Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
File:                     3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          ynBtHPcLtRaOX/bcqqLO7Ian6/0hMfCVEb7W3uNtFBg=
Subject key identifier:   3F:3D:6E:A6:D3:0A:EF:F6:31:7B:74:63:97:43:5D:83:7D:87:2C:81
Certificate issuer:       /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial:       19D0196BCB3ACAAE46D4C959972D10A3252CF594
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
Signing time:             Sat 15 Feb 2025 22:36:51 +0000
ROA not before:           Sat 15 Feb 2025 22:31:51 +0000
ROA not after:            Sat 14 Feb 2026 22:36:51 +0000
asID:                     263424
IP address blocks:        131.108.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d0:19:6b:cb:3a:ca:ae:46:d4:c9:59:97:2d:10:a3:25:2c:f5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
        Validity
            Not Before: Feb 15 22:31:51 2025 GMT
            Not After : Feb 14 22:36:51 2026 GMT
        Subject: CN=3F3D6EA6D30AEFF6317B746397435D837D872C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:3b:2e:5f:72:ee:e0:e5:ac:3a:aa:63:e6:
                    0e:ec:14:65:29:3b:00:54:aa:64:df:68:ad:5d:4c:
                    fe:ac:71:9d:50:29:9e:cf:61:d3:b9:2e:f4:49:d2:
                    ae:d1:e0:9e:11:52:a1:2c:a1:a0:64:32:04:51:07:
                    ed:e5:e9:5d:e7:88:f2:da:75:26:dd:68:c7:e4:fd:
                    6b:b8:7e:11:da:6a:5d:1b:d3:0b:51:7a:b0:5e:c7:
                    cf:9f:a4:ac:61:ac:71:7a:6d:e8:f1:b5:d8:bd:ad:
                    18:0c:b4:a9:de:d8:17:c4:61:75:fd:e8:25:2c:eb:
                    5a:26:91:dc:3b:13:1a:c0:9f:77:2d:69:f3:8f:fc:
                    57:c8:1b:fe:bc:83:37:59:44:5d:40:37:98:d5:06:
                    c1:44:78:3d:ed:8b:8b:7c:bf:eb:4a:08:d4:b8:02:
                    50:53:fa:93:4d:e3:c8:8b:fd:57:a9:3b:99:b4:ff:
                    ba:3f:c0:c6:5c:c1:48:87:0d:5a:02:fc:4b:58:0b:
                    01:d4:06:bf:b0:a1:06:4d:e6:8e:91:74:cf:60:6f:
                    73:60:c0:e8:92:d8:bd:1f:95:8d:4e:76:bd:d0:5d:
                    2b:46:b4:ed:61:c0:c1:cd:3e:a2:28:e5:1a:ee:18:
                    58:d3:7e:a9:ce:c0:98:1b:e5:51:7c:39:af:0c:54:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:6E:A6:D3:0A:EF:F6:31:7B:74:63:97:43:5D:83:7D:87:2C:81
            X509v3 Authority Key Identifier:
                keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:a8:eb:2b:03:e9:eb:81:5e:25:b0:e3:5a:64:4c:f3:ca:29:
         d4:fe:23:21:1a:a4:2a:7c:be:a0:56:34:a1:59:7d:e2:bc:dc:
         d5:61:b5:c5:a2:62:6b:2c:39:ff:08:c6:28:46:ad:39:1d:61:
         d8:43:63:89:35:df:1c:47:03:98:4e:7a:9c:c4:3a:c5:38:40:
         10:ad:f7:87:f4:d1:0f:02:9f:02:9e:15:c3:78:29:1f:06:ec:
         b4:c2:31:ca:02:a3:7e:f1:9c:38:71:0e:20:3f:63:82:10:b4:
         69:43:93:8d:5b:16:01:f0:7d:bc:09:95:21:a0:44:98:e1:5e:
         60:7f:bd:aa:a9:07:94:3a:ff:39:e7:74:0d:1b:af:d3:7f:3e:
         cf:db:b9:77:33:5e:f7:f2:cd:66:5e:8f:29:ed:0f:7c:bc:8c:
         41:8e:74:15:c4:75:c5:58:09:d7:3e:76:00:e4:b7:7c:70:1a:
         21:43:31:3f:b8:b4:25:fb:4c:d7:b9:c3:68:36:60:5c:44:ce:
         76:93:46:5f:e0:75:8b:eb:e7:95:6c:01:a7:03:b1:1f:75:61:
         16:16:22:97:02:e9:00:f7:b6:5d:bd:12:4a:c8:60:13:87:7c:
         c7:d7:b6:11:21:8e:3c:ab:71:e9:03:80:fd:34:58:44:8d:97:
         60:60:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:25:31 2025 by rpki-client