Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37382e302f32342d3234203d3e203631363636.roa
File:                     3133312e3130382e37382e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          Uvh/SwTbjvZgckVK2CrYCRzSOmRRQgx2Z5o77F0eeWk=
Subject key identifier:   53:C3:25:6C:3F:97:25:1F:BD:10:07:AA:F0:7A:B5:2B:DC:CD:9D:1F
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       43919711078BC579D924238BDB782C086394A688
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37382e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:54 +0000
ROA not before:           Thu 14 Dec 2023 13:15:54 +0000
ROA not after:            Thu 12 Dec 2024 13:20:54 +0000
asID:                     61666
IP address blocks:        131.108.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:97:11:07:8b:c5:79:d9:24:23:8b:db:78:2c:08:63:94:a6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:54 2023 GMT
            Not After : Dec 12 13:20:54 2024 GMT
        Subject: CN=53C3256C3F97251FBD1007AAF07AB52BDCCD9D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:16:2d:71:7e:ce:bc:aa:bb:9b:65:37:a2:
                    92:c6:c5:d8:07:02:00:05:bb:22:e5:0f:51:54:66:
                    2a:24:8f:df:36:aa:fa:f2:82:f3:a0:e4:fe:a7:1a:
                    1f:50:16:a7:d3:ba:e1:0d:e7:59:ff:32:16:d9:ce:
                    b1:13:18:4b:70:cc:25:64:72:fa:4d:3a:a8:77:ef:
                    b3:fc:3e:01:e6:90:ba:b9:78:9d:4f:d3:28:a0:de:
                    83:93:68:b0:cf:d3:be:dc:ce:36:62:fc:7a:b3:c3:
                    35:23:41:50:90:21:f8:76:de:83:ca:ce:b1:83:fd:
                    a2:fd:a1:6e:d9:90:43:de:48:25:cc:1c:47:4a:b9:
                    31:cc:46:0d:5a:ab:1e:3f:d6:ff:b6:fc:a8:8c:3c:
                    4f:bf:1c:af:97:0d:fa:7f:50:47:ce:db:ff:58:34:
                    1a:b6:d9:cd:55:a9:eb:20:b8:fa:24:1f:b5:d7:2a:
                    77:c5:94:c1:34:11:e6:2c:68:03:b7:fc:36:86:3b:
                    70:a2:53:09:45:19:7e:e6:cc:3b:db:4e:5a:16:6a:
                    2f:40:5e:69:44:df:f6:df:62:53:fd:02:8d:d7:62:
                    61:01:35:30:15:8f:43:b0:c9:67:f6:71:e3:1b:0b:
                    ea:f9:ec:2d:c8:fe:dc:75:06:0c:50:79:9b:f7:d2:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:25:6C:3F:97:25:1F:BD:10:07:AA:F0:7A:B5:2B:DC:CD:9D:1F
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133312e3130382e37382e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:78:a5:4c:42:31:ee:40:f0:ce:d4:b4:8a:1d:34:4d:81:c0:
         e4:77:e4:be:ed:b5:2b:5a:d6:6c:69:3c:57:6a:aa:df:ea:1d:
         e6:d9:46:94:7b:7c:41:a0:cc:24:f6:19:31:d0:30:e2:3c:00:
         7c:e0:32:88:52:75:68:73:7c:9c:d4:59:b8:a2:a8:69:67:9b:
         4a:ee:a2:a0:42:27:0d:ff:c7:55:c6:6f:5b:7e:16:c0:45:f4:
         a9:90:a2:68:e8:0c:1d:48:d7:7e:1a:05:78:c0:e3:01:e3:d1:
         4b:a0:cd:f4:ae:6d:6e:a2:1c:4f:d6:48:58:40:46:35:3c:3d:
         e9:39:70:3f:17:8b:55:ee:db:00:b2:ba:28:99:b0:c7:fe:89:
         8e:6d:42:4a:8b:62:3e:b4:bd:00:26:1b:ac:f5:bb:71:2e:02:
         64:ac:9b:e3:ca:fd:69:85:b2:37:67:24:f6:24:21:ef:6c:63:
         8c:21:d6:fc:13:2e:7b:c4:a4:be:a4:cb:40:d6:44:7d:7c:5d:
         b3:57:3d:97:a9:ae:44:8b:6f:18:43:56:22:18:e1:1a:34:90:
         75:e9:f3:77:f5:42:85:90:ea:ae:f0:7e:9e:6b:27:e7:7d:ab:
         43:89:c0:ec:c8:11:b9:05:c3:85:1a:4f:ee:9b:21:9c:7d:be:
         20:10:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:16 2025 by rpki-client