Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa
File:                     3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa (raw, json)
Hash identifier:          pHb9+3hwvEvBDor1TnFYGqYuIFoQnaqqSHlj7h+Mtuc=
Subject key identifier:   98:A7:9E:D9:00:04:FD:C3:01:A1:69:F8:6E:05:8D:3D:E8:E0:0B:37
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       3E43D7B41833E6F84F15927B44059F67C32A0E8E
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:47 +0000
ROA not before:           Fri 23 Aug 2024 19:49:47 +0000
ROA not after:            Fri 22 Aug 2025 19:54:47 +0000
asID:                     61633
IP address blocks:        131.100.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:d7:b4:18:33:e6:f8:4f:15:92:7b:44:05:9f:67:c3:2a:0e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:47 2024 GMT
            Not After : Aug 22 19:54:47 2025 GMT
        Subject: CN=98A79ED90004FDC301A169F86E058D3DE8E00B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:e1:09:89:a5:ac:b8:cb:d1:c8:a1:5a:b0:
                    8b:5b:6f:d6:ae:d0:3a:4d:10:ef:a4:95:40:e1:95:
                    95:67:ed:7c:bf:b1:b1:98:59:15:d5:9e:91:35:d6:
                    ce:84:b8:10:ca:a0:93:64:99:82:04:e3:9c:87:4d:
                    76:fa:f4:a1:79:e0:2d:67:74:4f:2e:61:24:00:68:
                    d1:16:fe:24:ed:1c:50:4a:a2:7f:19:33:8f:91:53:
                    7d:5c:5c:b3:04:0c:f5:c5:0f:5f:33:c4:65:5e:00:
                    d0:f5:b3:74:c7:d2:29:e1:64:d5:cd:2d:03:7a:8e:
                    8b:74:d3:a0:11:40:51:82:21:ab:f3:50:18:ab:a6:
                    a3:ea:0c:d9:4c:56:a4:83:ea:ab:31:34:98:c0:0f:
                    b9:44:ff:cc:01:2f:a8:25:10:24:80:64:ee:5e:05:
                    a3:f9:49:97:2e:ed:41:4a:79:f1:f9:1c:72:e2:90:
                    92:d0:dd:1a:7b:ef:ad:a7:b6:5f:a0:a0:4b:d6:56:
                    7c:1f:f0:1b:07:71:a3:2b:e9:19:52:78:2b:4f:8a:
                    be:b2:99:01:65:c5:83:69:1c:5a:65:3c:64:bc:58:
                    4b:2a:d5:5b:20:93:b8:e2:68:d7:f5:57:6d:ec:65:
                    6f:71:00:3a:2a:e8:32:17:b5:e2:16:4b:49:66:7e:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:9E:D9:00:04:FD:C3:01:A1:69:F8:6E:05:8D:3D:E8:E0:0B:37
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:b2:b3:22:ce:1f:3a:f1:f4:90:15:e4:46:e8:64:a7:a3:
         52:fa:04:b2:e4:b6:c6:e9:56:90:52:29:36:3a:fc:f6:74:f0:
         eb:9a:5d:40:e5:32:ea:e6:05:0a:1b:dd:39:1f:55:c8:32:08:
         ed:7d:5e:f2:ba:1b:26:de:0f:85:ae:c6:83:b1:76:db:56:f5:
         bf:c8:8c:62:de:4f:17:8c:3d:ac:30:11:3b:a3:5d:91:81:b8:
         f1:ab:01:d4:3a:0c:f8:bf:5e:60:cd:cf:7e:d1:b2:dc:3c:7d:
         c6:f8:ed:16:3e:76:07:2c:de:15:19:28:54:bd:94:57:24:5a:
         9a:71:a0:c5:96:8e:e7:48:e7:65:da:df:38:b2:80:2a:1f:80:
         7f:36:43:7f:eb:df:20:b1:43:6e:83:b0:d2:1a:74:c7:6f:58:
         93:e2:5f:d8:25:83:d6:a7:6f:af:5f:71:1c:94:07:5d:3d:a7:
         41:d9:5c:ad:23:20:31:6e:ae:35:c7:31:03:93:2f:3f:5e:b8:
         ed:3f:1a:67:33:3d:7d:3c:d5:7d:70:49:70:a1:d1:b3:93:07:
         f7:05:02:c7:68:22:93:12:5c:04:8a:77:a2:b6:81:bc:d9:22:
         78:85:0e:20:f1:e1:35:d6:08:b5:d2:fa:71:1d:5b:b1:bf:5e:
         81:52:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:05 2025 by rpki-client