Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          PV+zJ5uzw1fzwPc4CVgqSnhZuAjmt3GqAE1gVtZB6xI=
Subject key identifier:   D2:C2:FE:B6:48:8A:6F:41:F9:E0:65:4C:E2:F4:93:AB:64:49:E3:73
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       212DFF50977ACED06EE10F58880CA0E4CC5D2D23
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        131.108.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2d:ff:50:97:7a:ce:d0:6e:e1:0f:58:88:0c:a0:e4:cc:5d:2d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=D2C2FEB6488A6F41F9E0654CE2F493AB6449E373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:62:39:b7:50:7c:d7:3e:20:cd:8e:e8:2c:
                    d3:5d:80:c2:f1:18:bd:3c:6b:bd:e3:4d:f2:43:42:
                    f5:00:1e:a2:e7:4b:59:13:af:cb:c9:51:30:78:e0:
                    e8:a7:f9:b5:62:7c:f6:ed:73:8e:c1:3e:32:6a:98:
                    bf:50:cd:19:84:3e:6f:a6:86:c8:54:d7:b3:45:da:
                    8d:fc:82:04:76:2c:a0:bf:69:0e:f7:8c:39:74:bd:
                    a1:0c:2f:0c:04:47:ea:2e:f6:7f:b1:94:a2:38:3e:
                    53:ac:5f:84:e4:08:4c:69:02:13:36:1c:9b:94:42:
                    bc:8d:87:9d:58:84:bd:59:5d:19:d6:a5:f6:e4:bd:
                    05:48:f9:96:c1:80:cc:56:4e:8c:29:0f:ee:aa:b5:
                    dc:cb:d5:c7:5e:ef:57:0d:85:17:50:9c:7a:8b:bd:
                    43:14:ce:7e:ab:94:1e:d0:7a:73:e5:4c:3f:c6:9e:
                    bd:ab:b1:d1:07:c7:6f:51:21:47:fc:f6:9e:4b:14:
                    5e:68:dd:97:60:df:48:6c:af:31:cc:d5:c7:39:30:
                    de:65:5c:8e:5c:cf:b1:ec:4b:8b:0f:e2:6b:6b:b7:
                    7b:9f:82:ef:6f:84:39:56:35:89:b3:e0:a5:26:de:
                    8a:cf:52:23:50:36:bc:fc:a0:b8:e6:d2:ed:94:ae:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C2:FE:B6:48:8A:6F:41:F9:E0:65:4C:E2:F4:93:AB:64:49:E3:73
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135352e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:6d:66:01:15:f7:11:52:5a:a0:74:9c:35:9b:7e:b9:ee:
         b8:39:f6:88:13:73:26:6f:34:08:a8:2a:4c:c2:fd:00:2d:60:
         67:0d:13:12:b7:95:07:3c:c0:fe:bc:b4:be:d1:c9:ee:b8:ff:
         0a:a1:79:93:2c:88:15:4a:db:f0:8c:2f:f5:dc:93:06:77:7a:
         17:35:f4:b9:00:89:a2:d6:e7:15:a3:fd:af:27:12:38:04:c2:
         b7:d9:c7:2d:e7:16:c7:62:76:02:3e:0c:9c:3f:af:cf:7b:ff:
         9f:ca:64:8e:27:a9:a6:31:38:02:91:67:88:c7:6b:47:4e:b0:
         41:b3:43:b2:1f:d0:64:d0:69:87:8f:9c:8e:9f:06:3f:20:c3:
         24:a2:41:da:e2:8d:dc:20:16:e5:9f:70:38:5b:54:07:de:27:
         d4:bc:a6:46:50:93:e7:43:65:ff:81:39:51:17:69:c2:c3:9b:
         57:29:96:46:68:9b:a4:30:dc:1c:04:74:7f:03:8f:21:f4:ce:
         e1:53:00:77:df:14:51:ab:1f:65:3b:0a:b8:54:04:76:9b:e6:
         0d:91:05:f7:51:fe:cf:3b:df:97:1f:72:5f:b2:ce:8a:d2:e2:
         86:c9:1a:4c:bc:f6:72:7b:f1:c3:ce:5b:5f:13:f9:14:38:0e:
         27:90:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:48:18 2025 by rpki-client