Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (raw, json)
Hash identifier:          jF7fgpHndgT0CvzTlC96J4uygiXDZG0FKRibPPSNbjs=
Subject key identifier:   91:7C:DD:E8:1C:77:52:07:5B:D1:9C:0F:5D:C3:1B:0B:28:E8:45:E3
Certificate issuer:       /CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
Certificate serial:       78FE9A157256528844606899CE66F40EA3E4E3F2
Authority key identifier: FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
Signing time:             Wed 23 Aug 2023 22:00:00 +0000
ROA not before:           Wed 23 Aug 2023 21:55:00 +0000
ROA not after:            Wed 21 Aug 2024 22:00:00 +0000
asID:                     61759
IP address blocks:        131.100.80.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fe:9a:15:72:56:52:88:44:60:68:99:ce:66:f4:0e:a3:e4:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
        Validity
            Not Before: Aug 23 21:55:00 2023 GMT
            Not After : Aug 21 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:a1:42:5f:e0:b7:6d:c1:b3:b6:e9:97:0e:
                    db:df:a5:54:20:bf:bf:ee:19:05:f2:ac:98:c9:24:
                    6c:40:f2:14:8b:66:83:22:08:e1:7f:dc:fb:73:40:
                    7f:a1:bf:f7:f7:7a:02:d7:a4:22:fb:84:04:44:65:
                    e5:2f:27:83:54:ef:98:12:ea:c8:c7:8a:af:0b:fc:
                    1e:3f:29:86:31:01:ad:15:72:32:54:c9:0c:13:10:
                    8d:38:62:33:a9:8c:14:e3:af:e3:6a:5a:13:9b:9e:
                    a3:4b:d1:45:68:09:92:44:44:f3:29:96:fb:c5:b0:
                    9f:89:8f:7e:4c:90:77:84:14:ba:1e:ca:00:01:57:
                    3b:94:dd:83:82:87:a9:27:ea:62:e1:3d:5c:89:2c:
                    e2:3d:04:f9:32:1f:b4:7a:d5:95:7a:8c:6f:7f:02:
                    ec:c6:2f:b9:00:ec:0f:53:42:ab:a4:e3:b2:72:f1:
                    08:e9:69:c5:99:f7:bb:b1:b8:32:97:aa:b4:30:96:
                    65:41:e8:0f:df:8c:e6:34:a2:49:e4:6d:4b:f7:bb:
                    ee:59:07:3f:3c:d2:15:98:b9:79:71:a6:80:f1:f9:
                    c8:3c:ac:6c:e0:eb:5f:9f:af:aa:65:85:cb:8c:0d:
                    fd:bb:22:51:f7:5b:cb:36:0e:54:4a:be:42:f8:54:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7C:DD:E8:1C:77:52:07:5B:D1:9C:0F:5D:C3:1B:0B:28:E8:45:E3
            X509v3 Authority Key Identifier:
                keyid:FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:53:2b:9b:9a:29:06:c7:50:e1:46:14:1a:4a:27:fa:ff:
         de:bf:12:20:4e:23:be:42:6c:70:c1:d4:51:91:fa:7c:3d:49:
         50:eb:f5:fe:57:29:34:83:01:6d:18:53:78:03:eb:0a:09:4f:
         1f:8f:45:7b:e1:bc:2a:57:f6:06:01:b0:a0:d7:f9:45:23:45:
         0b:34:6e:0c:d0:9a:17:f8:bd:0d:e6:8e:bd:d3:e9:66:ab:67:
         5c:70:3f:b1:89:f0:84:64:39:ea:d0:4e:54:ad:23:b2:65:43:
         10:be:cf:9e:95:f8:c5:53:a1:1e:fd:89:f6:ab:85:51:6b:fd:
         5d:91:af:24:d5:b1:17:0b:99:48:9e:be:37:7e:57:26:a2:7a:
         96:27:9e:11:07:4e:29:aa:d7:3a:ee:95:13:b7:01:fa:24:df:
         ee:c8:a1:90:6f:6a:93:15:e1:83:e7:ab:d3:54:c0:d4:15:df:
         8a:2c:82:4c:13:b5:55:45:f7:61:81:dc:d0:36:64:ee:29:df:
         5f:43:51:3d:22:c4:43:34:86:ea:6d:04:25:13:9b:8a:a6:fd:
         d2:76:5f:8c:22:c0:b2:0a:2f:23:1f:bf:c6:39:a7:31:b9:d6:
         4d:b6:cb:8a:3f:b9:86:14:15:62:03:41:4b:35:e6:35:be:87:
         40:a7:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:01 2025 by rpki-client