Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231382e302f32342d3234203d3e203631363538.roa
File:                     3133312e3130302e3231382e302f32342d3234203d3e203631363538.roa (raw, json)
Hash identifier:          lXrDYpk+0Jt81OrPaJdXJ9eOFDLG5DZcPpccNhq6s+U=
Subject key identifier:   5D:98:B3:1A:BE:D8:06:4A:2A:52:30:31:AD:51:D5:6B:25:87:51:DC
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       0BA5FC211B65ADA262E779376FD14C69CB38F8FE
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231382e302f32342d3234203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:22:39 +0000
ROA not before:           Mon 09 Dec 2024 17:17:39 +0000
ROA not after:            Mon 08 Dec 2025 17:22:39 +0000
asID:                     61658
IP address blocks:        131.100.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a5:fc:21:1b:65:ad:a2:62:e7:79:37:6f:d1:4c:69:cb:38:f8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:17:39 2024 GMT
            Not After : Dec  8 17:22:39 2025 GMT
        Subject: CN=5D98B31ABED8064A2A523031AD51D56B258751DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:a1:82:14:7b:11:b4:61:ec:f3:c0:37:ee:
                    b5:5b:73:3e:3d:2b:b7:c6:93:29:8a:ae:f1:ac:0e:
                    fe:f1:1b:6a:70:95:7e:a8:e5:69:a5:37:9f:c9:d5:
                    06:0b:45:85:57:f5:da:f8:25:99:50:37:5d:64:8d:
                    e7:ae:f0:76:36:c2:2b:98:fa:7c:76:ac:8b:49:b4:
                    60:55:b1:89:f7:89:79:b8:9e:0e:b4:da:9e:b2:55:
                    f6:47:5c:6d:05:54:fa:4f:d8:2b:92:26:01:96:84:
                    66:ba:95:6d:da:f1:a8:82:06:34:c0:01:4e:b1:43:
                    06:cf:a2:33:3c:aa:71:f5:ea:06:10:56:c3:7a:9f:
                    7d:45:69:1f:6b:01:d2:67:5f:ac:ac:3c:6f:f9:6d:
                    12:54:d5:5a:5b:ed:8a:8d:cb:b3:05:13:1b:ab:30:
                    30:c8:57:ad:9a:20:11:ed:6f:5a:35:81:df:2a:c3:
                    cd:4f:a8:72:34:d2:37:78:c8:87:2a:9a:ba:d5:9b:
                    bb:d0:f8:90:3e:1e:b9:c5:f7:df:1a:80:ce:e5:da:
                    ae:75:22:01:21:3e:ae:c7:45:07:12:ee:49:f8:75:
                    ff:e0:51:1a:58:2a:02:9c:b0:0a:00:20:18:7c:66:
                    88:d8:23:5a:cd:59:59:7e:13:4a:89:12:bb:4a:5a:
                    04:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:98:B3:1A:BE:D8:06:4A:2A:52:30:31:AD:51:D5:6B:25:87:51:DC
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231382e302f32342d3234203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:68:36:ba:69:22:20:e7:a1:f3:5f:af:58:b8:e8:14:0d:80:
         6c:4d:9d:39:cb:48:29:0c:34:d6:df:e5:bb:1a:ab:d4:f0:22:
         bc:cb:38:d4:62:16:76:27:53:01:ed:6e:3f:95:ba:8c:0d:56:
         3b:90:ea:cc:42:e0:de:d5:b6:aa:23:fb:00:c1:75:9d:93:31:
         f5:a6:97:0f:f7:85:c0:85:56:89:0d:2a:1b:ee:84:fc:b4:2f:
         73:51:38:d5:12:21:0c:47:3e:c0:97:76:32:3b:60:d7:91:8b:
         5c:42:ea:0b:de:e8:3b:ec:f1:12:b4:2c:99:9d:c9:3c:49:66:
         87:bd:75:ca:07:38:cb:a8:7d:20:fb:92:26:7e:8d:8b:8d:eb:
         6f:43:2b:46:cf:4a:4a:99:00:ba:46:a1:9a:48:1e:1a:7a:40:
         6d:1a:c7:ec:d9:eb:fb:9f:a3:23:28:7d:eb:31:79:a1:d4:4f:
         a1:a1:24:34:07:f8:08:67:7b:2d:6d:bc:ae:ef:94:e1:da:10:
         2f:83:36:f1:3e:48:66:c7:ea:6b:44:cf:fa:9f:0a:cb:4d:65:
         1b:7a:9c:a8:c9:8d:90:e4:93:84:6b:9c:15:04:d3:62:72:da:
         c6:75:ac:1e:14:db:f7:5e:0b:af:77:8a:59:88:8b:ce:44:79:
         e4:7c:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:56:27 2025 by rpki-client