Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/3133312e3235352e3132342e302f32322d3232203d3e20323633323937.roa
File:                     3133312e3235352e3132342e302f32322d3232203d3e20323633323937.roa (raw, json)
Hash identifier:          Z2X25xnpkg8R0wkgvPkYrJqPWKe1kHUH5aI3pBj2fOw=
Subject key identifier:   FF:70:F9:FA:5A:E9:57:75:EF:C4:35:1D:89:A9:94:57:43:F3:6E:D7
Certificate issuer:       /CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
Certificate serial:       23F154906133C7A7FB2C9954FD9C21DF0EAD1B83
Authority key identifier: 7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/3133312e3235352e3132342e302f32322d3232203d3e20323633323937.roa
Signing time:             Tue 09 Aug 2022 21:07:04 +0000
ROA not before:           Tue 09 Aug 2022 21:02:04 +0000
ROA not after:            Tue 08 Aug 2023 21:07:04 +0000
asID:                     263297
IP address blocks:        131.255.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f1:54:90:61:33:c7:a7:fb:2c:99:54:fd:9c:21:df:0e:ad:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A09C5FAC16CC8DD19A26F03BA7F863A3003602F
        Validity
            Not Before: Aug  9 21:02:04 2022 GMT
            Not After : Aug  8 21:07:04 2023 GMT
        Subject: CN=FF70F9FA5AE95775EFC4351D89A9945743F36ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:d7:77:0d:8a:90:e7:f4:c0:6e:51:c5:96:
                    ab:4d:86:5d:f0:ad:01:8e:65:43:0a:31:ee:2e:e2:
                    1f:5b:a8:38:95:da:d0:cc:b8:4b:dc:f1:2e:47:40:
                    9a:34:1f:39:b3:d3:ff:39:3e:b7:11:23:02:30:57:
                    5c:7c:e8:3a:6c:30:47:33:1e:37:cd:bb:63:a3:28:
                    2e:ce:11:83:cc:3b:11:94:7b:6a:07:ea:c4:8c:ba:
                    69:b2:00:88:11:3b:92:19:60:70:a3:cb:6b:02:88:
                    a3:27:b2:15:ba:0a:ba:ae:1d:df:54:05:9c:fa:ce:
                    b2:59:b9:0a:ee:a5:eb:08:6e:8f:01:fc:a2:43:90:
                    18:c8:c0:29:0d:78:ab:00:16:74:d2:72:55:a4:7d:
                    f0:f8:c9:15:0a:a1:ba:60:30:44:cf:40:4b:98:3a:
                    f3:20:42:a5:6b:b3:42:b2:75:07:d2:7d:90:a3:8c:
                    23:07:8d:87:40:9c:f2:ac:2f:3f:4a:38:7f:bb:b1:
                    ac:81:24:24:93:d3:18:4a:f0:fb:f2:6c:32:83:fc:
                    cc:8b:71:c2:ec:ba:b8:bb:e9:84:71:ef:a4:69:b5:
                    9d:17:6e:b8:19:d9:6e:78:ef:7e:40:e9:4a:e2:81:
                    84:a0:7d:c3:36:13:c3:42:0a:10:8e:d7:12:96:d1:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:F9:FA:5A:E9:57:75:EF:C4:35:1D:89:A9:94:57:43:F3:6E:D7
            X509v3 Authority Key Identifier:
                keyid:7A:09:C5:FA:C1:6C:C8:DD:19:A2:6F:03:BA:7F:86:3A:30:03:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A09C5FAC16CC8DD19A26F03BA7F863A3003602F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3woUakbjNDcudtZ7oMxF3CWmb4HfimZLBWBPzffDWN2P/0/3133312e3235352e3132342e302f32322d3232203d3e20323633323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:20:ea:67:d2:a7:bb:99:a3:a9:11:6b:97:8a:cd:22:fb:09:
         06:1d:8e:74:85:97:09:37:c4:38:b1:8b:59:85:4f:16:4b:ec:
         9a:e5:dd:a4:ec:a2:af:28:a0:10:9b:6d:36:3d:eb:24:8f:5e:
         d4:8f:3e:79:9d:9e:05:ba:2c:d0:c3:6f:72:95:d2:bb:14:4d:
         ad:c0:a7:2e:92:de:a4:e8:7d:56:d0:5e:2b:f8:6b:09:35:09:
         6a:d6:26:23:15:fc:fb:af:0a:90:c4:c5:9b:f9:35:b8:32:7e:
         ac:84:37:ce:ab:0c:2e:44:50:ef:03:95:87:6f:05:ae:d0:77:
         84:7a:fb:f7:37:6c:2b:96:09:e9:fa:a3:41:b3:af:ca:0f:3b:
         78:a0:6a:de:8f:d4:1e:e2:0f:f3:29:47:2d:e9:e7:37:d5:59:
         0c:b3:6e:36:15:96:36:5a:33:87:e4:21:3a:13:29:72:bd:8e:
         ea:ab:07:2d:b1:86:a9:a6:68:6b:f7:5a:da:0c:0b:c9:33:7a:
         d3:ca:9f:57:ae:0e:59:28:6c:cf:de:7f:f7:92:2a:ac:2d:ae:
         56:0b:c8:7b:8f:29:f5:5e:b8:5a:08:70:a1:a6:67:27:09:e6:
         a4:4b:73:78:08:89:99:e4:4d:d1:4d:6f:2b:db:15:a4:a7:71:
         eb:f8:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:09:28 2025 by rpki-client