Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa
File:                     3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa (raw, json)
Hash identifier:          e8aNfx0pA42dD9erCwEmaW5DomJFSsYC2HZGirZjkMw=
Subject key identifier:   F2:DB:E4:75:DE:CA:8B:F0:9C:28:8C:D8:ED:0B:B3:3C:5F:BE:A6:8A
Certificate issuer:       /CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
Certificate serial:       42B9A9946675DE3657BB6A93A1EA5E5546C259E1
Authority key identifier: E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa
Signing time:             Thu 06 Mar 2025 13:32:43 +0000
ROA not before:           Thu 06 Mar 2025 13:27:43 +0000
ROA not after:            Thu 05 Mar 2026 13:32:43 +0000
asID:                     264412
IP address blocks:        131.221.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b9:a9:94:66:75:de:36:57:bb:6a:93:a1:ea:5e:55:46:c2:59:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
        Validity
            Not Before: Mar  6 13:27:43 2025 GMT
            Not After : Mar  5 13:32:43 2026 GMT
        Subject: CN=F2DBE475DECA8BF09C288CD8ED0BB33C5FBEA68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:b4:79:98:fa:21:2a:a8:d5:0b:a5:eb:fb:
                    9a:9a:12:ba:9d:56:bc:67:88:34:c4:ef:43:01:c8:
                    a5:00:b5:81:fa:00:e8:94:67:22:c0:61:7d:e5:0a:
                    05:a7:7c:c9:2d:4e:f5:06:07:c3:a8:36:1b:0b:2c:
                    a0:24:e2:b7:03:da:d7:90:d8:0e:3f:e5:4e:c4:ad:
                    65:8b:32:61:36:22:34:f0:9b:d5:4d:7f:f5:f7:04:
                    95:c1:eb:c4:20:a9:27:73:2e:aa:26:15:33:02:cb:
                    64:1d:be:f3:0c:84:70:88:02:96:1f:ba:87:ae:62:
                    4c:df:e5:f4:23:fb:4a:41:98:91:26:78:61:e7:ed:
                    07:07:ad:75:39:cf:62:40:c0:1e:6a:64:33:de:6b:
                    05:0b:43:c2:32:99:bc:3f:b7:20:ef:7c:00:97:8b:
                    ba:ab:9d:19:3f:5f:4a:a2:dc:bd:1b:05:f9:c3:f6:
                    3f:94:21:f8:f3:f7:49:50:be:b8:bd:96:8d:b0:14:
                    75:48:0e:c6:d0:4e:16:86:4b:4d:ac:b8:97:03:33:
                    2f:ef:8f:0b:b4:9d:b9:52:d8:83:0b:f8:01:7e:57:
                    b9:cc:a5:94:ca:16:fa:f3:ec:7f:55:eb:d8:97:f0:
                    a4:2a:7f:7e:28:50:d7:d2:29:cb:a2:95:54:1a:ec:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DB:E4:75:DE:CA:8B:F0:9C:28:8C:D8:ED:0B:B3:3C:5F:BE:A6:8A
            X509v3 Authority Key Identifier:
                keyid:E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/3133312e3232312e3130342e302f32322d3234203d3e20323634343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:53:56:28:d8:9e:16:3d:77:b4:d4:d6:c6:ce:49:d5:40:52:
         5e:c2:8d:41:04:8c:3c:5f:9c:23:25:cb:b5:d0:35:f7:95:2f:
         41:70:ae:13:a0:d8:c7:90:04:20:7c:77:f1:43:0c:1f:ad:d9:
         90:25:eb:d2:5f:18:f1:02:8a:9e:bc:fc:5e:b5:3e:e6:1c:a3:
         c9:88:7e:17:96:69:2c:18:f8:d9:ce:18:f0:c0:89:d1:05:0e:
         16:4b:8d:ed:cc:b8:99:73:d6:07:5c:8f:5a:59:5c:df:78:cd:
         d5:5e:a2:b7:ac:e2:f0:79:79:e1:42:35:85:22:78:8b:98:c1:
         44:b3:f9:f7:c3:b5:1f:18:b7:24:02:2b:26:ce:2c:a9:3a:48:
         85:69:44:f3:31:49:60:71:32:2a:40:fd:8b:9b:bc:6e:79:28:
         4f:56:11:2b:d8:2b:93:4c:87:5f:e6:66:08:f0:16:95:cf:da:
         41:0a:22:8a:bc:01:a3:f3:27:8a:21:1c:92:aa:57:e0:b5:30:
         d1:08:22:73:ab:10:d4:f4:1e:be:01:5c:93:46:89:6b:61:cd:
         83:21:cd:4f:04:17:34:6c:5e:2a:35:42:d2:3b:af:28:ff:6c:
         ed:48:af:29:70:f4:c1:cd:94:cc:66:20:95:46:bf:61:5c:2b:
         22:2b:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:40:05 2025 by rpki-client