Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32342d3234203d3e20323635393330.roa
File:                     3133312e3139362e3138342e302f32342d3234203d3e20323635393330.roa (raw, json)
Hash identifier:          QY5paOxxbfoxgqpiac35vKCMA06VTfFJ4YtVdB3hfK0=
Subject key identifier:   4A:65:6A:43:BA:AB:2E:B1:A3:AE:35:D5:DC:A9:CF:05:87:6F:62:1E
Certificate issuer:       /CN=3233E2EDC348AC978221BFAE80C08A1A69277683
Certificate serial:       6F7E250A61B9C9FAEBBB0F7BC932CAD306490AA1
Authority key identifier: 32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32342d3234203d3e20323635393330.roa
Signing time:             Mon 06 Mar 2023 19:07:16 +0000
ROA not before:           Mon 06 Mar 2023 19:02:16 +0000
ROA not after:            Mon 04 Mar 2024 19:07:16 +0000
asID:                     265930
IP address blocks:        131.196.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7e:25:0a:61:b9:c9:fa:eb:bb:0f:7b:c9:32:ca:d3:06:49:0a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3233E2EDC348AC978221BFAE80C08A1A69277683
        Validity
            Not Before: Mar  6 19:02:16 2023 GMT
            Not After : Mar  4 19:07:16 2024 GMT
        Subject: CN=4A656A43BAAB2EB1A3AE35D5DCA9CF05876F621E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:a0:43:01:03:ed:de:54:de:f7:9c:c6:be:
                    38:b3:99:bf:44:14:3a:47:e9:17:7f:fd:22:0c:3f:
                    20:cf:71:a3:3b:e9:76:20:1e:a7:79:69:61:bd:c2:
                    fa:79:e3:df:c0:9f:8f:ef:f5:9e:db:52:70:21:48:
                    ce:4f:9f:04:30:5b:ed:12:7c:9b:4c:12:55:81:50:
                    9a:79:c2:62:43:3d:3a:fd:85:b3:91:f4:2b:c5:dc:
                    21:bf:da:6b:cf:18:83:6a:bc:7a:f3:74:c5:0e:7a:
                    f3:d9:80:d5:56:a8:be:22:f2:11:e0:b0:b0:e0:81:
                    12:97:02:cc:49:1c:6d:9c:1a:53:42:81:8c:bb:8b:
                    0a:8b:09:b5:1c:80:31:a9:ec:a9:29:8a:a8:69:cc:
                    ba:e6:f4:7e:d9:73:7d:b7:28:8c:8f:d4:42:cd:b5:
                    96:26:87:a2:b3:23:a7:9b:c1:c1:8d:83:83:6e:22:
                    a1:e1:9d:ef:3f:27:ab:97:42:b6:6f:cb:2b:de:b8:
                    bd:bb:11:1a:c8:43:95:a0:5a:7a:09:92:33:01:14:
                    4a:46:fc:a1:bb:b5:1f:5d:a5:e2:09:7a:40:26:a2:
                    55:6e:7c:f7:9e:ce:8b:d0:f2:00:d1:f3:82:7b:fc:
                    4d:7d:02:cd:cb:88:65:d7:1b:2a:8c:66:f1:9b:59:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:65:6A:43:BA:AB:2E:B1:A3:AE:35:D5:DC:A9:CF:05:87:6F:62:1E
            X509v3 Authority Key Identifier:
                keyid:32:33:E2:ED:C3:48:AC:97:82:21:BF:AE:80:C0:8A:1A:69:27:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3233E2EDC348AC978221BFAE80C08A1A69277683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3233E2EDC348AC978221BFAE80C08A1A69277683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/0/3133312e3139362e3138342e302f32342d3234203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:81:e0:72:94:22:49:f3:1e:19:3f:41:e3:56:18:16:b7:38:
         a6:10:59:09:bd:60:38:3b:15:c8:54:8e:8a:fa:62:25:5c:d8:
         39:ea:76:73:c9:3a:f7:79:4a:f2:0a:de:11:21:c0:7a:96:bc:
         d2:31:88:05:af:74:78:30:da:d9:30:dd:d5:30:a1:a2:1c:ec:
         85:ec:e2:33:41:6e:d7:0e:c7:fd:a1:64:e3:c0:37:79:06:d5:
         ea:78:dd:cd:ed:12:4e:65:c5:1c:4a:d8:24:f8:10:74:de:0e:
         36:78:96:50:1e:6d:c2:b5:04:5a:ee:96:86:20:84:1d:2f:c9:
         d9:b4:7a:6b:64:1c:20:cd:6f:33:80:38:96:4d:ad:d9:db:2e:
         88:79:f0:e2:e5:c1:72:9e:48:26:38:bc:a5:45:cb:02:e6:60:
         80:99:54:0f:b7:fe:a4:4b:4c:a1:21:1f:bf:d5:f0:e9:81:32:
         a4:72:37:0b:47:d1:fe:50:3b:aa:8e:86:a6:e1:7b:98:99:70:
         64:67:10:dd:6d:f3:44:ec:a3:d4:6e:79:7d:d1:75:38:f2:53:
         a9:79:ee:d8:e3:9b:1c:0a:d6:9b:5e:19:c0:ba:03:e2:c5:bb:
         2b:41:0e:1f:bd:45:9a:92:f1:51:d6:90:1a:dc:5e:0d:91:3b:
         f7:36:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:20 2025 by rpki-client