Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3232312e34382e302f32322d3234203d3e203238313938.roa
File:                     3133312e3232312e34382e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          05pFYMXuYJAm9UngbssNa/RhQ1bP0qTcCp5SqzSVsWE=
Subject key identifier:   EE:84:82:78:03:41:BA:08:CA:43:0F:83:DA:A1:18:74:51:6C:40:34
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       1232B1E42352278024E35965D248ACE30B02D4A8
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3232312e34382e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:07:20 +0000
ROA not before:           Mon 21 Aug 2023 20:02:20 +0000
ROA not after:            Mon 19 Aug 2024 20:07:20 +0000
asID:                     28198
IP address blocks:        131.221.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:b1:e4:23:52:27:80:24:e3:59:65:d2:48:ac:e3:0b:02:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:02:20 2023 GMT
            Not After : Aug 19 20:07:20 2024 GMT
        Subject: CN=EE8482780341BA08CA430F83DAA11874516C4034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:bd:9f:f7:ba:f8:d2:28:61:8c:5c:69:e1:
                    76:de:cc:88:bd:ac:f7:ad:af:52:9f:d4:4a:3f:03:
                    e3:02:ba:c9:01:4a:10:d1:f3:e5:74:ad:97:b6:b7:
                    9a:e6:35:f3:6b:b9:2e:b2:7e:2d:54:73:7e:1b:08:
                    14:03:ef:08:ff:0d:13:1f:a2:db:f7:64:34:36:36:
                    a2:5c:7f:b8:2e:3e:a5:21:dc:aa:11:0b:71:ea:d6:
                    f9:d9:33:53:22:f4:4c:b9:9d:16:55:48:97:af:3c:
                    14:48:59:fc:93:03:84:f2:bf:0d:3a:7e:c2:e2:ab:
                    09:39:bb:a6:fc:6a:5d:4f:78:c1:24:27:fc:09:64:
                    e8:87:4e:9c:bc:01:bc:21:91:9a:06:e0:a6:15:50:
                    74:1d:02:c7:c5:92:aa:62:a2:57:bd:8b:a7:fd:d3:
                    0d:60:78:1d:cf:ba:dd:87:86:c2:e9:be:b2:30:b4:
                    6a:cd:35:d1:5c:f8:34:17:5a:42:55:c0:33:f8:49:
                    b9:86:82:6a:07:2d:e8:e5:b4:24:65:06:3a:7e:2c:
                    34:57:67:4f:b6:37:19:e6:d7:69:aa:79:63:fa:81:
                    e9:67:60:6d:80:f7:ae:43:37:14:fc:8b:6d:bb:95:
                    46:6d:c0:c0:5e:f0:70:60:93:b5:bd:5c:5a:84:46:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:82:78:03:41:BA:08:CA:43:0F:83:DA:A1:18:74:51:6C:40:34
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3232312e34382e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:23:d5:f9:40:0a:89:37:80:c5:07:ec:2d:37:51:a4:6d:a1:
         d4:f7:b1:d2:69:b1:a7:9c:8c:c3:e7:09:cc:8f:1d:2f:51:b4:
         aa:51:e4:eb:f7:ef:0e:84:16:68:f3:0e:29:4c:ce:d7:38:4c:
         87:a8:70:6d:b8:e1:6b:0e:88:79:b4:01:0e:50:8f:e1:aa:dd:
         5c:35:b3:e8:fc:c3:a2:14:af:56:9e:90:14:8d:6e:14:dc:04:
         18:7e:4b:d1:48:74:ec:53:3b:18:c3:f8:06:4a:c5:57:a5:60:
         bc:da:60:ae:54:af:d3:e4:0e:55:48:56:98:d5:42:cb:6d:d6:
         f4:11:cd:6c:41:4e:d7:90:dc:05:34:3b:ef:a0:7d:e7:97:b6:
         4a:30:80:2d:51:e1:d3:13:0f:e2:b4:ce:67:60:74:33:5f:62:
         de:3f:16:88:69:28:8c:b2:ca:e4:3d:d8:ed:e4:84:f5:a2:dd:
         ad:7e:44:2b:d4:4c:f9:ba:17:a9:e6:e6:d9:cb:ef:b4:93:c0:
         fa:cb:c2:e4:0e:18:7c:5f:8b:d3:76:eb:8f:20:02:74:d8:07:
         f0:3b:ba:6f:3a:6d:16:85:0f:bf:9a:f3:69:a4:01:43:af:fc:
         9e:71:24:ac:a5:18:0f:d6:cb:1f:a4:93:b3:8d:e0:35:e9:7f:
         60:ea:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:55 2025 by rpki-client