Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa
File:                     3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa (raw, json)
Hash identifier:          2Q6sLnhQE7mVmVRcDxeFtgLnhgCFMVOHh9GjWrUC5hQ=
Subject key identifier:   A7:72:60:EF:D6:81:9A:2C:72:45:6C:00:BE:B2:E0:06:B3:4D:EF:B7
Certificate issuer:       /CN=162A241537498C5CE40422A683B979180F6C6971
Certificate serial:       3B94A8012AB11AFBB44BA3140E7B24E263C73DD2
Authority key identifier: 16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa
Signing time:             Wed 20 Sep 2023 14:00:00 +0000
ROA not before:           Wed 20 Sep 2023 13:55:00 +0000
ROA not after:            Wed 18 Sep 2024 14:00:00 +0000
asID:                     61842
IP address blocks:        201.131.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:a8:01:2a:b1:1a:fb:b4:4b:a3:14:0e:7b:24:e2:63:c7:3d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162A241537498C5CE40422A683B979180F6C6971
        Validity
            Not Before: Sep 20 13:55:00 2023 GMT
            Not After : Sep 18 14:00:00 2024 GMT
        Subject: CN=A77260EFD6819A2C72456C00BEB2E006B34DEFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:ae:af:4f:24:40:7d:a8:62:7d:93:c4:9f:
                    97:a4:82:05:73:c1:56:4f:81:63:4f:a2:12:c1:98:
                    f7:36:7a:0c:6f:be:89:ac:58:6d:42:bf:0f:b5:04:
                    22:f5:0e:47:37:ab:f4:c5:b8:f1:dd:e0:31:17:36:
                    7c:23:a3:ed:63:84:b8:d8:0e:09:40:cc:dd:d0:59:
                    2f:d3:f6:cf:85:fe:ca:e4:cb:ed:e7:53:c4:38:02:
                    b6:21:54:4c:90:65:b2:71:38:6c:8c:81:23:50:1e:
                    fe:4c:ce:80:b6:5b:40:5d:4b:cd:20:6e:39:05:8c:
                    ea:e0:32:3e:63:28:65:eb:fb:65:ae:91:3c:87:90:
                    4a:ff:ea:40:b2:2a:55:85:eb:49:76:0e:07:cc:bf:
                    47:3b:66:c8:90:06:3a:f4:15:b1:02:d9:bf:85:8a:
                    5a:32:3e:84:3e:db:5f:68:dd:29:23:10:d3:c8:47:
                    b6:dd:de:a6:e2:cf:c7:ee:89:2b:3a:0f:0e:e7:a1:
                    31:c3:a1:28:62:1c:24:a3:b8:2a:39:1a:0c:38:2f:
                    11:64:65:3b:53:80:36:56:37:de:a5:84:b9:8d:21:
                    f5:51:6f:df:75:5f:f5:da:33:9d:56:48:a9:b7:40:
                    8b:42:98:39:cc:87:26:b5:dd:fc:a2:bb:bc:41:82:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:60:EF:D6:81:9A:2C:72:45:6C:00:BE:B2:E0:06:B3:4D:EF:B7
            X509v3 Authority Key Identifier:
                keyid:16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137332e302f32342d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:37:cd:68:f9:4b:a1:da:f7:6e:1f:71:b8:a6:3d:a5:07:72:
         e6:ab:72:5d:00:48:d4:fd:87:a9:0c:99:2e:04:ee:9a:39:6d:
         45:d5:dc:b4:81:39:08:78:9b:d3:1c:9b:c1:b2:1b:ca:80:ea:
         5b:df:ed:16:a7:db:52:8d:69:42:2f:01:91:d5:0a:c8:b3:76:
         af:7c:5c:3a:d1:60:63:f8:82:d6:07:12:57:41:8b:e5:97:11:
         19:d4:f0:6a:51:37:03:09:41:0e:47:3b:57:15:08:4f:0c:5b:
         0d:75:f3:f3:74:3b:20:8b:01:96:21:31:34:90:9a:1d:98:25:
         51:12:7a:61:a2:63:3d:7a:b5:59:17:42:de:5e:6d:c7:dd:6b:
         9f:09:f9:a3:78:24:ac:8e:0e:f0:1d:c4:1b:44:13:9f:08:0c:
         31:3a:56:d0:99:2c:e7:54:e6:22:21:1e:41:f3:cd:66:e8:e6:
         da:64:63:b0:fa:35:09:33:6f:f5:a8:2e:3d:83:93:22:55:ef:
         6d:32:ae:ec:60:15:67:9b:4a:14:91:cf:74:82:96:34:ff:30:
         7f:db:6c:f8:34:26:70:fd:cb:81:56:34:f8:d0:7c:eb:26:3a:
         f3:e5:a7:87:3f:99:6c:88:06:f5:a6:2b:56:df:8b:1e:ae:b9:
         8e:98:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:45 2025 by rpki-client