Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa
File:                     3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa (raw, json)
Hash identifier:          HuGKzfJNB8ZZ6XnXi89zaoaOqz047MdE5jxUq56Df8o=
Subject key identifier:   92:C3:BE:5E:87:EB:D6:E4:97:88:E7:E4:38:F5:7B:49:FE:C9:DF:50
Certificate issuer:       /CN=D505649E656B07EBAC9B91CEC1AE1781059CDC12
Certificate serial:       33B74501CB756D78974327EEA055E2362BAF8411
Authority key identifier: D5:05:64:9E:65:6B:07:EB:AC:9B:91:CE:C1:AE:17:81:05:9C:DC:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D505649E656B07EBAC9B91CEC1AE1781059CDC12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa
Signing time:             Tue 23 May 2023 20:20:06 +0000
ROA not before:           Tue 23 May 2023 20:15:06 +0000
ROA not after:            Tue 21 May 2024 20:20:06 +0000
asID:                     264504
IP address blocks:        131.255.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b7:45:01:cb:75:6d:78:97:43:27:ee:a0:55:e2:36:2b:af:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D505649E656B07EBAC9B91CEC1AE1781059CDC12
        Validity
            Not Before: May 23 20:15:06 2023 GMT
            Not After : May 21 20:20:06 2024 GMT
        Subject: CN=92C3BE5E87EBD6E49788E7E438F57B49FEC9DF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:4f:58:d5:ba:82:62:0d:b2:28:6c:ca:c6:
                    c7:a3:90:33:b2:74:58:98:c7:2a:44:52:98:1d:a4:
                    49:70:75:a1:85:9c:31:7b:d8:4e:8d:2e:96:f6:9d:
                    d5:16:f3:45:7b:20:39:7e:f7:1d:5b:52:d9:56:36:
                    50:00:52:23:8b:0f:d9:a7:41:91:cc:3c:49:9c:e1:
                    04:1e:21:db:0a:17:4f:79:6e:2d:48:b3:ea:2d:77:
                    df:d1:a4:3d:5b:28:6d:4f:67:1b:b0:5f:c9:93:ac:
                    42:ca:e2:9c:b2:3c:cd:2a:51:d4:89:a9:38:cb:d8:
                    34:c3:74:23:f1:5b:bc:3f:49:68:80:dc:62:71:5a:
                    c4:86:ac:ec:ab:12:3a:0b:b5:92:f0:e6:bf:b6:de:
                    d2:a4:8a:e1:f6:15:73:bd:70:66:c1:d1:b8:90:a8:
                    09:da:27:52:71:c0:e1:d8:5b:4b:fe:26:bd:1b:89:
                    5c:cc:6f:66:9e:18:0c:09:7c:ab:91:82:51:b9:21:
                    e1:16:b1:1e:cd:66:fb:3e:1e:5d:44:74:48:dd:6e:
                    c3:06:ac:e6:7b:7e:53:45:49:69:d6:e0:09:f2:39:
                    3d:00:b7:3a:c6:1f:56:9b:f6:96:fc:83:ff:9f:02:
                    0c:16:c0:4b:cd:77:2a:6f:33:7c:3c:f8:f0:f3:df:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C3:BE:5E:87:EB:D6:E4:97:88:E7:E4:38:F5:7B:49:FE:C9:DF:50
            X509v3 Authority Key Identifier:
                keyid:D5:05:64:9E:65:6B:07:EB:AC:9B:91:CE:C1:AE:17:81:05:9C:DC:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/D505649E656B07EBAC9B91CEC1AE1781059CDC12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D505649E656B07EBAC9B91CEC1AE1781059CDC12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/3133312e3235352e3235322e302f32322d3234203d3e20323634353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ed:e2:9f:89:63:1e:c0:ee:ed:cb:be:1e:2d:5a:00:a9:75:18:
         8e:15:f1:74:61:05:b5:70:c6:c9:92:6d:79:52:b3:9c:5c:17:
         80:dd:a0:56:5a:fa:33:57:f5:be:57:03:9a:24:ef:b1:81:26:
         21:fe:0f:34:3c:cb:33:3b:b2:c6:7f:ec:a8:ab:45:80:a7:91:
         94:1a:93:23:29:d0:94:9e:e0:b9:e8:f2:c4:a0:95:70:bb:8b:
         2a:65:22:47:f3:a2:2d:36:46:b3:5d:9a:ad:f2:53:ce:bf:8f:
         a2:ea:56:4c:05:26:11:e9:21:2a:06:05:42:fb:d7:da:46:15:
         02:41:e0:5d:e5:03:0c:6a:8a:8d:b8:af:d1:28:9a:66:d2:9c:
         23:3d:31:d4:d5:01:b1:c1:08:df:4b:0d:5c:fc:23:21:45:b0:
         48:ab:d2:f7:78:15:28:c8:44:e2:5e:77:ed:1b:3a:91:b1:b8:
         5b:32:ab:fe:89:9f:c1:14:60:c8:1c:1a:a9:78:25:b6:d7:53:
         b0:c0:99:a0:78:a3:29:aa:dc:d5:a2:ed:5e:6f:e6:ef:c5:ae:
         1f:2b:ce:a8:0d:df:a9:1f:1c:4b:bf:08:c7:51:01:dd:93:e3:
         c0:b4:18:41:34:ba:8c:8a:48:8a:f4:78:98:4d:d8:25:f5:bf:
         41:d1:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:54 2025 by rpki-client