Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32322d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          Ooh8uLVOgRh3L8tZdGxch8ArwHzO1y0aGL4zTIxG7hE=
Subject key identifier:   66:37:80:FA:CF:7B:42:92:A5:85:7A:0F:30:9E:A4:26:9D:8F:83:A1
Certificate issuer:       /CN=6515380BD740EB3BFFD10F9C36837E6BE964DA7A
Certificate serial:       1BFF15DAECA34AA4291A361E9674D40E990B64F9
Authority key identifier: 65:15:38:0B:D7:40:EB:3B:FF:D1:0F:9C:36:83:7E:6B:E9:64:DA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6515380BD740EB3BFFD10F9C36837E6BE964DA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3234203d3e20323635393139.roa
Signing time:             Thu 23 Feb 2023 13:35:33 +0000
ROA not before:           Thu 23 Feb 2023 13:30:33 +0000
ROA not after:            Thu 22 Feb 2024 13:35:33 +0000
asID:                     265919
IP address blocks:        131.196.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ff:15:da:ec:a3:4a:a4:29:1a:36:1e:96:74:d4:0e:99:0b:64:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6515380BD740EB3BFFD10F9C36837E6BE964DA7A
        Validity
            Not Before: Feb 23 13:30:33 2023 GMT
            Not After : Feb 22 13:35:33 2024 GMT
        Subject: CN=663780FACF7B4292A5857A0F309EA4269D8F83A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:a4:fb:04:54:23:d5:67:8e:a1:71:fd:97:
                    5d:65:a2:7f:5e:f3:6d:4e:07:34:09:20:5b:4e:c7:
                    7e:44:70:ab:89:ec:cf:4b:96:b1:eb:1d:6c:f4:b5:
                    cc:4e:28:6e:b4:0b:1e:e7:5a:7f:d7:a4:a9:a1:2b:
                    cf:cf:94:40:49:d3:01:c3:53:f1:d1:9a:6f:75:db:
                    bf:11:4c:8d:b1:2a:ae:d7:0a:ff:8a:b0:4b:9a:65:
                    43:64:0f:b3:ad:91:b5:16:d1:29:c3:8a:9e:13:cc:
                    82:34:05:d6:d2:62:8a:be:c9:f8:33:8a:67:26:d5:
                    d0:8f:56:32:41:c2:72:b8:e5:0d:ce:50:9a:5e:a4:
                    6c:4f:a9:ea:5e:21:ba:ea:19:c2:7d:eb:a4:b6:15:
                    23:09:c1:71:fd:14:04:da:ff:38:26:60:f1:0a:33:
                    27:9b:6e:c8:17:af:30:82:1b:31:7c:70:d3:69:58:
                    64:74:9f:bd:40:3d:15:20:b8:0e:29:73:be:c5:5c:
                    12:61:34:d6:d4:9b:a0:4f:07:14:85:a8:80:51:ce:
                    f4:ca:1c:7d:0e:bc:9d:3e:5a:99:48:e7:3c:cf:ba:
                    21:19:50:14:2f:08:6e:0a:c9:04:01:4f:3c:13:60:
                    56:1a:64:ea:9c:98:0e:50:b0:02:cf:3d:96:89:06:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:80:FA:CF:7B:42:92:A5:85:7A:0F:30:9E:A4:26:9D:8F:83:A1
            X509v3 Authority Key Identifier:
                keyid:65:15:38:0B:D7:40:EB:3B:FF:D1:0F:9C:36:83:7E:6B:E9:64:DA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/6515380BD740EB3BFFD10F9C36837E6BE964DA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6515380BD740EB3BFFD10F9C36837E6BE964DA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32322d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:2d:33:83:f9:66:68:1b:72:98:e1:ed:65:44:d9:56:ef:c8:
         92:22:df:c0:1a:dd:80:0b:d8:eb:5c:2d:53:84:d8:8b:96:7d:
         73:81:1b:fa:ea:7a:70:15:d3:61:3b:c9:2b:72:51:b9:57:ff:
         70:78:b9:be:06:60:16:cf:61:2b:68:fa:e4:53:f0:f4:9d:3f:
         5e:35:41:64:96:1e:be:e0:49:d7:72:e7:cc:dd:cb:72:a4:1d:
         1e:25:b1:ee:12:9c:c3:34:5f:21:93:32:00:91:5a:2e:d4:d1:
         5b:85:48:aa:32:c6:27:7a:57:67:e9:cf:56:1a:35:3f:7c:82:
         7c:6b:af:b6:cc:e6:33:57:a3:cb:90:75:82:6b:e8:04:ee:c1:
         d4:1a:9b:00:f1:e0:6f:a3:2c:ab:61:05:e4:17:37:6c:d1:b4:
         2f:3c:13:33:3a:0e:80:10:c5:37:78:79:26:70:f4:76:e0:7c:
         5d:b7:d0:c3:b3:7a:d7:b2:c6:72:83:e9:47:ee:49:56:e4:04:
         ea:88:6b:dc:3c:c8:49:be:92:15:da:d9:73:e8:a4:04:43:f8:
         7e:95:6a:bf:a7:8b:d7:b9:4b:56:4f:4c:4f:74:21:f6:91:32:
         38:c8:38:85:4e:76:fb:27:db:18:b0:f1:2b:9a:5c:d4:d8:04:
         7a:a2:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:04 2025 by rpki-client