Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          qoVvczegVgA539lrPm+WrL/hhDr1uwx8Q0W0SsHwazk=
Subject key identifier:   3B:5D:89:19:93:B0:20:EF:2C:EE:A1:F1:A0:64:B7:A4:85:48:B1:2A
Certificate issuer:       /CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
Certificate serial:       479C8C0424CB8E6C6C46107ED45D65223EE1DF7B
Authority key identifier: FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
Signing time:             Tue 05 Mar 2024 16:51:52 +0000
ROA not before:           Tue 05 Mar 2024 16:46:52 +0000
ROA not after:            Tue 04 Mar 2025 16:51:52 +0000
asID:                     264392
IP address blocks:        131.161.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:8c:04:24:cb:8e:6c:6c:46:10:7e:d4:5d:65:22:3e:e1:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Validity
            Not Before: Mar  5 16:46:52 2024 GMT
            Not After : Mar  4 16:51:52 2025 GMT
        Subject: CN=3B5D891993B020EF2CEEA1F1A064B7A48548B12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:91:7e:3b:c1:b0:e3:4c:ac:a2:46:12:b2:
                    6a:b2:9d:e6:4b:09:3e:5f:c9:54:33:d7:55:60:89:
                    c1:27:f8:48:35:10:e5:a2:58:c4:6b:e1:07:16:e7:
                    57:b7:71:c9:82:e8:f4:e8:78:63:6e:b2:6e:42:2f:
                    71:0d:91:41:1a:cc:ff:10:5a:7c:18:0f:52:6f:36:
                    e7:ac:7a:b7:69:f5:db:ca:05:b0:06:b2:02:eb:db:
                    9d:29:63:64:7f:af:99:19:ab:2c:12:58:55:65:85:
                    c0:26:4c:2d:88:8c:a3:c4:0f:bc:30:ef:68:40:16:
                    42:dd:ef:bb:04:af:36:ab:af:a2:26:72:47:e0:ee:
                    b7:78:d7:f0:23:d1:05:3d:72:f0:39:75:d9:de:e1:
                    7a:8a:bc:e7:d5:f8:d0:65:94:79:0e:6f:c5:a5:f7:
                    65:e7:27:e4:00:af:1a:f8:06:8d:43:a9:4d:5f:6e:
                    29:9e:93:ff:6a:02:2a:81:2a:2f:67:05:4e:d8:89:
                    fe:43:f0:a3:fe:6f:f0:cb:1c:30:84:ad:53:3e:38:
                    6d:bf:04:2e:77:ac:59:91:23:4f:7c:6d:1a:ca:8f:
                    ab:42:f5:30:38:a1:4c:76:1c:a6:88:d7:d9:48:89:
                    c4:29:55:74:89:11:9e:be:54:d6:f9:71:f8:65:eb:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5D:89:19:93:B0:20:EF:2C:EE:A1:F1:A0:64:B7:A4:85:48:B1:2A
            X509v3 Authority Key Identifier:
                keyid:FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:76:3f:6b:5e:bc:1b:45:5a:e2:dc:26:82:af:9e:63:95:
         f3:22:8e:02:3c:67:e9:16:10:df:d1:22:93:8e:84:d6:ea:bc:
         e4:28:62:72:bc:49:ed:cc:0d:28:b0:bd:e8:62:4a:03:c9:7d:
         bb:ca:c1:5b:d1:92:15:01:92:1f:45:04:9c:ac:e8:de:43:51:
         9d:4c:65:e1:2c:14:66:a5:ba:27:11:4f:ab:ce:0f:e9:13:08:
         04:6b:4b:3a:c7:15:ac:fe:20:47:e0:22:39:55:84:14:35:4b:
         0a:4d:ad:a5:59:c4:0d:55:84:24:b8:55:81:d3:09:64:05:22:
         69:74:1f:dd:68:20:55:d1:b3:33:f8:74:1c:61:18:c5:17:ac:
         d1:28:95:4c:71:2a:3a:1b:98:a8:7f:bf:c5:f3:41:71:19:22:
         be:44:09:d3:64:54:a8:a1:01:a3:3e:db:8f:9e:96:c9:0b:8c:
         5a:c0:7e:97:bf:af:da:89:62:c8:2f:be:84:85:85:65:08:c1:
         66:74:21:9c:8c:d4:c9:32:81:27:71:76:e0:35:90:73:83:fa:
         3f:d3:57:ac:43:74:4d:28:38:72:59:b1:75:07:62:45:01:7b:
         13:f2:4b:b4:ec:14:06:f1:fb:18:78:79:07:11:20:77:df:d0:
         29:4b:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:56 2025 by rpki-client