Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          h0BLRWxldYc8lwMSiuAl2XkkknJG2u5Wqrvtx6lNOl0=
Subject key identifier:   5D:85:34:D3:0D:DE:C4:92:B4:A1:F9:87:3C:62:D7:26:34:C3:7F:1D
Certificate issuer:       /CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
Certificate serial:       170B5BE1B52DB53C5B478D9ABD6E6D6A32E2142F
Authority key identifier: 5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
Signing time:             Tue 21 Jan 2025 14:07:43 +0000
ROA not before:           Tue 21 Jan 2025 14:02:43 +0000
ROA not after:            Tue 20 Jan 2026 14:07:43 +0000
asID:                     61785
IP address blocks:        201.131.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0b:5b:e1:b5:2d:b5:3c:5b:47:8d:9a:bd:6e:6d:6a:32:e2:14:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D02A9D5EA4562DFA1998A8F4C882ACD6908671E
        Validity
            Not Before: Jan 21 14:02:43 2025 GMT
            Not After : Jan 20 14:07:43 2026 GMT
        Subject: CN=5D8534D30DDEC492B4A1F9873C62D72634C37F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:23:37:43:a4:f5:73:e7:c2:69:f1:43:29:
                    ad:b9:ae:e5:f8:08:af:6e:b1:5f:18:33:09:b8:73:
                    2e:60:35:c3:70:18:17:a5:31:d9:db:2b:bf:5b:0e:
                    64:d4:30:e2:bf:fd:88:22:53:ee:a3:fa:1e:3c:92:
                    68:80:49:ca:b1:fe:9c:9e:b8:d6:c0:6f:60:a5:39:
                    2b:bc:b7:2b:42:66:4e:da:c0:e2:1f:6d:a1:17:f4:
                    b1:d5:57:dc:51:4c:9e:43:74:b9:64:46:bb:f2:39:
                    86:af:c1:65:10:20:00:51:f7:14:19:32:8b:90:a1:
                    f5:e1:a1:3d:6b:02:81:7b:be:8d:07:3b:8e:88:d9:
                    fb:c3:4d:ac:50:0d:b6:fb:3e:cd:f5:af:b7:9e:be:
                    6c:c0:61:34:84:49:6d:20:9c:96:07:4c:9c:c5:df:
                    b0:8c:84:e9:e8:22:c6:3d:7a:f4:4d:06:4a:7f:cd:
                    9f:4f:5b:8c:24:56:6e:77:53:74:5c:c5:f1:23:f6:
                    22:30:c6:cb:06:8c:af:66:32:af:94:1b:cb:92:3a:
                    93:18:ea:ba:f5:ed:29:bf:b1:20:bf:b5:a4:89:79:
                    fb:ae:c9:08:5c:c8:53:56:d9:d4:74:36:4c:e1:cf:
                    1f:a5:05:6c:93:76:47:5c:f1:df:f9:d5:b8:72:8e:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:34:D3:0D:DE:C4:92:B4:A1:F9:87:3C:62:D7:26:34:C3:7F:1D
            X509v3 Authority Key Identifier:
                keyid:5D:02:A9:D5:EA:45:62:DF:A1:99:8A:8F:4C:88:2A:CD:69:08:67:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D02A9D5EA4562DFA1998A8F4C882ACD6908671E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:42:b1:8a:bc:d7:06:76:d3:f9:b7:cd:db:dd:25:02:41:
         aa:7b:0d:b8:98:46:f4:87:34:a9:96:71:d4:cb:c5:10:2f:fe:
         1f:aa:ba:0d:ea:53:24:1a:6d:2c:44:68:71:9d:80:51:42:3f:
         8f:ca:23:21:44:d0:20:95:12:e5:a2:bb:4e:ae:55:04:a9:2e:
         a9:94:ca:c0:b9:9c:11:de:c8:e5:ff:61:85:1b:da:38:db:09:
         a6:35:67:92:1f:8a:6e:d6:20:df:e1:b6:97:bd:75:21:e2:9c:
         2e:30:06:f8:61:89:49:9e:01:15:95:52:58:c4:9a:b4:dd:ee:
         78:cc:98:c7:8d:53:ba:65:91:3b:94:9d:e8:2d:cc:ea:e0:a7:
         60:64:78:5b:b9:fe:8c:ae:c8:ca:12:58:e3:b1:e0:2b:d0:f0:
         6a:09:ba:0f:01:f3:62:59:c1:4c:3b:92:51:5b:bd:22:ed:41:
         c3:e6:b2:88:3d:9e:b1:2e:2e:8b:28:3e:20:9e:f4:6d:d9:f0:
         cc:70:49:91:47:ae:ae:1d:5c:62:bf:78:e5:22:bb:ca:2a:d9:
         f7:c7:ac:26:17:d1:7d:05:4d:70:cd:33:08:32:79:47:7a:9a:
         61:76:89:48:b1:4b:ce:1c:aa:8d:d4:0b:c6:46:59:b9:1d:c7:
         fb:92:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 16:51:38 2025 by rpki-client