Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          j0hQAUu+SL8l06Lkbf5E+dGKRSB4OZ8UGbJioiNVvgg=
Subject key identifier:   4F:25:37:E3:04:F0:3B:CE:1E:4C:B4:BE:A5:01:08:AC:7F:89:2E:BB
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       57A434AE022037B103DEE47621601D260C134E08
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 06 Mar 2025 13:45:55 +0000
ROA not before:           Thu 06 Mar 2025 13:40:55 +0000
ROA not after:            Thu 05 Mar 2026 13:45:55 +0000
asID:                     264381
IP address blocks:        131.100.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:34:ae:02:20:37:b1:03:de:e4:76:21:60:1d:26:0c:13:4e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Mar  6 13:40:55 2025 GMT
            Not After : Mar  5 13:45:55 2026 GMT
        Subject: CN=4F2537E304F03BCE1E4CB4BEA50108AC7F892EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:85:86:a2:d3:b5:f0:77:dd:f9:1f:bc:76:
                    2f:6d:82:ae:a3:1c:2c:ea:a6:ee:94:3b:28:bb:30:
                    bd:fe:7b:7c:08:c1:69:87:02:db:a6:41:44:a9:6e:
                    40:f2:0c:29:d3:43:40:d4:4a:ad:c2:ce:f3:7f:1f:
                    58:ff:ba:73:12:a9:b7:4e:1b:c8:40:b0:49:57:ac:
                    c1:12:74:f8:b8:25:fc:0f:12:1b:bd:0a:f2:8f:34:
                    e3:a3:02:4d:ce:48:f8:0e:9c:0c:c1:64:08:9e:4d:
                    46:78:ff:c7:5b:70:2d:62:36:2f:3b:91:4e:45:8e:
                    e3:51:69:d8:b3:5d:db:94:33:c9:87:12:89:2d:95:
                    60:b5:fb:f2:e9:c7:ef:43:c6:3d:15:5e:99:bc:93:
                    34:31:3a:7f:5a:42:5a:d4:f6:54:41:bf:34:92:aa:
                    b4:e7:19:ce:c9:2b:d3:0e:bb:50:a9:2d:3c:4d:ec:
                    9f:bd:7a:24:01:c3:b7:12:1e:83:8f:d0:2b:ba:55:
                    1c:0d:c4:4a:bb:03:73:ce:b3:45:02:76:ca:39:0d:
                    e7:53:9b:2f:58:ed:65:25:6d:ce:3f:d3:1c:0a:b8:
                    25:8c:87:1b:4e:0b:b5:84:b9:e0:be:f0:ae:43:e4:
                    d5:0a:bd:76:8d:1c:ae:51:81:2a:ab:b0:c9:5a:c2:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:37:E3:04:F0:3B:CE:1E:4C:B4:BE:A5:01:08:AC:7F:89:2E:BB
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:4b:8b:b2:f8:2c:8d:66:a2:e8:ee:b6:f5:48:4b:a4:37:
         c9:c5:35:74:9c:92:86:ac:38:f9:94:cc:09:72:70:19:dc:01:
         36:20:3e:ff:e4:16:95:66:a5:cd:9b:52:ab:49:81:fd:38:98:
         cb:c4:6f:0f:10:8a:1b:72:24:17:40:3c:62:09:8b:a1:63:67:
         0f:ac:38:a8:3b:8c:16:9a:30:0b:a8:ec:05:3d:14:af:f6:48:
         ba:c2:ac:e9:91:43:6b:74:ff:98:36:19:eb:1a:07:96:35:c2:
         0a:7f:b7:f2:0c:a0:73:bb:69:5f:61:29:c0:95:bd:9f:d1:5c:
         fb:4b:0e:a1:21:3b:d4:b3:bc:f8:da:37:92:67:c4:6e:ea:8c:
         e7:fc:c7:f6:2b:31:1a:9a:d7:13:70:04:10:4d:41:fa:08:f9:
         ad:57:e5:e1:0b:83:0a:ed:09:15:09:02:94:24:70:6a:15:56:
         a5:d9:64:98:39:6f:03:ba:a0:34:43:b7:7d:60:be:4e:30:20:
         53:27:db:8f:dd:ac:f7:83:2b:58:9f:23:bc:d0:73:8c:f3:92:
         c4:d3:a0:b6:0a:bd:7d:a6:7e:bf:e8:1a:59:4c:72:bb:fe:1c:
         e5:6b:83:6b:19:71:c0:fb:74:2a:89:86:f9:63:25:3b:2e:9c:
         9f:3d:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:34:35 2025 by rpki-client