Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa
File:                     3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa (raw, json)
Hash identifier:          uPSWbuUZ/7K9FopjgFVMTK27TPenyDtl/eQcty5wkLw=
Subject key identifier:   96:F3:64:A4:BD:28:75:B1:65:1D:B0:4A:5C:E4:A8:C5:88:12:F0:65
Certificate issuer:       /CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
Certificate serial:       7B4547B9C59E205818B0257673E39A62AA5C218B
Authority key identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa
Signing time:             Wed 05 Mar 2025 20:03:38 +0000
ROA not before:           Wed 05 Mar 2025 19:58:38 +0000
ROA not after:            Wed 04 Mar 2026 20:03:38 +0000
asID:                     53167
IP address blocks:        143.202.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:47:b9:c5:9e:20:58:18:b0:25:76:73:e3:9a:62:aa:5c:21:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
        Validity
            Not Before: Mar  5 19:58:38 2025 GMT
            Not After : Mar  4 20:03:38 2026 GMT
        Subject: CN=96F364A4BD2875B1651DB04A5CE4A8C58812F065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:cf:77:4e:19:78:92:24:9e:df:cb:87:d9:
                    bd:73:42:23:ab:e0:dc:29:40:34:d9:23:ab:78:fe:
                    3d:e2:a0:2e:0f:81:95:7a:e3:ee:f0:be:76:0b:13:
                    fb:4f:53:c9:e3:30:b1:6b:a7:a2:35:fd:ce:48:b4:
                    8c:28:8c:4e:b5:d1:50:5b:35:97:11:6b:9a:b0:a1:
                    81:c6:f4:f0:28:bf:e8:69:da:93:9c:a7:df:c8:3e:
                    37:50:e3:32:7a:5d:39:36:30:4b:13:3a:68:74:4f:
                    cc:74:2b:87:c2:08:98:17:70:89:49:74:32:38:c5:
                    5a:20:b5:3b:99:d2:fa:1b:96:f8:84:9a:29:98:0f:
                    ea:45:0e:1a:15:39:9b:a4:d5:b8:70:2f:d2:a8:01:
                    9c:ce:a2:d0:c5:f2:49:cd:c7:6f:bd:e9:0e:e0:e7:
                    8a:ed:f7:c6:47:4e:1a:18:bc:ac:c0:81:53:4b:3b:
                    dd:22:73:56:2f:27:bb:b8:3b:eb:7d:a9:d1:57:55:
                    38:2e:2e:8e:dc:06:23:02:4e:ce:e3:a3:bc:7e:64:
                    be:29:13:dd:65:c4:17:8f:f2:c4:6f:b1:b1:64:82:
                    e8:87:1a:27:90:d6:a2:08:5a:8e:2c:b8:a4:cc:d5:
                    5a:6d:84:85:bc:cd:cb:a3:f6:19:c0:a5:3c:68:df:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:64:A4:BD:28:75:B1:65:1D:B0:4A:5C:E4:A8:C5:88:12:F0:65
            X509v3 Authority Key Identifier:
                keyid:B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:14:71:e7:9d:7f:f9:23:a2:92:3c:27:7d:49:44:98:3d:
         3f:13:b7:ad:dd:31:d1:4a:d5:e8:8b:44:cc:83:df:d4:37:b1:
         fa:6c:85:3b:83:72:7a:b6:6c:d8:16:11:bb:b8:59:90:49:f3:
         65:21:f2:fc:97:ea:79:bb:fc:1d:a9:2a:df:e9:99:4a:94:61:
         94:81:f8:ed:a9:1d:31:46:7d:1d:da:3f:d3:9b:1b:0f:58:4b:
         a6:d6:a0:74:8e:89:55:4d:6e:a1:68:1d:06:0e:1f:ce:1f:73:
         4f:56:ed:d6:8a:da:d8:7c:3a:5b:ac:74:f0:67:b8:86:42:f2:
         da:06:82:81:2d:47:21:14:36:57:07:13:4a:46:f4:95:52:f1:
         39:c2:17:3a:5c:35:29:a2:89:2c:19:1a:fe:74:2f:99:8e:9e:
         4c:e6:e5:3e:3d:e3:f8:8a:aa:56:74:62:e6:a7:b6:e0:55:0c:
         bc:c9:d8:e8:a6:b3:a9:c6:1a:c8:fe:02:96:0d:41:fc:29:1f:
         d0:ab:fb:cb:f5:05:81:1f:a4:e2:b5:bd:65:db:16:93:96:69:
         4c:79:35:e3:fd:39:cc:f9:54:0f:1a:b2:1a:9b:01:bb:7d:19:
         6d:d7:4c:fc:39:5c:7f:e7:a8:85:3f:b9:3c:c8:30:81:30:5a:
         2c:94:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:39:32 2025 by rpki-client