Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3232203d3e20323632323933.roa
File:                     3133312e3136312e3133322e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          gQVP6ThUnU/oBdoeTzXqjIS9adff2cuvfunHQqaBdGA=
Subject key identifier:   2B:66:AE:F9:83:B8:C8:AB:65:E1:ED:4E:FD:AE:4D:3E:9A:E7:13:64
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       0A35AC30C9BA955BEF5EC7F328D9308AA6718983
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3232203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        131.161.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:ac:30:c9:ba:95:5b:ef:5e:c7:f3:28:d9:30:8a:a6:71:89:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=2B66AEF983B8C8AB65E1ED4EFDAE4D3E9AE71364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:f2:2e:be:b6:39:7c:63:75:d5:a2:25:2a:
                    ad:38:db:4d:e5:0c:85:f2:73:c3:52:3a:64:d2:44:
                    e0:1a:79:bc:bd:e7:83:84:80:57:8e:0e:25:9b:4d:
                    d8:32:51:26:bb:0e:92:8a:4e:3f:cb:4d:3a:f7:a8:
                    5b:c9:67:76:9c:c7:6a:61:f2:b6:b6:30:6e:bd:33:
                    e8:cd:0c:3f:b9:3a:db:8f:dc:ab:2c:4c:61:f7:29:
                    95:d6:3c:b5:4a:34:65:19:e9:b8:2b:e0:9f:58:67:
                    20:78:78:97:84:59:bc:e0:68:7e:f0:b0:cd:c1:52:
                    cc:dc:6d:ea:ea:10:e4:8d:21:c6:06:9d:68:a8:78:
                    a2:67:26:b0:ea:c7:96:98:e4:d0:b4:d2:58:ac:85:
                    1f:4a:8c:00:c5:69:2f:c8:f8:dd:d2:fd:f1:6a:10:
                    b2:b7:5e:15:67:d1:0b:7a:e3:d3:c7:83:c2:b4:48:
                    0f:20:02:de:b8:c0:08:ca:ed:fa:d8:34:34:a7:8b:
                    0c:1c:c0:7f:ba:c1:5a:f1:ee:c7:3e:59:ab:78:cf:
                    2e:4e:27:41:fc:47:12:ba:47:ab:9a:ea:8d:1f:31:
                    87:6f:b7:ef:d9:c1:a7:7b:c4:85:5c:55:82:ee:4c:
                    57:8e:b3:d9:08:b8:2e:c0:90:2e:27:81:0e:9f:f8:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:AE:F9:83:B8:C8:AB:65:E1:ED:4E:FD:AE:4D:3E:9A:E7:13:64
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:63:0f:a5:80:ce:5b:23:9b:b4:2f:8b:a0:04:04:03:07:
         d7:24:41:38:a4:88:eb:64:cf:4e:96:9b:c6:3c:1a:38:05:5d:
         23:88:bf:36:d1:06:3e:93:fa:3e:d1:b4:b0:df:bf:b2:4e:65:
         10:33:c7:0b:a2:47:d1:b5:c8:eb:da:a9:3d:56:af:6d:73:32:
         d9:8f:96:01:66:27:23:0c:04:ea:b7:0a:09:72:ea:d8:6b:0c:
         8c:61:fc:94:72:0d:e6:13:6e:eb:0f:54:74:30:2a:09:61:a5:
         8c:be:74:55:07:14:aa:e0:aa:dc:0e:0e:7e:52:49:35:9f:4d:
         25:b1:f3:5e:18:6d:ad:9e:11:13:47:91:33:04:6c:80:d0:67:
         66:36:46:f0:8c:ea:fc:92:a7:38:65:93:57:20:f2:50:d8:4c:
         0b:81:d0:8f:e5:7e:8b:cc:d4:d6:98:9c:83:54:cb:76:b6:90:
         cd:6e:2b:29:c2:35:45:7c:b1:12:e1:23:4e:b9:37:be:99:3d:
         f6:ff:37:43:02:f5:1c:3f:09:70:70:2f:74:a6:51:f5:76:42:
         a9:86:ed:f9:9d:14:76:6a:c7:9a:92:7a:cd:6b:fe:c6:1a:35:
         5e:88:2f:10:09:6d:cd:c2:f9:52:89:e3:60:1a:17:0e:08:da:
         a1:14:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:10:08 2025 by rpki-client