Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3234203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32332d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          IE43SUkVkLqCSONPWk0lTv8DVl5Iu8rrZI1pMVnnXAQ=
Subject key identifier:   3F:49:33:7C:5E:46:F0:5A:6D:50:FB:25:04:C2:B5:FC:7A:6E:BD:B1
Certificate issuer:       /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial:       07AD57BF959B3EA774C329BBBA8F3A6EDAE99B25
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3234203d3e20323636343333.roa
Signing time:             Thu 04 Jul 2024 22:02:49 +0000
ROA not before:           Thu 04 Jul 2024 21:57:49 +0000
ROA not after:            Thu 03 Jul 2025 22:02:49 +0000
asID:                     266433
IP address blocks:        131.108.252.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ad:57:bf:95:9b:3e:a7:74:c3:29:bb:ba:8f:3a:6e:da:e9:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
        Validity
            Not Before: Jul  4 21:57:49 2024 GMT
            Not After : Jul  3 22:02:49 2025 GMT
        Subject: CN=3F49337C5E46F05A6D50FB2504C2B5FC7A6EBDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8d:c5:97:22:45:bd:56:0c:05:fc:f4:06:c9:
                    67:2d:a6:d8:a8:20:17:96:0a:28:57:c3:b4:12:7a:
                    f7:12:82:1a:0f:15:ab:47:c6:7d:67:c2:34:e9:e3:
                    ca:e0:36:9e:61:0f:ad:36:27:f7:42:ba:16:fe:bc:
                    2e:b2:3a:4c:37:9a:6b:6a:a5:4d:11:b3:8b:6a:99:
                    2c:e7:43:90:96:4d:69:3f:f0:a1:6d:64:0f:8b:e7:
                    88:a6:de:79:81:3f:89:05:98:34:1b:cf:6d:83:45:
                    f7:52:65:da:5a:a8:b6:3c:7b:d7:fc:b9:0f:45:4c:
                    f4:0a:80:3f:b7:d3:9d:16:56:b2:d3:c1:6a:5a:92:
                    c9:5f:55:0c:b6:33:fc:81:50:65:3a:44:f6:03:ed:
                    94:08:ac:a2:4e:09:df:f2:b2:6b:70:ab:e8:0d:6b:
                    cc:27:42:a4:ab:0a:61:ba:98:bf:7b:fa:d4:5a:b5:
                    4c:2f:32:24:83:e3:b7:11:b0:b4:3f:54:c2:2e:de:
                    df:de:cd:09:d9:6e:3a:50:b4:29:1d:65:33:7a:02:
                    9d:0c:23:b3:cb:4b:7a:7e:f1:54:90:71:89:1c:d6:
                    74:fd:e0:ee:fd:60:e8:16:3d:b1:0c:dc:91:bc:48:
                    c4:7d:2c:db:3e:71:f6:a9:cb:7c:56:41:85:ac:59:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:49:33:7C:5E:46:F0:5A:6D:50:FB:25:04:C2:B5:FC:7A:6E:BD:B1
            X509v3 Authority Key Identifier:
                keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:29:2c:09:43:19:95:0c:31:28:1d:65:ee:3f:e0:0c:35:15:
         0a:78:c5:86:e2:c5:de:f4:09:16:b2:e1:e6:82:84:10:79:06:
         d5:15:0d:46:ec:c7:d3:ac:dc:09:e4:eb:f5:7b:46:a8:38:53:
         26:ef:9b:8f:6f:95:17:0f:da:b9:04:d5:04:e5:ce:7f:ca:ac:
         29:ba:3e:e2:72:6c:88:1d:7c:a3:52:2f:a5:3f:ef:ed:40:50:
         ef:12:f9:3d:23:f0:5b:e8:86:5d:20:09:56:3a:0a:d8:80:6f:
         3d:c0:d3:7b:38:60:4c:de:d1:91:62:99:bc:ea:25:41:7a:0a:
         07:38:d7:e8:12:22:89:06:9b:a2:7e:13:34:e5:97:cd:1b:d4:
         d0:fe:b2:b8:41:9e:91:c2:c1:2d:df:63:7d:16:39:da:b1:1f:
         8b:8b:ed:20:73:57:75:d2:c7:fe:fa:ee:93:95:5b:ad:5b:4b:
         f2:a4:86:04:98:d9:4d:e5:52:b2:2b:4d:60:00:37:9b:49:5e:
         27:aa:51:9d:b4:2a:60:0e:d6:5a:65:78:0a:8b:18:2d:dd:55:
         01:2a:29:5c:70:31:ed:64:ef:b9:10:f5:29:f6:c2:c1:ad:a2:
         2a:15:55:af:ee:ed:15:f9:3d:08:e0:ce:10:10:b2:c3:6e:63:
         98:88:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:03 2025 by rpki-client