Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
File:                     3133312e302e34382e302f32322d3234203d3e203631383832.roa (raw, json)
Hash identifier:          xVGKmeIRvEPrQvBMYxe5riiY2Qy/E/nEV+V2pM1K7NA=
Subject key identifier:   A9:F9:9C:3D:1C:49:92:C0:BA:CF:E7:8C:80:0E:F5:E5:54:ED:2E:BE
Certificate issuer:       /CN=FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6
Certificate serial:       3C54AC63CE369BD6A74B0F02CF019BFC9D3D0375
Authority key identifier: FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
Signing time:             Tue 25 Feb 2025 00:55:21 +0000
ROA not before:           Tue 25 Feb 2025 00:50:21 +0000
ROA not after:            Tue 24 Feb 2026 00:55:21 +0000
asID:                     61882
IP address blocks:        131.0.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:54:ac:63:ce:36:9b:d6:a7:4b:0f:02:cf:01:9b:fc:9d:3d:03:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6
        Validity
            Not Before: Feb 25 00:50:21 2025 GMT
            Not After : Feb 24 00:55:21 2026 GMT
        Subject: CN=A9F99C3D1C4992C0BACFE78C800EF5E554ED2EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d9:69:58:5a:79:b5:5f:03:f2:47:eb:2d:64:
                    07:a0:99:8a:fa:50:d3:26:15:b6:0f:83:a4:c1:cd:
                    5f:01:0e:8d:00:f8:39:08:8b:c8:51:30:8f:99:c1:
                    50:96:7a:e2:bb:83:30:5e:1a:1d:e0:79:96:38:37:
                    a2:bc:f9:29:e3:89:8a:d3:2d:e0:3a:7e:49:cc:ea:
                    af:eb:9f:7e:43:59:c5:7d:7d:b2:04:12:25:f7:4b:
                    80:3f:6f:c5:41:3a:e3:c4:f8:ee:af:0b:cf:26:70:
                    59:11:57:da:46:db:9f:7b:9c:05:21:c9:4d:4d:57:
                    f2:5c:db:31:21:11:b1:5b:e6:aa:13:06:6b:a4:d4:
                    dc:f3:77:59:86:30:0a:18:06:a2:0b:e6:25:c9:17:
                    29:85:a9:e2:b8:1d:57:52:45:91:4d:e2:75:01:37:
                    d5:89:31:7a:34:a9:3e:ce:91:be:95:f7:e7:f1:93:
                    fd:53:a4:ea:e7:6d:7f:d7:3c:03:e5:62:08:1c:dc:
                    ee:61:1b:f6:28:d6:2c:9f:10:ba:66:34:8d:e1:ff:
                    f0:7a:6f:ed:21:70:8f:29:e5:0e:07:eb:21:44:e1:
                    15:40:d0:bb:45:7c:52:c2:70:9f:9d:1e:83:9a:68:
                    ed:b8:17:73:82:19:94:35:18:9b:c2:6a:d1:c9:18:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:9C:3D:1C:49:92:C0:BA:CF:E7:8C:80:0E:F5:E5:54:ED:2E:BE
            X509v3 Authority Key Identifier:
                keyid:FE:8B:1C:C2:05:65:AA:F3:44:9D:BB:55:AF:3C:8D:50:6A:AB:18:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B1CC20565AAF3449DBB55AF3C8D506AAB18F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:4c:83:d2:0d:1b:0d:a7:14:14:b8:00:a6:a4:a5:42:0b:fe:
         94:4a:cf:52:84:dd:a7:9e:5e:f2:b3:c4:b0:e8:50:f0:e2:dd:
         fa:32:aa:70:e7:d3:dd:82:2c:7b:dd:9c:49:29:38:e4:35:a9:
         87:d4:46:da:a9:bf:4d:71:70:63:48:3d:69:cb:ae:07:e1:20:
         3c:32:aa:31:50:02:50:8f:ac:d1:a5:08:ea:5e:99:e8:73:fe:
         f4:14:c2:f0:cb:0c:38:61:d1:da:cf:37:5e:b4:4d:49:d7:98:
         ad:3c:2c:0a:48:75:05:3a:9c:41:47:c1:af:d5:ef:11:8e:c6:
         0b:4f:3a:7e:72:44:ed:0c:5e:53:a9:b6:8d:44:e5:62:df:af:
         90:68:45:17:78:bf:12:3b:fb:92:0e:4d:d2:98:c2:c9:6b:60:
         8b:fb:4f:23:7a:fa:14:0d:28:a1:5b:af:4c:5e:ea:a1:6d:1c:
         3e:56:fb:19:62:1f:c0:1b:7a:e7:d0:5d:20:ae:23:13:19:45:
         c9:07:13:de:98:a1:7c:f8:cd:1e:5b:83:44:f2:f7:f1:9b:a0:
         ef:b5:04:1e:2a:db:9e:9d:65:92:28:64:8c:d3:e1:69:a1:88:
         d4:30:6a:22:13:e1:54:66:6b:15:a7:74:1f:10:2a:c5:fb:dd:
         c5:02:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:28:34 2025 by rpki-client