Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa
File:                     3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa (raw, json)
Hash identifier:          YJPBxy57g8wO2Dq1AY7YRFTrBKrVXnNrGqnyDyZQY2Q=
Subject key identifier:   0F:20:86:11:B9:B1:37:B9:BC:FD:B6:ED:CE:D1:77:3F:2D:13:83:50
Certificate issuer:       /CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
Certificate serial:       32ADB3E2D303F31E6E1983B11684B3337F6392AA
Authority key identifier: 2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     29802
IP address blocks:        131.196.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ad:b3:e2:d3:03:f3:1e:6e:19:83:b1:16:84:b3:33:7f:63:92:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100BC7AE0BBC74C47173611ECC378E9F674F16A1E35D71EFBB3C11F87240B82C1AB46B99D0A4663B2FAA7C8251399D01B65F51446D47DA8199DCC94EB421CCE2666DAAA32EF94F2C07F6E6420AF39ECB9C0E898DD977FC0215EC90639FE24D66B589C4AFEDCA33CF747D7FC1F44D390FFBA2890C297AB1F1F384C84AB9DDE5AA6C6600EE0C51F84CCE139B5F028FB4EF3559410E971919409616FDA1528C8553707E5D19FD3EBC0C1EC157471CD10D39D40924821F5C33B467363A69301B7C84B38F013C529413C21B1B43623736801BC5FC2181B3759A9B56188FD1A3A30414442E5BD7753045397621F3A30F4F26C70C43C15CEBCB30F469C22A7132F694FF4430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:e0:bb:c7:4c:47:17:36:11:ec:c3:78:e9:
                    f6:74:f1:6a:1e:35:d7:1e:fb:b3:c1:1f:87:24:0b:
                    82:c1:ab:46:b9:9d:0a:46:63:b2:fa:a7:c8:25:13:
                    99:d0:1b:65:f5:14:46:d4:7d:a8:19:9d:cc:94:eb:
                    42:1c:ce:26:66:da:aa:32:ef:94:f2:c0:7f:6e:64:
                    20:af:39:ec:b9:c0:e8:98:dd:97:7f:c0:21:5e:c9:
                    06:39:fe:24:d6:6b:58:9c:4a:fe:dc:a3:3c:f7:47:
                    d7:fc:1f:44:d3:90:ff:ba:28:90:c2:97:ab:1f:1f:
                    38:4c:84:ab:9d:de:5a:a6:c6:60:0e:e0:c5:1f:84:
                    cc:e1:39:b5:f0:28:fb:4e:f3:55:94:10:e9:71:91:
                    94:09:61:6f:da:15:28:c8:55:37:07:e5:d1:9f:d3:
                    eb:c0:c1:ec:15:74:71:cd:10:d3:9d:40:92:48:21:
                    f5:c3:3b:46:73:63:a6:93:01:b7:c8:4b:38:f0:13:
                    c5:29:41:3c:21:b1:b4:36:23:73:68:01:bc:5f:c2:
                    18:1b:37:59:a9:b5:61:88:fd:1a:3a:30:41:44:42:
                    e5:bd:77:53:04:53:97:62:1f:3a:30:f4:f2:6c:70:
                    c4:3c:15:ce:bc:b3:0f:46:9c:22:a7:13:2f:69:4f:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:86:11:B9:B1:37:B9:BC:FD:B6:ED:CE:D1:77:3F:2D:13:83:50
            X509v3 Authority Key Identifier:
                keyid:2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:20:39:84:a7:3e:39:ed:3f:4a:5e:b7:2b:4b:91:0a:13:ae:
         b5:eb:48:0d:4b:08:24:64:16:88:98:6a:21:11:03:c9:54:4b:
         e3:66:51:e8:97:41:c4:20:d7:e1:0b:34:ed:26:db:50:c2:a3:
         62:e3:af:94:46:67:8f:7a:1d:99:de:b1:4a:fe:85:cf:6f:33:
         95:7d:b1:c9:81:11:c0:cc:6e:fa:2f:8a:4c:79:85:c7:82:31:
         5a:25:64:9d:e8:b9:29:dd:7c:12:04:1e:f0:fa:64:7a:2d:86:
         63:5a:59:23:7c:0e:01:5e:61:10:fe:2b:50:e6:f2:c9:1e:9a:
         42:28:06:f3:93:f4:a7:cc:11:be:03:f9:34:80:32:ec:6f:0f:
         7f:e5:f4:4d:4a:f3:53:47:05:a5:4c:bf:ea:b1:68:69:41:9a:
         ea:fe:66:1b:10:a4:a1:86:f3:12:90:94:00:85:af:24:fc:6e:
         38:8b:47:20:d1:b5:cb:fe:90:48:b6:12:6f:e8:41:84:18:2f:
         cd:90:e2:4d:88:14:43:cd:83:13:cf:d5:3f:6d:58:9c:7b:70:
         04:33:fa:c8:fb:a0:7a:1a:df:92:23:40:f8:74:1f:b3:1d:65:
         40:f9:e6:91:17:4e:ba:ff:70:10:e7:dd:3e:72:6b:c9:6d:15:
         10:1d:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:45 2025 by rpki-client