Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa
File:                     3133312e3130382e37362e302f32322d3232203d3e203631363636.roa (raw, json)
Hash identifier:          htkh21cp79biDSuoXDNnE3nqZNBeB4gHEnliD7x1Yv0=
Subject key identifier:   F7:31:31:E9:1A:E4:63:2A:C7:B4:56:7A:E9:39:AA:0C:2D:B2:9D:B0
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       678B7A9125967ED5B612E4875619E812D6ED6ABC
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:55 +0000
ROA not before:           Thu 14 Dec 2023 13:15:55 +0000
ROA not after:            Thu 12 Dec 2024 13:20:55 +0000
asID:                     61666
IP address blocks:        131.108.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:7a:91:25:96:7e:d5:b6:12:e4:87:56:19:e8:12:d6:ed:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:55 2023 GMT
            Not After : Dec 12 13:20:55 2024 GMT
        Subject: CN=F73131E91AE4632AC7B4567AE939AA0C2DB29DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:10:0c:c2:6b:c8:48:95:58:59:9f:de:a9:
                    62:15:68:61:a9:7b:b0:2e:62:75:63:1e:a6:96:bd:
                    cd:fe:cd:57:8c:e7:01:07:18:4f:af:06:84:e5:49:
                    9d:74:c1:12:fe:d7:1d:72:86:3b:27:b3:89:bf:d8:
                    04:52:ca:55:50:0a:b6:a2:08:7c:57:6a:01:0d:be:
                    59:6a:b9:2a:03:5f:14:c1:d9:6f:17:9b:ea:6e:77:
                    43:b6:cd:db:d2:40:6a:18:4f:58:1b:9c:67:34:a3:
                    08:17:12:7c:9b:6f:3b:2b:d6:86:6b:c7:88:92:db:
                    87:25:d6:0a:73:ac:86:6c:06:e5:f0:8b:20:63:7a:
                    5e:a1:0d:9e:0a:81:cc:c0:68:9e:e6:72:44:bc:61:
                    ca:d6:58:0a:bf:0c:5a:79:bc:02:e6:7f:b3:cd:27:
                    f4:6c:ed:91:4a:ca:66:00:a5:e4:9a:ce:4b:8c:5d:
                    0e:2a:12:f6:a3:b0:6c:93:32:89:11:a7:50:07:f7:
                    5f:cb:47:01:57:c5:95:93:b1:52:cd:ae:2f:75:91:
                    1b:05:8f:82:9d:e9:86:34:a9:43:0a:66:db:54:bb:
                    1e:3f:41:f7:5a:16:15:2f:0f:e8:5e:24:f2:00:2b:
                    26:59:31:e2:e6:90:d4:62:e2:11:ec:34:83:09:66:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:31:31:E9:1A:E4:63:2A:C7:B4:56:7A:E9:39:AA:0C:2D:B2:9D:B0
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:75:bb:e3:88:3a:21:6d:4d:7e:ac:ca:fa:d4:55:69:2d:c6:
         b0:55:e6:16:ed:a6:94:51:6c:45:58:3a:ef:d1:fe:2e:0e:88:
         ac:9d:bb:61:51:3e:8f:2c:13:ca:4d:c5:0e:07:21:25:1a:27:
         d0:d8:cb:81:e4:59:f7:68:02:e5:a5:bd:49:ec:19:ab:64:fb:
         aa:7a:57:ae:60:e8:b9:2e:25:8d:92:c4:26:05:24:54:9b:14:
         98:53:25:26:af:e2:b3:43:5a:85:07:85:6d:57:f4:53:70:32:
         61:a4:a9:3b:78:9f:f5:f2:78:fb:32:6b:48:78:74:94:6d:85:
         20:09:f8:74:ac:af:00:3e:d4:c9:66:56:ca:a8:62:62:5c:a8:
         b5:09:93:c3:39:dc:4d:88:3e:98:86:fe:1a:44:06:50:75:6d:
         ec:6b:85:61:59:c7:18:85:1d:98:41:dd:0b:60:13:a6:0b:27:
         0e:43:26:31:0e:21:b0:1e:82:23:9d:42:3d:ac:6b:92:7e:96:
         52:a1:7d:6d:c7:2e:9d:2f:b2:59:c4:3c:37:3d:a6:87:8c:9f:
         56:4b:67:bd:75:49:e3:78:22:fe:32:ce:81:8d:d4:03:b0:7a:
         40:5d:98:bc:8b:99:41:bf:90:23:bd:e9:9f:df:c7:38:ad:b0:
         71:09:3e:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ4t6kSWWftW2EuSHVhnoEtbtarwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2RUNFNjg1OTQxMzgwMDQxMEQ0QzkwRDM3M0IxRUY5
ODk3MTBBRTAeFw0yMzEyMTQxMzE1NTVaFw0yNDEyMTIxMzIwNTVaMDMxMTAvBgNV
BAMTKEY3MzEzMUU5MUFFNDYzMkFDN0I0NTY3QUU5MzlBQTBDMkRCMjlEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyhAMwmvISJVYWZ/eqWIVaGGp
e7AuYnVjHqaWvc3+zVeM5wEHGE+vBoTlSZ10wRL+1x1yhjsns4m/2ARSylVQCrai
CHxXagENvllquSoDXxTB2W8Xm+pud0O2zdvSQGoYT1gbnGc0owgXEnybbzsr1oZr
x4iS24cl1gpzrIZsBuXwiyBjel6hDZ4KgczAaJ7mckS8YcrWWAq/DFp5vALmf7PN
J/Rs7ZFKymYApeSazkuMXQ4qEvajsGyTMokRp1AH91/LRwFXxZWTsVLNri91kRsF
j4Kd6YY0qUMKZttUux4/QfdaFhUvD+heJPIAKyZZMeLmkNRi4hHsNIMJZkzXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9zEx6RrkYyrHtFZ66TmqDC2ynbAwHwYDVR0j
BBgwFoAUzm7OaFlBOABBDUyQ03Ox75iXEK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVByamp6b0FVbmV5NENpdlk1eGYzZmY4b1k3WGV1Sms1VWFMYnNiOVRp
R20vMC9DRTZFQ0U2ODU5NDEzODAwNDEwRDRDOTBEMzczQjFFRjk4OTcxMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFNkVDRTY4NTk0MTM4MDA0
MTBENEM5MEQzNzNCMUVGOTg5NzEwQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQcmpqem9BVW5leTRDaXZZNXhmM2ZmOG9ZN1hldUprNVVhTGJzYjlUaUdtLzAv
MzEzMzMxMmUzMTMwMzgyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2xMMA0GCSqGSIb3DQEBCwUAA4IBAQAFdbvjiDoh
bU1+rMr61FVpLcawVeYW7aaUUWxFWDrv0f4uDoisnbthUT6PLBPKTcUOByElGifQ
2MuB5Fn3aALlpb1J7BmrZPuqeleuYOi5LiWNksQmBSRUmxSYUyUmr+KzQ1qFB4Vt
V/RTcDJhpKk7eJ/18nj7MmtIeHSUbYUgCfh0rK8APtTJZlbKqGJiXKi1CZPDOdxN
iD6Yhv4aRAZQdW3sa4VhWccYhR2YQd0LYBOmCycOQyYxDiGwHoIjnUI9rGuSfpZS
oX1txy6dL7JZxDw3PaaHjJ9WS2e9dUnjeCL+Ms6BjdQDsHpAXZi8i5lBv5Ajvemf
38c4rbBxCT7u
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:06:58 2025 by rpki-client