Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133312e302e33362e302f32322d3234203d3e203631383639.roa
File:                     3133312e302e33362e302f32322d3234203d3e203631383639.roa (raw, json)
Hash identifier:          ivI7GFyIfcN0z+IxNB064RS6dUXlvXPgFMXzr7nHDLM=
Subject key identifier:   82:BE:26:76:A2:C8:1F:2D:D3:84:0A:C6:6C:E1:44:75:B0:F4:3F:13
Certificate issuer:       /CN=5FE811DE36B4F9CC446D3A204D0F739A65A5EF36
Certificate serial:       646CED913AA89C57D3980BD8ED100A1B38749843
Authority key identifier: 5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133312e302e33362e302f32322d3234203d3e203631383639.roa
Signing time:             Tue 22 Aug 2023 15:25:35 +0000
ROA not before:           Tue 22 Aug 2023 15:20:35 +0000
ROA not after:            Tue 20 Aug 2024 15:25:35 +0000
asID:                     61869
IP address blocks:        131.0.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6c:ed:91:3a:a8:9c:57:d3:98:0b:d8:ed:10:0a:1b:38:74:98:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FE811DE36B4F9CC446D3A204D0F739A65A5EF36
        Validity
            Not Before: Aug 22 15:20:35 2023 GMT
            Not After : Aug 20 15:25:35 2024 GMT
        Subject: CN=82BE2676A2C81F2DD3840AC66CE14475B0F43F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:99:bf:8c:3f:79:b5:0b:75:1c:3d:7a:e0:
                    10:9b:07:79:ea:09:14:56:cf:7f:37:ac:b3:66:86:
                    f8:46:20:1f:15:bd:16:6b:30:f0:4d:ee:b4:9c:15:
                    1e:2d:c0:6f:d6:ea:d0:1f:ab:78:ce:ea:bd:e1:9d:
                    61:1a:0e:64:25:b9:1a:fc:97:8b:70:6b:94:87:6c:
                    09:15:01:10:c9:b7:dd:3a:80:87:23:eb:80:2d:d4:
                    67:83:75:ff:f5:e6:f4:99:e8:65:cd:33:45:82:a1:
                    57:bb:83:29:66:61:56:e9:b1:5d:32:70:28:42:bd:
                    ed:40:ce:7a:81:8a:bc:f7:9e:79:1c:a0:7f:b6:06:
                    cf:16:d4:32:60:5e:fb:09:5d:e7:15:96:95:0a:12:
                    08:dd:fa:36:42:27:d6:df:60:22:ae:9f:ac:ff:d9:
                    15:47:60:b9:11:24:dd:18:6d:e0:c7:b2:05:88:f2:
                    c5:40:01:7e:fa:cb:2b:e1:35:13:60:9d:ca:6f:27:
                    e8:1b:46:95:af:eb:64:49:c9:40:d1:20:5b:56:4d:
                    24:4d:e3:c9:7b:4d:23:0b:0d:9e:23:52:f2:03:40:
                    26:e5:d3:2f:0f:e9:29:fa:2f:93:f7:86:ba:3d:5e:
                    94:0f:76:e7:e1:48:e4:e2:47:3f:0c:b5:c2:b9:87:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:26:76:A2:C8:1F:2D:D3:84:0A:C6:6C:E1:44:75:B0:F4:3F:13
            X509v3 Authority Key Identifier:
                keyid:5F:E8:11:DE:36:B4:F9:CC:44:6D:3A:20:4D:0F:73:9A:65:A5:EF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FE811DE36B4F9CC446D3A204D0F739A65A5EF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/0/3133312e302e33362e302f32322d3234203d3e203631383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:ea:ef:24:89:0a:78:b5:fe:79:b3:32:df:fd:84:b8:68:
         22:af:05:4e:ab:f4:c7:4f:22:9e:2f:7b:85:1a:6a:6b:77:52:
         c8:6b:4f:4c:f3:c2:a6:d8:8c:8d:43:27:8c:62:27:f1:08:21:
         f0:40:2c:fc:47:24:46:14:85:0c:a1:22:03:35:07:b1:79:a4:
         ce:d9:33:dd:13:7a:64:27:5a:65:bb:df:35:21:52:06:9e:37:
         87:2f:e0:50:63:eb:a3:0d:ff:14:b9:90:95:29:ad:e0:ac:5d:
         aa:9c:fe:b2:f1:29:55:79:49:db:be:a0:7a:74:7e:5e:db:90:
         eb:50:9d:34:f2:03:b9:c1:f2:f1:64:02:dc:00:ba:08:70:ea:
         27:40:11:13:3b:c3:a1:1f:4f:e6:8e:1f:1c:36:db:9c:dd:4c:
         8f:ab:37:b0:79:b9:41:ac:f9:f8:61:58:ee:6d:97:bb:d8:09:
         05:37:ee:fd:8f:d6:f2:84:41:11:29:40:0a:3a:e1:10:fa:09:
         30:99:58:af:fd:81:47:79:f5:2e:c3:9d:b6:3f:ad:d0:fd:7b:
         88:55:f8:d5:4c:16:02:75:75:1f:47:60:67:92:d3:cc:b9:89:
         86:47:5e:25:74:88:aa:34:4c:51:71:ff:96:98:ba:3d:5b:db:
         7e:47:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:28 2025 by rpki-client