Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
File:                     3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          uB2oq3PlS4muGLyRVjc4MLYfZXfA5DSKVSc78U5spug=
Subject key identifier:   5A:E7:45:DF:3D:CC:C4:CF:67:2B:12:8C:F3:0D:E1:F5:AC:A2:69:69
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       520C9EA47EE96F47BC61989DE2073E1390C42CBC
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 26 Mar 2025 14:49:36 +0000
ROA not before:           Wed 26 Mar 2025 14:44:36 +0000
ROA not after:            Wed 25 Mar 2026 14:49:36 +0000
asID:                     61684
IP address blocks:        131.108.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0c:9e:a4:7e:e9:6f:47:bc:61:98:9d:e2:07:3e:13:90:c4:2c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Mar 26 14:44:36 2025 GMT
            Not After : Mar 25 14:49:36 2026 GMT
        Subject: CN=5AE745DF3DCCC4CF672B128CF30DE1F5ACA26969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:f3:48:f8:12:23:9b:04:6d:de:b8:33:75:
                    24:be:5c:5f:f8:1a:b1:1f:4d:f7:7d:20:e9:4e:c7:
                    b0:a7:44:31:79:6a:87:92:74:0f:9d:fa:cb:d5:a8:
                    66:fb:5c:7d:e5:3d:8d:10:b5:53:ba:14:15:ac:36:
                    7c:12:95:c8:96:4f:b1:42:6a:91:8b:ac:91:3d:7e:
                    2a:e2:b9:9e:cf:54:ae:a6:f5:14:e4:b3:de:41:00:
                    2a:af:bb:1e:10:69:6b:61:ea:8c:e6:4f:8f:11:02:
                    ae:f0:f1:33:5b:d0:b8:d1:d9:e8:82:f6:c6:e6:e8:
                    e8:3c:f4:5b:bd:59:9f:32:4a:d2:d5:33:8c:eb:b7:
                    cf:3c:cf:3c:1d:2d:d9:61:2f:75:c4:42:59:a8:6b:
                    96:c1:cc:ee:e5:75:25:ad:d9:2a:73:a3:df:72:53:
                    2b:a2:5d:32:f3:cd:5b:34:5c:ec:cc:85:bc:a9:f6:
                    e9:78:c0:34:60:5d:02:34:e5:54:6c:e9:63:26:4a:
                    40:2f:52:0a:2d:8e:13:0c:8f:e7:3a:36:e7:cd:ef:
                    1b:e9:79:93:e3:69:49:c3:52:48:c9:0c:d3:c1:26:
                    ce:75:59:3b:ae:fa:34:f9:14:d8:b3:e7:d2:6b:5a:
                    06:65:8b:9d:d7:e0:2f:17:7d:68:0f:c9:5a:f9:f0:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:45:DF:3D:CC:C4:CF:67:2B:12:8C:F3:0D:E1:F5:AC:A2:69:69
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:56:97:b7:f7:9c:6c:cd:be:8b:52:88:8e:74:88:d8:05:
         13:a4:7c:58:8a:0f:aa:f3:95:ae:7a:b2:f3:c4:29:51:8e:dc:
         39:98:7e:35:12:8e:70:c7:08:83:41:41:2f:b8:b6:91:33:95:
         29:69:0d:11:24:f9:04:f7:d1:b4:78:1e:f4:82:89:e5:d2:e8:
         64:67:1d:67:de:16:b4:a8:f9:c6:43:1a:e3:d7:5a:25:a1:a4:
         86:38:1a:8b:f5:21:c4:eb:27:e4:f8:79:3c:1c:03:ce:bf:4c:
         7b:28:cd:e0:1b:ba:e6:4f:ff:8e:8f:83:79:f4:95:4a:1c:a7:
         21:3b:61:75:c0:02:81:04:77:4c:2b:48:13:b0:05:c9:17:12:
         5b:d1:21:df:b6:0b:d4:c4:ba:0d:d3:04:93:00:d1:a0:b7:3d:
         5b:ec:3f:f5:b2:e1:4c:8b:2d:af:eb:62:f2:26:14:03:fc:db:
         55:ea:d4:e8:a1:db:16:9b:fb:81:c1:f0:86:a4:ae:d4:ee:3c:
         28:12:16:2f:9d:19:45:a7:4d:4a:e4:45:69:94:cc:79:11:37:
         77:0a:75:d5:f7:a4:02:7a:d2:2f:f1:c5:5c:3e:cd:7c:63:14:
         91:99:ee:53:3c:23:6a:02:d9:82:8e:96:58:fd:70:f6:d4:f3:
         25:11:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:59:42 2025 by rpki-client