Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (raw, json)
Hash identifier:          zRwH+FyJvdyzufLGVyY8Krjmm8QQ39V7WYhlvDmoijU=
Subject key identifier:   90:BC:00:23:21:BF:69:C4:F1:1D:11:CF:25:41:B8:60:CF:18:34:09
Certificate issuer:       /CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
Certificate serial:       2A339E5C026E3C365C449A6FA5E72EBA26DF41C9
Authority key identifier: FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa
Signing time:             Wed 23 Aug 2023 21:00:00 +0000
ROA not before:           Wed 23 Aug 2023 20:55:00 +0000
ROA not after:            Wed 21 Aug 2024 21:00:00 +0000
asID:                     61759
IP address blocks:        131.100.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:33:9e:5c:02:6e:3c:36:5c:44:9a:6f:a5:e7:2e:ba:26:df:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
        Validity
            Not Before: Aug 23 20:55:00 2023 GMT
            Not After : Aug 21 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:38:8f:b0:06:26:19:b7:93:d0:81:81:ef:
                    11:31:b6:5e:17:09:84:34:5f:b8:0d:0b:4d:03:c1:
                    4e:88:7e:f3:1b:07:6a:16:57:d3:4a:de:a0:ff:95:
                    db:9a:f1:ec:ac:f0:ce:3e:f9:31:ca:e6:bd:9a:55:
                    a7:91:1d:a3:ec:4a:7b:8d:7a:68:35:78:f7:44:6a:
                    d5:9b:3e:9d:37:4d:d6:63:c5:93:5f:fd:92:f3:42:
                    69:54:5b:d7:fd:94:f9:85:29:44:02:01:62:8f:3c:
                    96:b9:af:b9:7c:ba:29:d9:68:1a:b2:10:44:ba:22:
                    35:01:1e:04:81:80:e5:1f:24:b3:32:9b:98:ad:9c:
                    69:de:c7:5b:59:64:2b:89:b1:43:f0:84:1d:ff:be:
                    a6:4f:e5:11:ac:11:8c:15:92:3c:e5:67:26:72:2e:
                    c6:f9:a8:ba:0c:f9:c5:57:3c:7c:5d:ad:0b:89:eb:
                    03:e2:2d:a2:0b:c5:89:3a:45:32:26:5e:66:e5:15:
                    f4:fd:dd:f8:1d:80:dd:2e:ca:7e:60:74:1a:a6:28:
                    3d:17:97:2a:1b:ad:26:be:60:5e:29:2b:dd:28:9e:
                    75:16:d0:48:6e:fd:73:5d:2c:e6:5c:d1:53:10:e0:
                    1a:32:25:99:93:e7:28:3e:c0:38:46:0d:40:71:30:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:00:23:21:BF:69:C4:F1:1D:11:CF:25:41:B8:60:CF:18:34:09
            X509v3 Authority Key Identifier:
                keyid:FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:08:98:83:8f:f6:e7:42:d3:24:37:f1:f4:c0:a1:35:b3:5a:
         4a:a3:68:8f:21:98:99:6f:80:41:c4:44:1c:91:2a:62:1b:46:
         89:50:25:5a:ab:72:20:f2:9b:d5:44:9b:11:c4:18:fe:43:ef:
         8c:b7:24:af:81:2f:ac:31:5f:69:f2:a7:a3:97:80:48:25:b5:
         3b:0b:c4:12:3d:68:1b:34:f1:f6:5d:15:aa:c6:a0:2f:73:ad:
         97:4b:ce:42:9c:07:c9:81:aa:7d:e5:88:fe:8f:f5:a5:3e:5c:
         a1:f5:a8:c0:d5:00:96:1a:66:05:67:5e:91:0d:81:d6:50:2a:
         ad:3f:8d:8b:6e:e4:44:25:4e:58:22:08:7f:15:fc:2e:78:be:
         11:54:d2:29:ff:eb:f9:b8:f1:19:fd:d8:89:eb:97:9f:83:35:
         79:fe:fd:7c:5c:67:9b:61:33:0c:bb:f9:38:f2:9a:2d:f7:b7:
         8d:06:d7:84:d7:6c:23:4e:58:7c:c5:76:cf:a3:79:d0:39:e9:
         28:e3:de:3a:cd:38:1f:59:de:85:e5:5d:b4:aa:72:72:e4:fc:
         eb:74:c4:d3:93:23:4c:43:80:07:c4:dc:cd:c3:b5:0a:1e:7e:
         9f:c9:9f:29:4a:b2:3d:49:c1:dc:6e:62:3f:73:d5:fd:df:d1:
         26:82:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:53 2025 by rpki-client