Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32332d3233203d3e203631373531.roa
File:                     3133312e37322e3235342e302f32332d3233203d3e203631373531.roa (raw, json)
Hash identifier:          eU9MeJ+Hj0b5YJ3n1hcppJzb7G5n1h5Y08x/4mAH4yE=
Subject key identifier:   54:C3:7A:29:3B:9D:BC:25:99:FE:72:76:81:57:9F:43:F3:5C:DF:88
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       30E4C264EDF33CCEA3D2E0ECCE1972A2B735929F
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32332d3233203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:39:01 +0000
ROA not before:           Fri 15 Sep 2023 20:34:01 +0000
ROA not after:            Fri 13 Sep 2024 20:39:01 +0000
asID:                     61751
IP address blocks:        131.72.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e4:c2:64:ed:f3:3c:ce:a3:d2:e0:ec:ce:19:72:a2:b7:35:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:34:01 2023 GMT
            Not After : Sep 13 20:39:01 2024 GMT
        Subject: CN=54C37A293B9DBC2599FE727681579F43F35CDF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:da:59:5a:9b:ff:3a:e1:34:3d:39:9f:6b:
                    b6:fd:b5:bd:9b:b8:f6:b7:1b:e2:cd:f6:aa:f5:70:
                    06:33:a6:61:47:99:53:41:d0:fb:7e:83:16:52:1c:
                    72:7e:c0:8d:3e:24:d2:61:76:27:dd:14:2a:75:c8:
                    c3:2a:cb:61:85:7a:77:ae:f0:21:13:1f:69:36:1f:
                    c2:2a:56:09:47:62:a3:c8:07:08:91:b7:99:29:76:
                    cb:33:42:1c:e9:e9:64:a0:1c:42:3c:bd:f2:2a:1b:
                    b0:e8:ac:7b:db:d9:7c:f8:7a:14:cd:ec:37:68:7f:
                    bc:96:bc:67:5e:97:cb:74:be:1f:ba:bb:54:9a:1c:
                    f8:5d:0f:e7:f3:5d:06:a3:ab:0a:7e:da:0b:51:a6:
                    56:9e:43:55:6d:36:ed:48:1b:f1:02:e2:41:c1:66:
                    df:13:c9:08:a2:3f:83:75:5a:d8:85:77:1e:08:cd:
                    21:db:fa:e2:07:14:3a:43:db:83:f1:d1:73:7d:eb:
                    55:17:4e:e9:22:4e:04:f5:ea:ec:10:0c:7d:bd:bf:
                    de:99:65:93:a6:d8:3e:ce:8a:67:7a:37:6c:41:00:
                    63:b7:ea:5a:39:3a:81:d7:42:25:f1:4e:cc:fc:f5:
                    7f:6d:0c:b3:5e:69:82:c9:33:2a:5f:eb:c1:99:7c:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:7A:29:3B:9D:BC:25:99:FE:72:76:81:57:9F:43:F3:5C:DF:88
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32332d3233203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:f4:e7:72:f7:1e:fb:e6:f9:d2:11:ab:90:86:dd:ba:dd:b9:
         81:63:10:47:73:88:80:6d:e6:7c:da:33:16:c8:d0:48:95:6e:
         2a:6b:ec:bc:32:ef:b2:86:44:f3:f9:80:6f:2d:7b:f5:22:eb:
         c0:ee:b0:96:b0:0e:aa:e1:4b:8e:24:82:34:9a:76:18:69:20:
         45:ad:7b:fc:64:7b:af:cc:8b:75:b9:d7:8d:93:b3:2d:97:c8:
         8c:72:ec:9e:b0:a9:30:5c:3d:4b:73:65:76:39:ac:31:ae:ed:
         54:23:79:c3:c5:8e:18:f6:ad:44:43:77:cf:4c:fb:26:b4:8d:
         cf:55:8b:64:f5:08:e3:9a:05:79:30:a6:fd:57:66:ed:21:73:
         ab:9e:c0:8b:39:38:96:06:5f:7a:dc:9d:ab:92:4d:fa:89:3c:
         d4:74:1e:81:50:20:53:31:db:07:c8:d9:a2:f2:bd:7c:6b:8c:
         16:33:fd:d6:eb:fc:19:d5:6d:dd:ae:0c:f9:fa:8f:e6:3b:ed:
         bf:76:9b:9d:66:6b:97:8f:eb:de:c0:6a:7a:21:fc:24:fe:f9:
         87:4e:c9:5c:72:8b:96:95:ec:9a:4e:ab:ea:c3:77:af:66:33:
         23:2c:2d:8f:61:fd:30:7d:cf:f4:bb:c8:40:7b:14:be:7b:cf:
         65:49:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:15:50 2025 by rpki-client