Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39352e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39352e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          3Qws5in3UIDoQnLuyMiIZE59h1NHtJigDysS4uYvWWo=
Subject key identifier:   09:6F:B0:62:3E:CD:37:F3:FD:A9:61:FC:D3:8E:A1:8E:E6:09:25:C6
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       1D50914E7F73CEA50B0C6C1BC1DF6CD289CB1EBF
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39352e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:04:28 +0000
ROA not before:           Fri 20 Oct 2023 14:59:28 +0000
ROA not after:            Fri 18 Oct 2024 15:04:28 +0000
asID:                     61871
IP address blocks:        131.0.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:91:4e:7f:73:ce:a5:0b:0c:6c:1b:c1:df:6c:d2:89:cb:1e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 14:59:28 2023 GMT
            Not After : Oct 18 15:04:28 2024 GMT
        Subject: CN=3082010A0282010100AD14E89A1F5B8337523F934E9CDD1A9F8452DCA2B21E23EEFC42F4CDD7ED4AD940F3C264AA12929A5FAAE546522C76EB490751EAF3788FE8344357543A30B3A7A1573FA694D4B30735BA4D85BF0F83A19D2A3E27D4FDBED317BF9A9F80DFF0EDC4D940F2FEA46D27D8CB3E31F168702F289DD7D55FE2E9FB00C97BE7AD6813FBB28E53C063CBE3DC5DB9D7AE139701E0FD84DD7081DC1845411F0915361BADA23727FD24C7BAB4BD8AE8DB7948C3E81CBBE308B1C6CB4412BF662D9CA3647705CF8691054A92EEA97BBBF9F741178D512147C0882C8B80D62C0B67B5FC5E7B0CDA7E5B48B1EDFF8D59CB75C1DC3902BCFB63A6FA541C9D167E38B5F4FD17B3B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:e8:9a:1f:5b:83:37:52:3f:93:4e:9c:dd:
                    1a:9f:84:52:dc:a2:b2:1e:23:ee:fc:42:f4:cd:d7:
                    ed:4a:d9:40:f3:c2:64:aa:12:92:9a:5f:aa:e5:46:
                    52:2c:76:eb:49:07:51:ea:f3:78:8f:e8:34:43:57:
                    54:3a:30:b3:a7:a1:57:3f:a6:94:d4:b3:07:35:ba:
                    4d:85:bf:0f:83:a1:9d:2a:3e:27:d4:fd:be:d3:17:
                    bf:9a:9f:80:df:f0:ed:c4:d9:40:f2:fe:a4:6d:27:
                    d8:cb:3e:31:f1:68:70:2f:28:9d:d7:d5:5f:e2:e9:
                    fb:00:c9:7b:e7:ad:68:13:fb:b2:8e:53:c0:63:cb:
                    e3:dc:5d:b9:d7:ae:13:97:01:e0:fd:84:dd:70:81:
                    dc:18:45:41:1f:09:15:36:1b:ad:a2:37:27:fd:24:
                    c7:ba:b4:bd:8a:e8:db:79:48:c3:e8:1c:bb:e3:08:
                    b1:c6:cb:44:12:bf:66:2d:9c:a3:64:77:05:cf:86:
                    91:05:4a:92:ee:a9:7b:bb:f9:f7:41:17:8d:51:21:
                    47:c0:88:2c:8b:80:d6:2c:0b:67:b5:fc:5e:7b:0c:
                    da:7e:5b:48:b1:ed:ff:8d:59:cb:75:c1:dc:39:02:
                    bc:fb:63:a6:fa:54:1c:9d:16:7e:38:b5:f4:fd:17:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:B0:62:3E:CD:37:F3:FD:A9:61:FC:D3:8E:A1:8E:E6:09:25:C6
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39352e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:5c:70:80:eb:d7:85:a3:f5:d7:d3:e2:3b:1a:8b:ec:8f:
         94:c7:b2:1b:a3:2e:3a:9f:46:ab:02:7d:9e:5f:e4:e1:fb:db:
         78:53:55:ed:4d:bf:f1:e1:7b:d3:d1:6e:3f:42:a5:23:7b:98:
         fa:95:dd:07:d1:ba:ea:71:8c:f8:bf:d7:97:4b:da:00:86:2a:
         47:13:5b:d6:1c:32:a7:2c:ef:d0:24:ca:b7:38:28:b0:55:bc:
         a9:ee:16:26:c1:27:59:52:de:36:21:65:23:87:49:e8:be:d9:
         d7:13:7a:9f:32:b7:53:9a:3c:45:ac:a3:86:22:11:eb:4f:79:
         c5:c0:cd:0e:81:5b:66:f9:fb:1d:52:83:19:50:c9:14:f5:77:
         51:3a:46:b8:6f:2a:14:9d:7a:7f:14:db:c7:27:e4:57:96:e1:
         bc:e6:cb:58:98:34:61:73:d0:db:da:99:be:06:db:8a:96:fe:
         d2:9a:46:9a:b3:0a:58:96:8c:52:38:d7:dc:77:bc:d2:3a:13:
         30:7c:2c:e3:9b:1e:d8:c7:e8:22:e8:4d:1c:56:13:da:00:d2:
         5c:2f:16:27:a6:20:d9:cd:99:3e:4e:51:be:11:bb:f7:84:d3:
         a8:ae:fb:b1:94:4d:bd:46:72:d3:ca:a0:df:87:7e:73:3b:64:
         2e:ac:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:25:33 2025 by rpki-client