before:           Mon 14 Oct 2024 01:44:52 +0000
ROA not after:            Mon 13 Oct 2025 01:49:52 +0000
asID:                     28270
IP address blocks:        131.196.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:48:70:50:c7:b2:46:70:2f:4a:19:82:59:5a:3e:ac:9e:31:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:52 2024 GMT
            Not After : Oct 13 01:49:52 2025 GMT
        Subject: CN=AAABB77717E2C357D493AC9611279594D565BB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:87:b7:30:95:3d:3c:43:83:d4:1a:e8:a0:
                    2f:76:5f:93:51:05:5b:fc:01:50:06:e5:02:67:36:
                    b6:dd:8d:f7:e6:ec:c4:6b:26:e9:4a:57:0d:04:87:
                    47:ef:86:3c:e5:96:2e:7e:f0:32:01:9a:08:f1:f6:
                    4c:5b:6b:bf:18:87:9e:b6:12:15:d9:c9:e6:83:e3:
                    0b:85:72:29:56:6b:6d:22:70:65:8f:93:67:bb:de:
                    05:ff:6b:91:1c:d1:ba:b7:f3:d6:89:e1:55:9d:69:
                    85:42:d5:7e:8c:8e:17:db:9e:3f:9d:91:04:26:ba:
                    05:3d:da:56:56:85:9a:91:e1:34:7d:86:c2:88:cf:
                    68:14:35:f8:35:4a:56:61:80:7a:7f:b0:7d:70:6a:
                    b9:89:79:7d:bc:8d:83:a4:e7:01:53:00:ef:c7:6c:
                    63:a5:1e:2a:81:af:e7:b5:43:57:66:2c:06:63:9b:
                    c2:c0:67:7e:ef:be:a6:62:c0:39:75:2a:66:4a:93:
                    75:9a:68:58:fa:66:d2:d8:c1:f5:ac:db:56:d0:ed:
                    16:1e:e7:19:c0:c2:23:c4:0f:d4:9b:e5:bf:b9:7f:
                    3f:33:ce:18:d1:f1:b0:fb:18:c5:2c:8c:1b:25:7d:
                    36:3a:e4:61:23:d6:fb:7b:30:b0:ae:e1:89:da:93:
                    91:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:B7:77:17:E2:C3:57:D4:93:AC:96:11:27:95:94:D5:65:BB:95
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37382e302f32332d3233203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:00:53:5f:a8:88:d3:0d:a6:b3:e3:33:66:4b:15:5d:9c:
         45:c9:e0:3a:f8:10:89:ac:98:bb:e5:ba:02:68:44:ec:cc:d9:
         dc:00:bc:67:37:0e:7a:fb:af:78:32:dd:10:47:bb:d4:1a:ce:
         2d:51:4b:b5:1e:4d:5e:0c:6f:c0:54:db:fc:d2:9f:3e:02:7c:
         d9:62:d4:fb:89:70:32:75:fd:e9:af:5f:ff:58:49:b8:75:21:
         ff:a5:16:bd:59:d2:8b:1e:17:ba:72:cb:f1:af:f9:43:ec:74:
         c6:83:fe:8e:e4:85:b5:2e:02:99:4b:c0:96:c2:98:a9:5f:ed:
         3f:12:fa:de:fe:bf:b4:ef:5c:40:bc:8d:72:c0:3f:e5:50:96:
         7a:35:cf:8a:dd:46:08:56:9a:26:1e:05:b0:47:5b:56:5f:ea:
         59:8d:39:4e:e5:05:f5:7e:5f:8d:7d:dc:b1:cb:63:12:cb:c3:
         3f:d1:cf:61:b7:be:75:3c:30:e0:ca:b5:25:b0:7c:d3:75:11:
         92:f9:13:3a:59:e1:a4:45:67:b8:fb:47:cb:28:07:94:41:0b:
         01:bf:b4:e3:f1:88:54:85:49:02:00:e5:ce:a4:1a:e5:3a:ab:
         ab:68:99:52:9e:36:bd:71:d3:0c:92:46:63:61:5f:54:66:6f:
         d5:d7:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:49 2025 by rpki-client