Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa
File:                     3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa (raw, json)
Hash identifier:          WXjjeMze5p/ghWgAg864kazeWumL+Rsma5EgmAoIyUI=
Subject key identifier:   7D:39:BC:20:9A:DE:B8:8B:ED:0C:D4:47:0F:A1:D7:E6:DE:AE:64:04
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       6010C6BEAA8104E3C75FD1DB02FADA426889CA69
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa
Signing time:             Thu 06 Mar 2025 06:33:12 +0000
ROA not before:           Thu 06 Mar 2025 06:28:12 +0000
ROA not after:            Thu 05 Mar 2026 06:33:12 +0000
asID:                     264392
IP address blocks:        131.161.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:10:c6:be:aa:81:04:e3:c7:5f:d1:db:02:fa:da:42:68:89:ca:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Mar  6 06:28:12 2025 GMT
            Not After : Mar  5 06:33:12 2026 GMT
        Subject: CN=7D39BC209ADEB88BED0CD4470FA1D7E6DEAE6404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:1d:49:6f:5f:69:ab:0a:8d:d1:69:dd:0e:
                    ff:2d:1f:0f:b1:1b:c5:0f:89:16:b7:e7:d9:f7:8b:
                    92:96:70:76:20:f2:92:53:39:53:1c:d2:74:87:a0:
                    36:cf:d8:f5:a5:19:a1:a8:a1:fd:13:3a:78:a5:90:
                    cf:76:ea:7e:4a:90:d6:9b:52:62:8a:5e:9f:11:65:
                    b3:b9:2c:d2:f5:34:65:48:e8:3f:c5:04:23:8d:d3:
                    76:7f:52:4a:f2:a6:59:ad:a3:3c:65:d9:ff:de:49:
                    a8:57:fa:af:8b:9e:a1:f7:85:85:d9:2a:2d:94:6f:
                    1a:7b:5c:45:c8:62:c7:82:bd:a9:66:5c:cf:c2:f8:
                    06:8e:a4:69:96:78:16:f8:8d:95:da:7d:94:1f:4a:
                    18:3f:2c:2b:4b:f6:a2:4b:71:16:c0:e7:84:54:2e:
                    54:75:81:35:92:2d:82:8e:e9:54:b4:7e:39:a0:fd:
                    d7:7f:3a:d4:7b:cb:9f:0b:10:a7:1c:18:2f:23:e5:
                    40:1b:48:ae:f8:18:dd:c4:e0:93:59:5a:1d:c7:e7:
                    36:66:b0:33:cd:5d:c2:0c:72:29:c6:e4:4d:f2:68:
                    c3:43:ff:fd:4e:3d:88:54:c9:36:a4:e1:50:da:9d:
                    b8:aa:7b:e4:19:66:cd:4d:d8:c3:c3:3d:51:0b:c8:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:39:BC:20:9A:DE:B8:8B:ED:0C:D4:47:0F:A1:D7:E6:DE:AE:64:04
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:96:45:68:ed:ff:9a:4c:a6:76:7d:c0:31:df:f8:40:11:d3:
         db:35:32:c5:70:54:1a:f4:cf:8e:23:08:d0:18:fd:d2:74:cb:
         3c:27:ed:c7:29:21:78:5d:7a:27:71:cb:66:2b:2d:0d:a3:92:
         57:61:3b:21:85:4d:c3:c5:aa:47:8b:bd:2f:72:fb:b4:37:29:
         f9:d5:4e:33:4e:78:0a:81:49:e2:60:e9:92:1a:4d:30:ea:a0:
         86:0d:28:0b:0b:39:f6:81:16:1b:d6:28:2f:46:37:93:04:46:
         72:5a:c1:31:d5:89:4f:76:b6:a4:05:11:82:d4:2f:77:c8:38:
         f9:61:16:a2:58:4b:73:be:9f:57:81:f3:0e:ac:31:19:ed:9d:
         03:27:d9:1e:95:6b:ab:6d:fb:dd:9a:fd:ed:f4:bd:8d:33:12:
         f4:92:2c:b2:89:dc:b4:e4:82:c8:d1:4a:a2:d8:c1:6c:b2:65:
         6c:9a:f7:3f:54:58:b5:a4:46:f7:1b:f0:f6:16:18:22:f7:cb:
         99:df:e2:39:05:ca:f1:26:ec:28:01:5e:61:35:48:ae:ba:8a:
         6a:e7:1d:56:fb:ae:61:b4:6c:a7:cb:f7:bc:3b:77:ce:66:0f:
         f2:50:62:e6:2a:0d:18:70:1f:d5:22:dd:a4:0a:df:aa:a8:10:
         53:41:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:41:33 2025 by rpki-client