Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa
File:                     3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          4m28FhbX8KENgVio9F1YwPJBun/mZ8lelCd/bPu+CX0=
Subject key identifier:   3D:06:38:95:9A:38:00:D3:F8:D2:E2:3C:A0:2F:E4:E9:D0:48:75:11
Certificate issuer:       /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial:       6224A0715E66872B9BE8D696871EEE24288D65F6
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa
Signing time:             Mon 16 Dec 2024 16:27:45 +0000
ROA not before:           Mon 16 Dec 2024 16:22:45 +0000
ROA not after:            Mon 15 Dec 2025 16:27:45 +0000
asID:                     264397
IP address blocks:        131.161.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:24:a0:71:5e:66:87:2b:9b:e8:d6:96:87:1e:ee:24:28:8d:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
        Validity
            Not Before: Dec 16 16:22:45 2024 GMT
            Not After : Dec 15 16:27:45 2025 GMT
        Subject: CN=3D0638959A3800D3F8D2E23CA02FE4E9D0487511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:9e:58:58:70:c4:ae:23:86:92:95:0f:a2:
                    9b:8b:03:f4:01:31:02:9d:0f:46:10:57:d4:89:06:
                    d2:54:3e:35:1a:c1:51:37:18:a9:45:26:23:7e:87:
                    cb:f2:27:5c:8e:b3:e1:73:1e:38:d5:1d:34:39:0c:
                    3b:2d:ce:ca:0b:3c:56:c1:3c:12:85:21:80:7c:04:
                    3f:6e:99:e8:46:79:6e:f8:98:68:0f:7d:40:81:ce:
                    50:00:a1:79:a7:98:b9:a2:77:e9:b6:00:59:ed:dd:
                    b2:f3:8e:4a:7d:61:01:48:c4:85:d3:c2:fd:92:0b:
                    ce:69:ac:ce:2c:33:10:d0:8d:58:31:10:77:20:29:
                    84:7f:a1:0a:79:a0:bf:cd:3b:85:56:63:37:af:1c:
                    b2:ad:54:4b:15:91:17:b6:8f:4c:f9:a2:d6:18:1b:
                    0a:b4:91:2f:37:24:8f:54:1d:b5:71:92:82:4c:64:
                    f3:ee:db:60:1e:73:0e:b7:ca:d7:08:a6:98:d6:90:
                    cc:1f:81:17:f9:a8:a1:df:a3:bb:a5:62:5d:e9:b0:
                    12:6b:76:f7:69:d8:99:14:41:ea:73:69:a9:99:fe:
                    be:e3:23:3a:d8:08:4d:c5:dd:32:c6:b3:00:66:d6:
                    f8:5b:af:96:11:28:d7:4b:ca:d6:87:29:74:94:28:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:38:95:9A:38:00:D3:F8:D2:E2:3C:A0:2F:E4:E9:D0:48:75:11
            X509v3 Authority Key Identifier:
                keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:b5:cc:f6:cc:6b:f3:7b:f8:ba:c0:b6:5e:f5:b2:a4:da:
         c4:1c:15:a1:e3:d5:ba:56:5c:c5:22:22:f2:b9:2d:54:74:32:
         a2:b3:ab:15:79:a1:83:6f:85:74:7c:c6:23:1b:a6:ad:ed:78:
         f4:be:10:6d:63:b6:a2:53:76:4c:11:88:fb:08:2f:76:70:8c:
         02:3a:98:bb:35:b4:0a:b9:6d:d1:d8:ea:69:bd:f5:9c:4f:b9:
         d0:34:0e:40:84:66:e5:f8:5a:8e:6d:a4:31:30:09:f4:4d:9d:
         94:7f:57:aa:69:17:44:b7:6e:a9:9a:9d:1c:60:a0:c2:b3:62:
         a7:1b:b8:e3:22:7b:e0:ac:3d:a2:09:04:a6:10:d3:95:c9:42:
         49:6f:88:f4:17:6d:ce:60:ca:8b:13:fb:36:25:37:d5:9d:c1:
         1b:5c:c2:9f:bd:ee:33:38:b3:1c:34:d0:f8:13:96:35:5a:0b:
         92:bf:35:6c:2a:f7:62:07:fe:41:ad:64:88:ca:0e:91:bd:92:
         8b:02:a0:2a:8c:85:f8:b8:3e:ef:07:e9:5d:24:c7:0b:e7:b3:
         b1:ce:f5:3e:a3:f8:b8:a6:8e:69:ae:f4:e2:53:7f:ac:9d:c2:
         3e:eb:1d:34:1c:8d:ee:ac:1f:bf:5c:6a:81:b8:95:8f:8d:a1:
         ae:cd:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:57 2025 by rpki-client