Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa
File:                     3133312e3130302e33322e302f32322d3234203d3e203631373436.roa (raw, json)
Hash identifier:          wwLc/8cH/LUOicYWTZAxVB6F+4s+tcDOjXxygmR76Yg=
Subject key identifier:   87:3A:31:29:1C:E0:C1:D5:AE:61:9E:0D:54:89:A5:DE:F1:56:E2:43
Certificate issuer:       /CN=B10A8598B44772B93158A2AC959BE76B0DF306DF
Certificate serial:       07FD22C21DFADCB229D10FA11FE7F63EF64843CB
Authority key identifier: B1:0A:85:98:B4:47:72:B9:31:58:A2:AC:95:9B:E7:6B:0D:F3:06:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa
Signing time:             Wed 28 Jun 2023 19:00:00 +0000
ROA not before:           Wed 28 Jun 2023 18:55:00 +0000
ROA not after:            Fri 28 Jun 2024 19:00:00 +0000
asID:                     61746
IP address blocks:        131.100.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fd:22:c2:1d:fa:dc:b2:29:d1:0f:a1:1f:e7:f6:3e:f6:48:43:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10A8598B44772B93158A2AC959BE76B0DF306DF
        Validity
            Not Before: Jun 28 18:55:00 2023 GMT
            Not After : Jun 28 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:1d:38:ac:04:9b:94:d7:23:02:b2:29:ed:
                    7a:76:9c:38:be:e9:fc:18:c9:f6:34:94:42:85:c0:
                    bf:53:e9:6b:1d:4d:96:28:56:91:45:73:d9:94:86:
                    dc:b6:17:82:f2:24:c8:f0:a0:1b:2d:03:24:89:60:
                    ea:81:62:4c:33:82:46:fd:1f:a5:56:a0:aa:7f:93:
                    98:e9:93:78:5a:33:45:7f:ce:39:11:42:67:63:48:
                    85:79:0e:26:78:9e:c8:11:34:48:da:c0:f2:e8:29:
                    87:9b:f3:88:84:5b:2b:97:11:a6:60:cc:ae:e2:9a:
                    73:37:93:8e:f5:ff:1e:af:ab:10:5d:70:6e:79:f6:
                    c5:8f:71:8b:58:85:99:12:f7:ad:fa:b9:1f:fa:62:
                    ac:2c:3c:40:04:d6:08:73:2b:75:87:cb:3c:ec:1d:
                    7d:3b:ee:2a:15:55:dc:0f:42:80:71:e3:66:09:ae:
                    0c:fb:65:ea:a6:7e:fe:07:07:bc:96:67:db:07:2b:
                    65:a0:28:e4:6c:ef:81:30:20:3e:aa:b7:42:bc:3a:
                    1f:5e:e8:02:d4:f0:f1:7b:8e:9a:03:2a:10:7d:aa:
                    44:85:1c:49:3c:76:62:8b:a0:a9:16:92:90:b7:0d:
                    c8:81:5e:87:d1:87:24:76:63:b9:a0:76:47:ba:b0:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:31:29:1C:E0:C1:D5:AE:61:9E:0D:54:89:A5:DE:F1:56:E2:43
            X509v3 Authority Key Identifier:
                keyid:B1:0A:85:98:B4:47:72:B9:31:58:A2:AC:95:9B:E7:6B:0D:F3:06:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:02:85:86:19:01:32:03:cd:c9:1f:9e:5d:81:f3:7b:bd:05:
         50:c1:56:1b:c5:81:fe:30:d4:7a:3e:45:de:51:02:db:76:3a:
         f3:c3:97:3b:f1:e3:0b:14:59:a0:c1:34:5d:7e:a2:da:d5:2a:
         6d:b0:51:18:8e:3f:5a:52:a6:b6:4f:f1:94:85:26:d0:64:58:
         45:93:fe:52:1c:67:d5:a8:2a:d9:a5:43:b2:a8:e3:5d:39:f7:
         0d:fa:60:80:3f:65:0f:78:a4:14:3e:2a:c0:6f:0e:f0:ce:e8:
         39:ae:73:7a:84:07:6a:53:48:7b:31:97:bc:37:79:f9:d5:00:
         0d:55:58:41:20:d0:d9:ce:2d:c7:5c:52:2e:f5:da:b3:80:82:
         bf:7e:32:02:f2:be:a7:7e:f4:d7:11:9c:9c:68:1c:1f:27:ed:
         f0:b2:56:ee:45:2c:56:7b:df:bc:f5:ae:5c:cd:0c:fd:67:2b:
         96:ee:cf:d4:b7:8d:40:a8:d5:b1:58:93:46:fe:6f:e0:51:2f:
         64:58:cf:53:4e:4b:74:85:9a:c6:15:8c:a2:d6:00:10:8d:05:
         67:14:c9:55:3f:16:1c:b0:57:1c:40:57:ed:64:36:73:81:ac:
         cf:82:3e:13:2b:2e:be:56:bf:28:0a:80:72:71:a7:e1:d0:19:
         2b:40:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:32 2025 by rpki-client