Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          6r9YV4/OdcDLKgPeq6qlETBkV4P5CbObY6YA4oigB7g=
Subject key identifier:   E1:03:72:61:8E:CD:19:41:61:1C:AC:8F:CF:09:9A:49:04:49:1C:1C
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       38FF61FD5DF005E099604E9CF4E7562A1859E940
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
Signing time:             Fri 28 Feb 2025 14:53:29 +0000
ROA not before:           Fri 28 Feb 2025 14:48:29 +0000
ROA not after:            Fri 27 Feb 2026 14:53:29 +0000
asID:                     265919
IP address blocks:        131.196.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ff:61:fd:5d:f0:05:e0:99:60:4e:9c:f4:e7:56:2a:18:59:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Feb 28 14:48:29 2025 GMT
            Not After : Feb 27 14:53:29 2026 GMT
        Subject: CN=E10372618ECD1941611CAC8FCF099A4904491C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:4f:48:3e:59:55:41:4d:a3:2e:47:69:78:
                    d3:2f:05:ff:e5:60:04:9c:3d:a1:e4:eb:b6:19:b1:
                    cc:f2:f0:e3:07:e7:64:51:23:73:00:f7:18:19:91:
                    40:9e:85:1d:f5:8b:64:fc:00:e5:52:eb:f3:ae:9c:
                    f1:94:dd:7d:0c:f4:a1:cf:97:b1:d4:c8:40:7c:eb:
                    5d:c2:c2:52:31:34:ce:82:4d:62:de:69:24:29:e3:
                    8c:00:84:80:e4:87:df:13:b4:b3:6f:a6:51:1d:ce:
                    d5:03:e1:77:21:ee:e5:02:f1:8a:8d:c6:ae:fb:74:
                    a1:ec:0a:4e:84:78:29:55:08:51:fc:d0:ed:59:5b:
                    fb:9e:21:e7:aa:6e:4c:06:7d:12:7a:9a:d7:e5:ae:
                    86:41:02:ef:e9:99:c6:7a:20:9c:59:5c:83:b1:a4:
                    ab:f8:be:8a:97:fb:97:8e:35:b8:14:01:bf:80:e6:
                    ac:be:74:95:41:3c:c5:9e:f5:aa:db:8e:f3:bb:97:
                    58:5e:90:df:1d:0d:7a:77:d8:d6:97:47:28:79:fd:
                    bd:b3:de:c7:aa:d1:c5:b8:e8:71:f7:90:b4:a0:29:
                    c9:94:da:16:32:67:a0:f9:97:3e:83:c1:2f:69:e3:
                    1a:4b:e0:64:41:77:47:ba:3c:b8:53:3b:43:33:68:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:03:72:61:8E:CD:19:41:61:1C:AC:8F:CF:09:9A:49:04:49:1C:1C
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:4d:24:20:05:93:41:b1:d1:c2:bd:4e:ec:4b:2e:8c:c7:
         51:3e:f1:4a:c4:21:10:50:2f:1d:23:c3:1f:f2:1d:7a:96:5f:
         d2:a2:cf:e1:6e:51:2d:07:02:19:21:bc:b7:d0:be:ed:5e:e6:
         df:4f:82:71:51:7e:c5:39:dc:92:41:1b:b2:af:07:23:67:64:
         c7:d9:76:da:e8:33:39:a4:9f:3c:23:16:25:6b:46:cd:8f:55:
         99:16:0e:23:dd:01:2e:aa:95:e2:bb:25:2e:8a:18:f7:43:91:
         8d:eb:f2:a4:3a:05:54:c1:6b:9f:fd:e0:2f:6e:82:70:22:eb:
         69:ec:9c:d2:52:3b:df:f7:cb:78:9b:ae:1e:08:3f:59:31:0e:
         6a:e3:1e:c8:9e:c1:bf:ab:ef:72:65:88:43:1d:67:9f:ee:19:
         34:07:64:dc:00:b1:35:ce:c6:9d:9d:84:79:0b:6d:a6:55:86:
         25:6a:7f:be:51:af:ca:7a:7f:46:f9:42:f6:8f:c6:39:c7:47:
         d7:3c:5e:74:3d:06:20:ed:25:ad:35:ec:3b:59:10:39:da:30:
         31:57:fa:34:ee:bd:ff:88:54:b9:0c:51:fc:48:aa:e1:d8:cf:
         af:11:b2:63:f9:ce:3b:3d:cc:f3:50:d2:ed:21:46:90:9f:df:
         62:21:32:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:06 2025 by rpki-client