Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa
File:                     3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (raw, json)
Hash identifier:          eaPmTPN0pKkcKOtrEquMUQp+UXQF/ookE75h2R2/ipc=
Subject key identifier:   A7:3B:34:D8:9D:40:F5:1B:F4:AB:3F:9A:5C:A1:6D:49:03:90:2F:EB
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       66493060A9CF87D1884C478A8449619E717A5543
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa
Signing time:             Sat 25 Jan 2025 16:15:22 +0000
ROA not before:           Sat 25 Jan 2025 16:10:22 +0000
ROA not after:            Sat 24 Jan 2026 16:15:22 +0000
asID:                     61675
IP address blocks:        131.108.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:49:30:60:a9:cf:87:d1:88:4c:47:8a:84:49:61:9e:71:7a:55:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Jan 25 16:10:22 2025 GMT
            Not After : Jan 24 16:15:22 2026 GMT
        Subject: CN=A73B34D89D40F51BF4AB3F9A5CA16D4903902FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:56:5b:6c:a5:ba:2f:e0:52:0a:aa:73:99:
                    54:07:f3:d2:4c:89:1d:49:6f:57:4a:ff:ac:c8:42:
                    3b:e2:87:fd:45:1d:15:a7:88:7b:5a:98:90:05:f5:
                    98:d0:86:d9:8c:93:c0:9a:db:cb:23:39:56:ab:d2:
                    53:3e:57:eb:91:59:38:bc:dd:e9:18:23:3f:fd:2d:
                    8f:8b:46:bd:8e:18:d7:c1:6e:7b:00:90:2c:4b:53:
                    74:31:98:20:43:ce:10:ca:18:af:2d:04:06:fb:56:
                    bc:91:60:72:16:44:6b:10:b1:28:80:19:75:fa:8a:
                    83:08:90:af:0b:0c:d3:a1:b0:f6:49:a8:20:ac:5d:
                    77:bc:d1:3c:f5:3b:3e:ec:79:19:c3:99:8b:6d:0b:
                    4e:af:09:0d:b7:31:8b:15:8e:c4:20:69:f4:34:50:
                    5d:d3:00:79:1b:c3:1f:a3:af:3d:80:ea:07:9f:7a:
                    ee:70:1a:2e:58:ce:80:9c:dc:80:48:33:e0:b0:f3:
                    5a:8a:2d:07:d1:2b:b4:03:36:8a:47:ff:fc:c8:94:
                    64:dc:69:72:bf:56:17:ab:cb:c9:38:04:fb:5b:bd:
                    de:1a:04:ba:53:cf:0f:c1:a9:bc:01:8b:67:bd:23:
                    57:e0:1a:c0:aa:c8:3c:15:6a:18:8f:4d:e4:0f:ae:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3B:34:D8:9D:40:F5:1B:F4:AB:3F:9A:5C:A1:6D:49:03:90:2F:EB
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:d8:62:2b:1a:4b:09:6e:2c:bb:bb:4f:68:25:88:5e:da:
         fa:6c:8b:e4:3e:5a:f4:21:6e:2a:ca:a5:b0:3b:5a:64:41:63:
         8e:bb:8a:80:90:17:29:8b:35:1c:54:28:02:bb:0f:a8:9e:85:
         2a:c8:52:d3:3a:d6:9e:35:14:d1:bb:fc:b1:1f:62:2e:a2:08:
         a8:ab:29:38:52:66:89:87:ea:8e:40:21:99:bd:f9:97:8c:91:
         b4:db:ca:5a:cf:cb:5d:28:ca:39:ba:ec:7a:46:5b:b9:59:57:
         77:08:57:90:8e:03:78:aa:65:ad:1d:35:3a:fa:4d:0f:e0:33:
         1a:29:90:4a:e2:85:d2:ed:02:58:19:51:de:b7:20:12:98:40:
         22:33:44:71:b4:21:e9:75:dd:ea:c2:c4:6c:29:5c:e9:f7:a3:
         ba:d7:aa:ad:f4:13:5e:77:26:9e:b5:65:62:1b:8c:7c:01:72:
         e4:b5:e6:e4:e2:ab:9f:8a:7c:55:3e:e7:75:20:58:20:2f:c7:
         c3:48:93:45:4e:89:20:d7:5e:0e:26:a5:6d:93:88:3b:f0:5f:
         4c:4a:ba:38:81:42:93:5b:e3:18:1b:52:46:13:69:43:72:ad:
         f0:e9:21:50:04:d3:4a:ad:bf:05:69:de:3d:ba:0c:3e:4e:cb:
         e7:c1:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:08 2025 by rpki-client