Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32342d3234203d3e20323634343436.roa
File:                     3133312e3232312e3232382e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          EfDZGy1hGN0+p1goCv0AIoUMr28jfD2ewXu2BJd1AKM=
Subject key identifier:   EF:EF:54:D4:A7:3A:6D:DB:E2:5E:F8:C8:1A:90:6F:95:12:13:ED:23
Certificate issuer:       /CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
Certificate serial:       324A18C7E5998EBE7E1E4ED87F7073ABA5427F02
Authority key identifier: CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 02 May 2023 16:11:01 +0000
ROA not before:           Tue 02 May 2023 16:06:01 +0000
ROA not after:            Tue 30 Apr 2024 16:11:01 +0000
asID:                     264446
IP address blocks:        131.221.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4a:18:c7:e5:99:8e:be:7e:1e:4e:d8:7f:70:73:ab:a5:42:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB4BD05094183CD92CB627F5C7A57748C6E8761
        Validity
            Not Before: May  2 16:06:01 2023 GMT
            Not After : Apr 30 16:11:01 2024 GMT
        Subject: CN=EFEF54D4A73A6DDBE25EF8C81A906F951213ED23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:b9:11:f3:29:50:d8:d2:63:b2:12:6a:c4:
                    78:88:c2:77:d6:46:78:82:08:02:7a:f1:da:34:44:
                    57:a0:ac:c0:8b:f6:85:d2:7d:ca:05:55:fe:a2:95:
                    f5:8f:e9:7f:91:b8:5a:a0:da:ce:63:8e:a1:ed:18:
                    a9:85:54:1e:72:3a:ae:ad:c5:25:4a:4e:a3:b8:1d:
                    0b:d7:37:83:0a:eb:9b:37:27:21:4d:41:01:62:4f:
                    85:9e:e3:76:5e:76:cb:1e:0a:30:f8:fa:99:c2:64:
                    a0:94:38:04:4a:0f:4c:90:4f:8f:2b:d9:b9:3e:5e:
                    9f:d2:99:97:19:45:02:1d:b3:c1:39:40:39:43:b4:
                    78:fc:e0:90:15:e5:ab:13:b2:80:9c:85:ef:27:8c:
                    10:57:d0:3a:b3:38:ed:9c:b7:e8:f3:36:64:38:29:
                    f2:81:36:39:2f:e9:95:23:dc:3f:f6:d7:37:14:5d:
                    75:51:d6:d9:d1:b0:20:16:9f:8f:ce:17:cc:e6:82:
                    d3:b3:22:19:8a:cc:70:99:bc:52:b0:cb:95:e8:65:
                    33:e2:f3:4e:65:ef:54:0c:50:40:24:ba:9f:28:00:
                    98:15:c1:c9:70:4b:f2:b3:b6:de:8c:df:9d:47:ec:
                    3d:6d:e6:2d:f3:98:76:29:60:b5:c5:22:57:61:31:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:54:D4:A7:3A:6D:DB:E2:5E:F8:C8:1A:90:6F:95:12:13:ED:23
            X509v3 Authority Key Identifier:
                keyid:CD:B4:BD:05:09:41:83:CD:92:CB:62:7F:5C:7A:57:74:8C:6E:87:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDB4BD05094183CD92CB627F5C7A57748C6E8761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3232382e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:76:7c:74:60:ae:e4:8e:6c:0a:dc:05:93:fb:5c:cc:fb:47:
         b5:e5:a2:14:08:cc:ce:8c:e4:13:40:b3:e7:87:ba:7f:04:28:
         ef:c1:95:c0:0d:8c:81:b0:80:2f:56:fd:f9:8e:67:88:a6:82:
         82:68:66:e5:70:9d:cd:87:5b:c5:17:f1:7b:cf:23:c7:b5:08:
         c2:2c:8a:57:d9:08:f6:8c:9e:cc:ff:4d:54:b1:e6:4d:df:54:
         10:45:7c:85:46:49:fc:66:07:f7:be:14:65:af:94:d7:6b:e8:
         8e:3f:0a:5e:fd:19:29:a4:e2:70:f4:e1:e8:7d:48:b5:15:18:
         0e:52:41:0b:9b:95:9f:e2:40:f3:25:f9:8e:7b:dd:67:36:50:
         15:8a:01:9e:77:a4:05:12:87:c7:18:9b:04:ac:9b:32:88:a5:
         af:c3:f8:c6:36:ac:36:90:70:eb:ed:e2:f1:21:40:9f:01:a6:
         34:dd:c5:cc:6c:22:61:01:f2:be:a6:26:f4:41:9f:e5:c9:7e:
         13:3a:e4:73:2a:76:8c:6b:60:b4:72:be:c9:1b:84:b3:70:3b:
         8f:d0:8f:ab:78:13:ac:33:3c:6f:ce:4b:19:b6:5b:ac:37:23:
         9c:bc:95:32:d0:00:08:5c:bc:70:87:29:94:df:43:77:2f:65:
         99:06:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:48 2025 by rpki-client