Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133342e302f32342d3234203d3e20323635393238.roa
File:                     3133312e3139362e3133342e302f32342d3234203d3e20323635393238.roa (raw, json)
Hash identifier:          1OwhoOfdBmlTfr1haJB5JxQCFiDfBiFlkw4Jz3r5ei0=
Subject key identifier:   17:23:7A:73:9C:BD:37:92:C2:E9:1B:E3:2C:4C:D9:DF:54:42:61:FB
Certificate issuer:       /CN=5265AD242CC40D9E4E242C25E31152E30289153C
Certificate serial:       58AE79133E2AEAD1BA0F110F4F35F7D55C1A2DE7
Authority key identifier: 52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133342e302f32342d3234203d3e20323635393238.roa
Signing time:             Sat 20 Aug 2022 00:46:21 +0000
ROA not before:           Sat 20 Aug 2022 00:41:21 +0000
ROA not after:            Sat 19 Aug 2023 00:46:21 +0000
asID:                     265928
IP address blocks:        131.196.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:79:13:3e:2a:ea:d1:ba:0f:11:0f:4f:35:f7:d5:5c:1a:2d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265AD242CC40D9E4E242C25E31152E30289153C
        Validity
            Not Before: Aug 20 00:41:21 2022 GMT
            Not After : Aug 19 00:46:21 2023 GMT
        Subject: CN=17237A739CBD3792C2E91BE32C4CD9DF544261FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:f7:32:7b:5f:4b:bd:db:92:c0:47:27:1f:
                    57:e5:54:5c:16:3a:79:20:bb:d5:5c:3d:84:45:a6:
                    0c:8e:10:f0:89:46:e9:18:ed:e7:b8:5c:b2:d3:6e:
                    4d:f5:73:ff:83:a7:5b:c1:51:99:a7:30:be:f2:24:
                    1a:14:ab:96:67:c4:c5:6c:fd:bd:9c:9b:a8:1c:f9:
                    40:c7:4a:af:49:07:57:4b:51:06:7b:b5:04:f2:c8:
                    41:7e:da:03:94:02:85:4f:26:8e:2a:8f:21:09:6a:
                    2d:38:d8:28:7c:48:29:66:0d:e0:62:57:87:5e:42:
                    11:4b:66:b8:2f:ec:8e:ff:1c:32:ad:10:43:fa:26:
                    33:9f:e4:7e:ac:24:fe:14:64:51:ab:d1:cc:08:9a:
                    52:39:f2:b9:70:b8:52:66:86:e7:46:9f:17:86:1b:
                    ea:c4:d4:5b:fe:40:0f:b8:23:e8:9a:d7:40:1e:4f:
                    dd:56:df:5e:90:50:95:fe:ca:7b:de:8d:c2:9f:75:
                    c1:fa:2a:a8:80:dd:0c:61:47:2b:a3:ea:d1:58:56:
                    90:7e:41:b5:bb:81:c4:54:48:56:2f:23:e9:78:83:
                    dc:43:71:1e:9b:19:6d:26:b1:25:71:e5:bc:77:0a:
                    73:1c:c2:f0:f1:af:0a:67:bf:24:b5:67:a6:13:54:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:7A:73:9C:BD:37:92:C2:E9:1B:E3:2C:4C:D9:DF:54:42:61:FB
            X509v3 Authority Key Identifier:
                keyid:52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/5265AD242CC40D9E4E242C25E31152E30289153C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3133312e3139362e3133342e302f32342d3234203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:28:5d:4a:52:a1:a0:24:ea:e0:33:9f:2f:3c:35:bb:d3:
         01:7d:10:ea:bd:c9:61:c9:60:8c:ff:56:1d:89:0c:c3:92:81:
         95:9f:60:cc:f6:33:56:04:c7:72:62:40:c7:b6:e9:4f:06:2b:
         db:01:be:a2:34:26:3a:e6:d2:98:a5:70:f2:66:c0:60:5e:1a:
         ce:f8:89:2e:6d:81:8b:d4:63:07:d3:bc:09:80:9b:ef:8f:7f:
         a7:6e:75:76:3e:0c:ba:ff:c9:b0:87:00:fe:e0:10:80:f9:ef:
         92:bf:43:3b:20:4e:0a:02:62:c1:4b:55:22:2c:af:95:d3:f8:
         7c:15:90:39:7d:eb:89:07:ff:7d:3b:dd:81:9b:df:7c:09:b5:
         55:fb:72:bf:3d:b6:0a:41:14:5d:55:7f:09:d9:14:a9:be:a6:
         a8:6c:60:73:f7:38:ad:38:ff:1c:8d:aa:01:b0:46:a5:ec:a0:
         e5:85:a6:cd:2e:1c:40:a4:c4:9f:05:8e:1a:ba:36:c4:76:84:
         5d:9a:44:ad:ed:ac:d2:7d:7b:a3:49:41:1b:1a:4f:7d:a5:3a:
         d5:01:5f:ae:3e:98:b1:9b:da:d3:81:6e:3b:56:a5:44:64:9a:
         af:af:72:73:88:8e:15:12:6e:1e:f8:36:bd:b2:56:28:71:a2:
         7a:55:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:05 2025 by rpki-client