Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32332d3234203d3e20323731343130.roa
File:                     3133312e3139362e32382e302f32332d3234203d3e20323731343130.roa (raw, json)
Hash identifier:          P6OiX2tvPPHtY6dBVosSVg2jP4T84c4fRvZ9SdL7mow=
Subject key identifier:   F8:9D:1C:0F:CC:6B:9D:82:CB:53:E9:CF:A0:29:8B:78:68:06:9A:68
Certificate issuer:       /CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
Certificate serial:       2388CF3E3FC3E53C8B368F4790DEAB355765E062
Authority key identifier: 50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32332d3234203d3e20323731343130.roa
Signing time:             Mon 11 Mar 2024 16:11:46 +0000
ROA not before:           Mon 11 Mar 2024 16:06:46 +0000
ROA not after:            Mon 10 Mar 2025 16:11:46 +0000
asID:                     271410
IP address blocks:        131.196.28.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:88:cf:3e:3f:c3:e5:3c:8b:36:8f:47:90:de:ab:35:57:65:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE48A3BFC137A4D9A1AFB812475E21968193AB
        Validity
            Not Before: Mar 11 16:06:46 2024 GMT
            Not After : Mar 10 16:11:46 2025 GMT
        Subject: CN=F89D1C0FCC6B9D82CB53E9CFA0298B7868069A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:9d:45:12:61:2a:e3:57:21:6f:cd:12:55:
                    b3:94:a0:32:c6:03:f4:18:01:3e:ce:fd:c5:07:70:
                    39:fb:bb:9c:f5:9d:ac:b2:59:42:6d:d6:ac:80:ac:
                    9b:cb:db:4c:2e:35:de:49:a5:9c:99:0f:5a:cc:92:
                    e2:5a:a2:3a:cc:ea:ef:0f:5c:6a:b1:95:ca:14:0d:
                    89:c6:8d:7f:56:bb:78:d0:63:4d:35:d8:45:e9:83:
                    e5:ed:8d:6d:9c:e6:11:55:ab:2b:85:7a:d6:5d:27:
                    a3:6f:10:0f:02:04:f9:7c:57:a6:e9:8d:90:76:e6:
                    c8:d1:70:fb:9c:b0:7b:ce:b2:20:4b:c4:d7:d7:77:
                    9f:a9:a4:91:7b:bd:c0:52:db:a9:74:a8:cd:71:cb:
                    8f:0e:c9:6f:be:cb:93:35:db:86:0f:a9:6a:36:aa:
                    f2:36:02:32:61:39:2e:66:f3:bd:2c:40:71:00:2d:
                    75:20:75:31:79:5f:fc:f1:31:f9:2e:4f:e3:6e:b5:
                    f3:e9:ad:c4:93:f7:35:9d:05:1d:12:c9:19:2c:01:
                    63:cd:5d:29:ee:17:c3:49:2e:2d:e3:a9:68:79:09:
                    c9:f8:c1:62:0b:86:88:66:5e:87:ae:aa:68:e3:d4:
                    4e:2d:21:47:da:4d:96:8f:3e:27:d5:ef:88:d5:98:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9D:1C:0F:CC:6B:9D:82:CB:53:E9:CF:A0:29:8B:78:68:06:9A:68
            X509v3 Authority Key Identifier:
                keyid:50:DE:48:A3:BF:C1:37:A4:D9:A1:AF:B8:12:47:5E:21:96:81:93:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE48A3BFC137A4D9A1AFB812475E21968193AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e32382e302f32332d3234203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:e8:c2:0d:7c:e7:01:b5:a9:24:81:6a:8c:ea:0f:0a:42:
         25:23:f6:f4:7a:86:e0:15:7c:94:11:9a:fb:e6:66:fd:d1:73:
         22:28:cd:e2:d0:ff:d6:14:f4:9d:54:09:e5:6c:46:4d:38:27:
         19:c2:da:e5:33:77:ff:62:59:31:dc:65:ae:01:53:16:29:57:
         ff:a1:e6:fa:3d:d0:3b:55:ed:d9:28:d9:2f:7e:6c:81:81:46:
         83:51:48:69:59:51:7e:77:35:83:9f:7c:d2:05:51:e6:0a:5a:
         e5:b3:bc:1f:5f:fa:ad:04:3d:c6:16:5d:dc:c2:d9:e4:60:59:
         f3:1c:b9:18:3a:66:0b:cd:83:c3:07:ce:a7:b5:0f:3e:a6:56:
         3c:3a:b3:d2:4f:bc:42:73:99:83:cc:1e:27:ea:e3:15:cc:16:
         82:d3:76:3c:e3:b6:87:ca:f9:53:f6:04:5c:2e:2c:d1:8e:24:
         7f:93:c8:e1:34:80:3a:03:25:de:24:52:9c:66:ae:13:52:82:
         2b:2f:33:e8:af:19:05:cd:2e:62:6e:be:a7:82:cc:ee:22:c5:
         d1:c0:9c:b0:31:79:d3:6f:6c:3a:82:ae:e0:d3:d2:45:e6:c9:
         3b:df:e7:0b:5e:1b:e3:d0:5a:89:1c:db:79:f4:0e:01:61:98:
         85:35:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:15 2025 by rpki-client