Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38332e302f32342d3234203d3e20323634343634.roa
File:                     3133322e3235352e38332e302f32342d3234203d3e20323634343634.roa (raw, json)
Hash identifier:          Yis3fVX1v+ZKrDsTT+CvfadnLzqXqVJ5pFotJ4Kcm2w=
Subject key identifier:   16:DA:07:59:7A:32:EA:72:28:CC:C2:74:5F:3C:CA:67:F6:6A:CF:53
Certificate issuer:       /CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
Certificate serial:       1906DE930D21117509218BA47CDC1A806DC05186
Authority key identifier: 91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38332e302f32342d3234203d3e20323634343634.roa
Signing time:             Fri 15 Oct 2021 13:00:01 +0000
ROA not before:           Fri 15 Oct 2021 12:55:01 +0000
ROA not after:            Sat 15 Oct 2022 13:00:01 +0000
asID:                     264464
IP address blocks:        132.255.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:06:de:93:0d:21:11:75:09:21:8b:a4:7c:dc:1a:80:6d:c0:51:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91B1809A31F7DD41292ACFCD2406D788A6681B82
        Validity
            Not Before: Oct 15 12:55:01 2021 GMT
            Not After : Oct 15 13:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:a3:70:c8:a8:1c:b4:7e:e3:ce:73:3a:0f:
                    38:eb:d5:b3:85:a2:ef:33:34:65:13:c5:ac:29:b5:
                    a2:be:8e:95:6a:7b:02:3c:89:47:7c:66:81:a2:d9:
                    55:9d:9b:b7:57:3c:4f:a9:30:b1:93:a9:9d:34:09:
                    6c:7a:e5:52:7a:ff:fa:1f:19:2e:42:3a:fe:81:14:
                    1f:0e:e0:ec:85:a2:26:9c:b1:12:bc:52:41:19:76:
                    2c:c5:21:38:75:9d:83:ab:a8:c4:a3:b3:e8:7c:ff:
                    a6:4c:3a:5b:db:cb:4f:e9:16:0b:e4:20:ce:53:e7:
                    67:8f:c7:f1:47:3a:2b:4d:23:6d:33:ec:2c:89:a4:
                    2b:30:d6:4a:41:87:ae:86:31:27:fe:96:ca:78:33:
                    0d:38:cd:f6:0e:65:07:28:cb:c1:ac:43:75:4e:d9:
                    6c:28:ca:9a:e8:de:b5:b7:64:1c:bf:85:eb:58:00:
                    36:cd:ed:0f:ac:fa:5d:49:01:98:d6:07:5d:af:e5:
                    7c:e2:ba:5a:3b:3f:4c:87:fb:3a:b9:8c:bb:90:4a:
                    63:5b:eb:7f:14:59:6c:6a:1c:fe:02:88:52:44:d2:
                    48:e0:54:de:bf:0e:40:a9:31:2a:c0:5c:25:e7:3f:
                    47:a8:dc:21:0e:0c:54:70:e8:5d:b9:b0:dc:80:42:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DA:07:59:7A:32:EA:72:28:CC:C2:74:5F:3C:CA:67:F6:6A:CF:53
            X509v3 Authority Key Identifier:
                keyid:91:B1:80:9A:31:F7:DD:41:29:2A:CF:CD:24:06:D7:88:A6:68:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91B1809A31F7DD41292ACFCD2406D788A6681B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38332e302f32342d3234203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:0e:a9:1c:25:07:d8:f9:8d:88:31:58:77:4f:67:68:59:
         42:30:8d:22:33:da:d7:c3:f6:7d:11:84:01:e9:58:51:70:a0:
         3f:f6:31:41:79:2e:82:f4:0f:b6:d1:ba:bc:b8:ab:00:15:31:
         f3:22:c1:bd:d4:a5:05:85:25:a8:1c:7c:36:6f:42:84:aa:b7:
         de:7c:2f:51:e6:1b:a2:d7:15:81:e6:ee:66:57:ac:db:e3:36:
         ef:22:07:a5:61:f7:b8:d9:f9:6e:50:e3:fd:fe:3b:b1:e9:6c:
         8f:a8:8b:4e:3e:b7:fc:9b:83:45:4b:de:53:18:a7:6a:76:f3:
         2a:f0:f0:4a:5f:d6:fa:d4:9e:55:2e:e7:08:5a:05:1b:49:de:
         31:ac:6b:50:b8:dc:95:ba:da:a1:17:79:a2:e2:13:c2:b6:6f:
         8c:18:68:91:ca:51:af:ea:11:a8:76:68:d4:22:ff:65:a5:5c:
         25:25:6d:37:91:5b:53:0c:93:31:e0:69:11:82:1f:15:f0:d3:
         f1:32:b0:84:51:3a:9d:3f:48:26:54:30:3d:44:24:89:27:59:
         bd:cf:06:9e:f8:15:e7:9a:e5:ce:2a:97:b2:35:c8:b5:48:1f:
         2d:5a:31:c5:eb:31:96:5e:7d:09:34:f1:89:94:ed:ea:75:40:
         9a:a4:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:34:52 2025 by rpki-client