Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133312e302e33362e302f32322d3234203d3e203631383639.roa
File:                     3133312e302e33362e302f32322d3234203d3e203631383639.roa (raw, json)
Hash identifier:          qqmoc/mCwk8/qZmMrgPgadFk5hcj1oFTVBnQuSivKHc=
Subject key identifier:   F5:59:33:BC:F3:BC:80:58:7C:EF:AE:8D:33:31:4A:0A:A5:87:5B:3C
Certificate issuer:       /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial:       0982FE9F0A5879C8DE7E915CEA1B907674135139
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133312e302e33362e302f32322d3234203d3e203631383639.roa
Signing time:             Thu 06 Mar 2025 18:52:22 +0000
ROA not before:           Thu 06 Mar 2025 18:47:22 +0000
ROA not after:            Thu 05 Mar 2026 18:52:22 +0000
asID:                     61869
IP address blocks:        131.0.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:fe:9f:0a:58:79:c8:de:7e:91:5c:ea:1b:90:76:74:13:51:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
        Validity
            Not Before: Mar  6 18:47:22 2025 GMT
            Not After : Mar  5 18:52:22 2026 GMT
        Subject: CN=F55933BCF3BC80587CEFAE8D33314A0AA5875B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:d3:f9:3c:29:3c:67:5c:e9:79:89:53:c7:
                    c9:ed:78:2d:6b:44:7e:6d:90:e3:78:1a:73:49:11:
                    a6:a2:49:44:31:46:73:01:62:e1:31:2d:f8:da:b4:
                    e6:21:d0:87:cc:b7:eb:cb:41:37:c1:bd:85:e0:ae:
                    ff:62:07:17:88:3e:a1:e5:c7:87:6e:70:6c:36:ad:
                    14:22:83:55:c5:db:86:88:99:8a:7e:e7:98:7b:f6:
                    17:60:33:db:bf:a7:df:33:ec:e8:ff:31:d0:39:9a:
                    1d:09:5b:13:f0:2f:d8:eb:57:ae:12:6b:38:41:3e:
                    9e:66:15:69:90:46:f4:d6:5d:ff:a7:74:b4:81:49:
                    c8:67:6d:66:f4:b2:b1:b4:c5:6f:08:80:e1:b8:e9:
                    eb:cc:d1:bb:71:77:de:f4:6d:05:92:79:57:65:b9:
                    12:48:a4:d3:d1:ad:16:71:75:19:80:86:9b:c9:ad:
                    bb:b8:cb:d1:a7:e2:8f:3f:62:d1:cc:5e:9d:3f:c9:
                    e7:3b:4e:f4:d2:59:24:c4:e8:21:d3:b5:59:19:5d:
                    24:7a:5c:bd:26:26:7e:63:5e:87:66:1d:df:a9:4e:
                    5e:af:b0:29:14:a1:7d:36:af:5a:19:47:96:3a:d6:
                    16:e2:97:33:4a:48:0f:5f:c9:76:c5:3f:f3:26:71:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:59:33:BC:F3:BC:80:58:7C:EF:AE:8D:33:31:4A:0A:A5:87:5B:3C
            X509v3 Authority Key Identifier:
                keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133312e302e33362e302f32322d3234203d3e203631383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:47:ce:41:b4:a9:30:fc:26:7e:b1:fc:9c:f1:37:f8:13:68:
         de:aa:a4:1e:ff:23:31:8c:d6:76:28:10:28:80:65:0c:8a:8e:
         fc:60:2b:49:e4:ae:2c:06:f4:90:81:0a:ce:6c:64:94:ee:dc:
         30:6d:52:65:c3:42:82:b2:f1:84:ef:99:dd:b0:7f:fe:91:9f:
         64:47:54:e2:eb:0b:35:7d:ac:a0:af:0e:2a:c6:30:fb:84:9c:
         2b:4c:62:51:d5:a1:c2:83:11:fd:f7:8c:dd:4a:be:5c:12:6f:
         ed:f3:b6:c4:13:b3:b1:94:52:21:55:1b:ce:8b:9d:e4:c3:ac:
         84:02:b7:1c:cd:bd:b1:7f:65:4d:45:fd:1e:48:f9:22:cd:a3:
         89:00:61:3f:47:e9:8c:2d:a4:58:9b:fa:5b:d1:da:73:20:b0:
         e3:29:d8:05:14:58:ab:ec:45:75:36:cc:2b:94:7c:e0:2e:e0:
         e5:e4:fe:e6:e7:3c:71:ef:14:1b:02:f6:ea:54:94:59:d7:8a:
         d8:62:91:57:70:cd:d3:c2:61:8d:cf:31:8b:c4:41:df:ee:44:
         96:97:61:2f:13:43:a5:ca:16:c4:b8:75:07:22:0a:70:36:9b:
         90:0d:66:f4:b7:14:01:f9:4a:3a:28:6f:a9:90:46:e8:45:ef:
         29:13:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:27 2025 by rpki-client