Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa
File:                     3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa (raw, json)
Hash identifier:          FxVVPkN1kWFe9AWHudvG+9IlOwVLey2a7hUx1oy5mvw=
Subject key identifier:   6F:24:4B:E4:14:02:72:D4:CE:5E:4F:65:BF:F2:2A:C4:14:B5:88:51
Certificate issuer:       /CN=CF4F3244B4C4478154236189E948BC8868D07EF9
Certificate serial:       642ED5769889423AA2173AE2A8810A4AEBD9CF54
Authority key identifier: CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa
Signing time:             Mon 16 Dec 2024 20:55:32 +0000
ROA not before:           Mon 16 Dec 2024 20:50:32 +0000
ROA not after:            Mon 15 Dec 2025 20:55:32 +0000
asID:                     265942
IP address blocks:        131.196.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2e:d5:76:98:89:42:3a:a2:17:3a:e2:a8:81:0a:4a:eb:d9:cf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4F3244B4C4478154236189E948BC8868D07EF9
        Validity
            Not Before: Dec 16 20:50:32 2024 GMT
            Not After : Dec 15 20:55:32 2025 GMT
        Subject: CN=6F244BE4140272D4CE5E4F65BFF22AC414B58851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:c5:da:91:b2:cc:d4:57:32:47:e7:22:4f:
                    2d:38:ca:b6:22:f6:1c:f2:85:cc:e9:cd:b1:7d:2c:
                    3c:1d:7a:e7:d3:7c:49:2c:ec:7a:56:bf:40:90:af:
                    e4:9d:be:02:ed:44:c5:ab:4e:34:22:b9:03:8d:d9:
                    af:07:0c:dc:dc:4d:7d:39:81:ef:12:87:be:de:1a:
                    07:c0:6f:fb:b8:c7:47:a2:72:f5:68:ed:e8:d6:cd:
                    60:08:53:05:61:99:55:d7:c1:8b:66:3c:7d:8d:d2:
                    05:1c:24:f9:c3:aa:38:95:7c:2a:eb:7b:cd:dd:8a:
                    b3:e3:94:c0:1e:83:7b:1e:31:75:86:8b:51:aa:ea:
                    ed:7b:13:d8:b4:f9:4b:bc:90:62:6a:32:e1:6f:f6:
                    fe:96:d3:a8:5a:60:3b:f0:1d:0a:cd:5d:95:b1:22:
                    88:6c:c1:7d:aa:af:d1:73:e9:ac:e7:c3:f8:28:f5:
                    e1:a1:8f:61:d3:a1:25:da:d6:a9:2e:f6:53:0d:10:
                    5e:d3:6d:b3:82:0a:d6:11:b4:5a:0d:00:a0:ff:16:
                    75:cf:68:5f:cb:36:ae:8e:7e:b2:a2:2e:f0:0d:bb:
                    4a:7a:19:b5:c0:33:20:54:b2:49:64:16:f0:af:ef:
                    82:4d:5a:b3:27:ff:95:5a:0f:e8:cc:0d:b8:2e:cd:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:4B:E4:14:02:72:D4:CE:5E:4F:65:BF:F2:2A:C4:14:B5:88:51
            X509v3 Authority Key Identifier:
                keyid:CF:4F:32:44:B4:C4:47:81:54:23:61:89:E9:48:BC:88:68:D0:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/CF4F3244B4C4478154236189E948BC8868D07EF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4F3244B4C4478154236189E948BC8868D07EF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3232203d3e20323635393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:42:58:db:a1:8c:30:25:08:3e:98:f7:03:e1:a0:cc:8b:
         90:bb:2e:9f:58:d2:aa:3b:7e:fb:8f:f8:6a:37:18:b1:f3:5c:
         bd:35:ff:49:f6:91:fb:0e:17:ee:0a:54:0b:89:55:f8:91:7d:
         33:82:82:d5:62:d5:f7:06:9b:02:fd:cf:91:e6:8d:30:0b:4e:
         10:2b:7d:d2:f1:b5:e5:27:91:db:b0:ec:ea:27:ed:31:60:f6:
         3a:96:ff:35:17:28:0b:76:2d:12:0c:c0:c8:a7:5b:5e:33:10:
         04:8e:7c:9d:b3:74:0c:b4:01:18:42:a7:3e:f2:23:f4:c5:e6:
         ef:2b:37:2a:ed:eb:45:6f:92:8e:c1:2a:2e:72:84:62:47:76:
         3a:6c:2a:7e:3f:de:d0:44:1a:37:f5:a8:83:e3:3e:26:8c:f6:
         3a:bf:c1:b1:91:0b:0c:25:57:68:5e:bb:b9:32:c5:cf:2c:72:
         1d:c2:97:13:06:ec:b2:98:f0:ae:e3:61:ab:8f:b3:3b:a1:5c:
         6a:7d:a1:23:d2:00:b6:7e:e5:21:1e:6e:1c:5e:33:ea:cd:dd:
         3c:4d:43:b1:e7:39:74:72:a1:b9:a7:78:52:7c:74:64:d9:09:
         3e:97:f0:11:69:bc:34:61:98:54:64:23:02:1c:f1:47:8a:92:
         f0:54:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:22:46 2025 by rpki-client