Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3232203d3e203631373531.roa
File:                     3133312e37322e3235322e302f32322d3232203d3e203631373531.roa (raw, json)
Hash identifier:          T3efE1HQhIlkRMKkqXDdM0Wx4WwSpSFfQNOzjnftRVo=
Subject key identifier:   1D:C5:05:D6:35:40:84:41:32:F4:44:91:0C:B0:2F:7B:5C:61:C4:9E
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       0D9BD902D40058C1101CE3C6189898BAF7DAAF86
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3232203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:38:50 +0000
ROA not before:           Fri 15 Sep 2023 20:33:50 +0000
ROA not after:            Fri 13 Sep 2024 20:38:50 +0000
asID:                     61751
IP address blocks:        131.72.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9b:d9:02:d4:00:58:c1:10:1c:e3:c6:18:98:98:ba:f7:da:af:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:33:50 2023 GMT
            Not After : Sep 13 20:38:50 2024 GMT
        Subject: CN=1DC505D63540844132F444910CB02F7B5C61C49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:20:d2:75:2a:ca:6e:d8:7f:95:40:a4:1b:
                    b3:f1:77:82:47:63:77:3b:aa:28:15:6f:09:ee:02:
                    5d:e4:51:24:4d:61:0a:7e:17:65:1f:1f:a4:34:57:
                    fe:ec:43:1b:f1:6c:18:70:90:48:ba:50:9f:51:40:
                    3c:65:75:55:82:05:13:d7:d1:5f:71:cb:d6:ec:9b:
                    7a:b8:cb:e2:29:58:98:92:a7:e6:8a:c7:c6:0d:76:
                    75:47:2d:70:53:80:3a:aa:dc:cd:b4:4d:8e:db:84:
                    b4:a2:cf:55:a4:07:95:75:cc:78:7e:45:a1:70:9c:
                    45:7f:bd:5c:bb:c6:17:44:9f:55:dd:e8:6a:34:58:
                    58:bf:b4:dd:86:d7:0d:98:08:9c:7b:1c:45:12:66:
                    1c:d3:e6:d5:5b:2d:e3:cf:09:57:6d:7a:e1:ce:62:
                    64:c6:7f:1c:9b:e4:e2:f6:ff:76:ae:cd:19:32:88:
                    5f:b8:aa:c9:97:6a:51:1e:15:fb:de:9a:dc:df:27:
                    f4:88:e4:64:0a:6b:09:08:86:6b:65:43:3c:54:c2:
                    74:1d:7c:be:70:47:7c:36:d1:29:41:dd:24:fd:a2:
                    77:73:68:8a:00:c4:6a:ee:04:06:98:e5:c2:ef:d5:
                    64:6e:5e:87:ff:64:29:b1:69:4d:27:af:6b:70:1c:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:05:D6:35:40:84:41:32:F4:44:91:0C:B0:2F:7B:5C:61:C4:9E
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3232203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:29:29:b0:16:cb:ea:13:a2:0f:74:f5:6b:50:74:1c:02:
         63:13:82:67:bf:a2:94:2b:8f:61:f6:d2:e7:52:d0:83:59:db:
         fc:1b:91:fc:06:f0:54:30:4c:26:1f:46:ef:7c:01:56:33:76:
         33:40:a2:13:86:df:e4:8f:0a:dc:e6:1b:80:e2:63:9f:a2:7f:
         df:d7:4e:f0:1d:15:00:f2:10:dd:04:b1:cd:b2:18:2d:7f:7b:
         32:14:dc:c7:24:47:54:0b:4b:c2:d9:e5:ea:35:2a:a5:67:7c:
         d5:f1:16:6a:b4:f5:0e:02:83:7b:17:68:13:ec:91:6d:7b:4f:
         77:45:e0:f3:f1:21:e9:6d:6f:bd:3b:52:12:3b:3a:d3:73:9b:
         d1:d6:2b:cb:d3:ad:b4:3d:47:82:9f:cc:f7:7b:02:35:29:9a:
         86:0f:b7:17:91:7a:a4:f9:ae:ff:1e:0e:9e:48:29:6a:78:6a:
         24:85:d2:4f:c8:32:7e:82:89:61:e5:76:97:02:83:25:32:c1:
         32:bd:1e:b1:7e:73:75:ea:7c:b5:54:3e:c8:b4:52:54:66:7b:
         34:aa:2b:ac:fb:94:9e:4e:ae:64:23:e7:89:b0:36:e8:0c:8e:
         f0:39:fb:b0:a9:00:88:9f:b6:1c:32:87:5d:86:56:ec:74:d9:
         f1:91:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:29 2025 by rpki-client