Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
File:                     3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          Q74ayvAOIzsNxQMZACtHRlIrOSSyMhvT7tEprZqKoKY=
Subject key identifier:   31:CB:59:48:38:FE:A3:69:FC:41:5F:5D:C9:95:5F:CC:F0:3B:31:4E
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       729E42F9F968C5C564A86AE7F6FBF987A5B41B1D
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:02 +0000
ROA not before:           Thu 06 Oct 2022 17:35:02 +0000
ROA not after:            Thu 05 Oct 2023 17:40:02 +0000
asID:                     271724
IP address blocks:        131.221.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9e:42:f9:f9:68:c5:c5:64:a8:6a:e7:f6:fb:f9:87:a5:b4:1b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:02 2022 GMT
            Not After : Oct  5 17:40:02 2023 GMT
        Subject: CN=31CB594838FEA369FC415F5DC9955FCCF03B314E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:7c:85:c6:70:23:a3:12:cf:fd:c0:8d:91:
                    73:f4:0a:d7:9b:04:35:bc:1d:1a:3e:c1:00:0e:a6:
                    1e:b9:4f:c2:29:04:5b:d7:e2:c6:62:da:d8:e4:b1:
                    56:c6:01:3f:fc:53:73:d1:97:31:22:0f:ce:fa:f0:
                    5a:89:46:0a:9d:27:2b:68:5d:6d:4f:83:70:f6:73:
                    53:d6:ba:e8:40:7a:fe:04:43:32:af:8b:3d:63:6b:
                    73:bd:47:4e:e0:93:f9:2c:09:8d:48:42:34:f8:75:
                    dd:15:9c:78:10:0e:00:a1:c4:89:3c:a6:d0:7d:12:
                    01:fa:bc:c2:00:0b:9e:c9:50:ab:d8:49:9b:48:75:
                    9c:26:cf:59:15:74:85:08:d0:55:be:8b:d3:69:10:
                    a1:30:65:e8:ce:34:d5:1d:c4:e5:9f:9d:b4:52:81:
                    79:3e:bd:21:8f:b9:a2:75:6e:3b:de:cc:26:dc:b2:
                    f3:89:1f:ca:b9:f7:e2:03:68:23:b1:65:fe:34:74:
                    96:81:33:12:86:a0:df:83:65:c9:3d:88:78:f7:71:
                    ff:ee:a8:7c:b8:21:c5:63:67:80:42:8b:35:10:cf:
                    55:97:72:73:ba:78:8d:8f:de:db:d0:b4:07:76:0d:
                    64:90:09:9f:cf:d2:87:05:f1:76:93:ce:66:41:3b:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:59:48:38:FE:A3:69:FC:41:5F:5D:C9:95:5F:CC:F0:3B:31:4E
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133312e3232312e36382e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:85:0d:f0:31:01:33:8b:3d:ea:8d:ff:4c:32:29:37:60:
         e1:d4:0c:0a:43:b3:b0:6f:e3:80:aa:b6:2a:3d:e2:e7:2a:f6:
         fd:3c:71:e8:8f:98:ac:b3:3f:01:f7:29:5d:21:2e:e5:64:fe:
         5f:4c:5a:8e:f2:38:19:8e:98:cf:56:d5:c8:bb:b9:fb:d4:58:
         de:4b:29:49:0f:7d:b6:3b:ed:7c:1c:3e:4d:79:65:75:fe:b7:
         a1:72:42:f8:4d:97:f7:89:69:97:15:55:88:0e:0a:bd:7b:d4:
         98:0d:57:c7:55:1b:99:df:ad:18:53:8e:02:2c:bc:e1:08:fd:
         a8:d0:58:cc:29:5d:5c:90:97:13:2b:25:08:40:75:21:c2:ef:
         71:ed:08:33:93:44:4c:25:b6:32:ed:d5:5e:f1:9c:e3:ea:b7:
         4a:ea:69:f3:bc:4c:1e:2a:d6:ef:7a:53:73:fe:65:a1:9b:7a:
         2b:c5:c8:df:c1:2a:0e:e5:59:2c:a7:01:2d:cb:04:5b:3b:11:
         5f:af:bd:5c:df:45:ed:65:37:49:4c:97:01:db:ca:5e:15:57:
         92:f6:b0:86:ec:c2:ab:ab:6f:65:14:9c:a0:44:9f:ef:1e:96:
         39:3a:9a:19:0d:3e:e7:b2:45:8b:41:c5:31:79:6c:d3:86:df:
         13:a9:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:33 2025 by rpki-client