Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa
File:                     3133312e3130382e31322e302f32322d3235203d3e203631363639.roa (raw, json)
Hash identifier:          KsPulXwrwYo75NwscYFunhXTXbCNqoHwT1v2WwhgAVs=
Subject key identifier:   11:75:34:FF:F5:36:EF:79:3F:EE:E9:14:4F:9C:8D:E1:A1:CB:A5:CC
Certificate issuer:       /CN=D42810233D486ABFF6FCD5876F529684C818D631
Certificate serial:       565107369AE0B1F39EE4990E31ED3525BF2A4740
Authority key identifier: D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa
Signing time:             Tue 01 Nov 2022 16:57:36 +0000
ROA not before:           Tue 01 Nov 2022 16:52:36 +0000
ROA not after:            Tue 31 Oct 2023 16:57:36 +0000
asID:                     61669
IP address blocks:        131.108.12.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:51:07:36:9a:e0:b1:f3:9e:e4:99:0e:31:ed:35:25:bf:2a:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D42810233D486ABFF6FCD5876F529684C818D631
        Validity
            Not Before: Nov  1 16:52:36 2022 GMT
            Not After : Oct 31 16:57:36 2023 GMT
        Subject: CN=117534FFF536EF793FEEE9144F9C8DE1A1CBA5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:19:5c:43:6c:60:13:8d:7e:9e:89:1f:ae:
                    a2:f1:11:63:b1:43:b0:b3:77:ef:e0:63:b1:e6:cc:
                    16:3f:b6:cd:a6:e1:68:7d:b3:5c:9a:39:cc:65:55:
                    d3:31:90:78:0d:09:d5:c1:a3:c5:c4:66:b1:9b:49:
                    7d:00:f7:a5:fe:68:50:c2:01:e1:10:19:3f:dc:04:
                    c4:59:f2:7e:db:2c:8a:5b:8d:46:af:0f:bc:f2:cf:
                    fc:b9:41:19:74:9a:c4:d1:8b:ed:71:8b:b3:71:a3:
                    ff:ee:5c:5b:54:e8:83:d6:40:f4:52:aa:70:b3:b1:
                    3e:9d:97:e4:61:33:4a:72:df:4f:b0:a8:cf:3e:96:
                    25:c3:fa:84:c7:5d:58:75:01:73:3d:e2:66:90:87:
                    2f:8a:36:ca:59:f6:57:9f:cd:0d:e7:64:c1:92:7e:
                    b9:d8:62:c0:09:a3:ee:97:ed:09:24:81:da:0a:65:
                    0a:6e:9a:d1:d8:a5:d7:87:78:09:c2:a8:e9:ca:34:
                    b7:a8:2d:cc:56:ed:16:b8:10:68:91:10:d9:74:a3:
                    b7:7d:90:f6:a3:07:27:0e:fa:9b:60:9e:09:bd:5a:
                    87:6c:81:9d:e3:42:c7:df:65:c3:c9:b5:80:fe:23:
                    50:09:5a:c9:21:64:8c:04:c7:1c:08:7b:42:af:3b:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:34:FF:F5:36:EF:79:3F:EE:E9:14:4F:9C:8D:E1:A1:CB:A5:CC
            X509v3 Authority Key Identifier:
                keyid:D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3235203d3e203631363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:67:27:1f:0a:50:e7:e3:46:25:ae:4c:25:38:b7:08:50:b3:
         99:51:42:8f:63:2d:19:37:52:e3:72:b8:9a:a4:de:9c:63:c3:
         6b:56:0a:14:da:2e:27:82:e9:db:b3:de:09:8e:e3:05:3d:d8:
         a1:39:23:a6:78:13:6d:57:f0:72:43:53:a7:5d:cf:10:9f:54:
         b9:c9:e8:e3:0f:96:88:5d:06:a7:b3:74:41:18:1d:29:4b:54:
         5e:22:29:94:52:d9:80:72:98:ed:1c:e7:ae:13:01:d1:5d:be:
         8f:d8:e8:18:95:6c:7c:e4:7e:ba:ae:71:9c:8f:3e:cd:06:c8:
         19:94:e1:c4:6e:02:a5:63:5d:88:ff:b3:d4:d5:f5:f4:c4:76:
         0c:c0:71:3a:92:5e:8f:fa:ee:2c:ad:5a:79:a8:06:72:24:e9:
         85:98:61:03:f9:93:e2:c3:8e:57:dd:f4:2e:2a:35:15:63:d3:
         f7:d6:61:67:04:d2:14:14:db:c2:70:29:57:b2:f8:7e:6a:04:
         a2:34:60:5a:e6:dc:1c:55:25:f6:18:03:6d:bf:07:bd:f7:98:
         98:f0:6b:3f:1a:e8:d2:d3:04:43:15:e9:18:b0:a1:1e:0e:1a:
         70:f3:60:59:b0:78:ea:ad:fe:03:92:cf:5d:70:0e:ea:f1:31:
         69:58:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:55 2025 by rpki-client