Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          rSPsZP2mm0SRMgw/Cq8L5dAtF+7hVkcFSAt7WvtZLVM=
Subject key identifier:   D4:46:D0:2C:7B:79:3D:2D:6D:C7:58:B3:27:87:DF:63:99:AB:FA:1A
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       78A1DA1CDC7CCA1AD2DE4FE6B1AF3EC25FF15814
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa
Signing time:             Wed 05 Mar 2025 21:33:04 +0000
ROA not before:           Wed 05 Mar 2025 21:28:04 +0000
ROA not after:            Wed 04 Mar 2026 21:33:04 +0000
asID:                     264368
IP address blocks:        131.161.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a1:da:1c:dc:7c:ca:1a:d2:de:4f:e6:b1:af:3e:c2:5f:f1:58:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Mar  5 21:28:04 2025 GMT
            Not After : Mar  4 21:33:04 2026 GMT
        Subject: CN=D446D02C7B793D2D6DC758B32787DF6399ABFA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:3f:55:82:9a:ef:cc:5b:18:68:d7:b3:e6:
                    a5:3f:09:8d:7d:65:ef:87:08:0a:74:82:1d:b8:55:
                    6a:2f:f4:3c:e4:3c:0d:57:d1:b3:ef:6e:96:80:58:
                    ea:7b:66:fd:d1:6c:98:34:aa:f7:d6:b8:12:40:2b:
                    1a:c1:a5:34:91:fe:dd:4e:00:5a:7a:09:09:6e:83:
                    d9:92:78:16:fc:61:06:33:fe:76:25:0d:38:89:f3:
                    f9:6c:0e:ed:f8:01:f8:d9:84:ae:c4:ee:3d:b9:d1:
                    e4:c9:a2:a8:ac:f1:83:a7:ea:cf:8f:05:fd:49:06:
                    cc:61:f0:68:5a:b1:f3:22:c2:0a:c5:53:02:d7:d4:
                    5c:31:9a:e8:08:4b:4a:78:c7:18:85:9d:d3:c2:4d:
                    c0:0b:dd:35:6d:f0:b5:ff:f8:a2:fc:b5:d5:9c:30:
                    f2:e7:4b:9a:cc:cc:32:24:98:00:fc:b3:d6:8e:fb:
                    a6:30:8e:9f:f5:ad:e9:2e:4d:68:d5:b1:f1:1b:05:
                    35:e0:d1:a6:91:8e:83:68:dc:19:eb:23:55:d6:1e:
                    3c:f4:54:87:ca:2a:f1:c4:f0:ee:6d:16:68:95:97:
                    d3:11:9f:72:b0:5d:dd:e6:c8:1e:ff:c4:99:e9:13:
                    9e:7c:16:96:11:3e:d0:26:41:32:8d:6a:1b:e1:f0:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:D0:2C:7B:79:3D:2D:6D:C7:58:B3:27:87:DF:63:99:AB:FA:1A
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:5f:4f:23:0d:f9:b1:f9:8b:ad:53:e3:8e:ca:84:f7:4d:
         08:af:ff:3f:c8:f2:07:f4:bc:76:0d:a9:65:40:82:b8:a9:23:
         89:42:1b:2d:63:b9:66:a9:39:47:83:82:f4:c9:f4:25:5e:fc:
         93:91:c6:93:04:7a:c0:8a:21:be:66:3c:4f:b1:70:ac:56:97:
         5e:f6:9f:18:e2:3e:c1:78:02:cc:12:c2:4a:33:3e:72:1f:85:
         a6:e6:ed:3d:1d:32:ab:0a:9c:44:62:5b:1a:2b:9a:a7:33:e0:
         52:d1:17:12:f8:33:4b:69:2a:62:2c:4c:cc:1a:50:90:32:69:
         0c:67:df:80:ca:47:02:4b:c9:6f:16:a0:16:db:7e:a4:71:f8:
         85:9b:17:9e:7b:10:69:86:94:fa:39:18:aa:84:67:74:99:ac:
         51:a2:d2:5a:af:3c:a2:dd:55:52:ab:01:96:8a:3e:30:25:e9:
         28:22:80:c3:c1:80:9d:f5:e2:9d:43:f3:a1:f2:e4:7b:3f:42:
         dd:a9:4e:97:f1:67:8f:77:d2:9f:aa:bb:0b:7d:0b:4e:ba:e5:
         5a:1f:44:35:94:97:ea:99:a5:e3:b8:a9:76:74:a0:73:61:f1:
         d4:2c:ff:de:22:c9:43:0f:05:ef:a8:d7:9b:28:69:cb:e0:5b:
         7c:be:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:59:25 2025 by rpki-client