Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137352e302f32342d3234203d3e203631383432.roa
File:                     3230312e3133312e3137352e302f32342d3234203d3e203631383432.roa (raw, json)
Hash identifier:          BDJAsr/sJngrlhNLqoCRv5TaqVHq8qNplQ5s0/KDkSg=
Subject key identifier:   0E:6F:24:71:E5:50:CE:34:52:A0:BC:20:D2:B4:8B:6A:B1:76:EA:76
Certificate issuer:       /CN=162A241537498C5CE40422A683B979180F6C6971
Certificate serial:       1E2726FF0DFC308F4664FFF20CD5D8D4A9C66975
Authority key identifier: 16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137352e302f32342d3234203d3e203631383432.roa
Signing time:             Wed 20 Sep 2023 14:00:00 +0000
ROA not before:           Wed 20 Sep 2023 13:55:00 +0000
ROA not after:            Wed 18 Sep 2024 14:00:00 +0000
asID:                     61842
IP address blocks:        201.131.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:27:26:ff:0d:fc:30:8f:46:64:ff:f2:0c:d5:d8:d4:a9:c6:69:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162A241537498C5CE40422A683B979180F6C6971
        Validity
            Not Before: Sep 20 13:55:00 2023 GMT
            Not After : Sep 18 14:00:00 2024 GMT
        Subject: CN=0E6F2471E550CE3452A0BC20D2B48B6AB176EA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:a9:c9:0c:d2:6f:4e:e4:c7:1c:58:88:4e:
                    f4:60:97:09:2d:0e:bf:48:34:86:cd:01:eb:d8:46:
                    07:ed:d3:13:83:bf:b0:d8:7b:b2:93:e9:3b:43:cc:
                    16:36:9c:2b:55:c0:fe:89:5d:dc:f2:b8:ab:d4:15:
                    47:e7:f7:8b:9a:40:76:ff:b0:dd:4c:b7:34:2d:76:
                    64:f0:6c:ba:8b:bb:f2:80:fc:5a:74:16:77:5c:33:
                    74:f1:f8:ab:f7:26:40:d9:b0:30:b4:fc:31:ff:f6:
                    8f:f1:2f:cb:76:1f:e8:29:a2:b8:09:c9:f3:70:59:
                    93:bf:dd:4f:9e:9f:de:87:2c:51:11:15:ec:48:5e:
                    36:6a:e9:d5:67:6a:38:34:a7:de:15:50:02:68:73:
                    ce:59:eb:d4:da:b5:cf:e0:69:d7:d4:d4:b5:9f:2c:
                    39:66:8c:4d:22:f2:0c:fc:6c:05:73:10:99:1d:3e:
                    db:a4:19:88:43:aa:c1:d6:38:d0:c4:0d:b5:24:ad:
                    18:bd:0b:7b:0c:99:7c:68:9e:da:51:f9:cd:20:a1:
                    cc:45:a5:cf:f1:14:5a:b6:db:40:b7:40:d3:8b:d5:
                    69:60:be:2c:74:bb:b9:70:dc:8b:4d:01:6b:8d:59:
                    9e:23:c0:c3:0d:25:11:c8:91:28:e4:fb:59:d2:39:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:24:71:E5:50:CE:34:52:A0:BC:20:D2:B4:8B:6A:B1:76:EA:76
            X509v3 Authority Key Identifier:
                keyid:16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137352e302f32342d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:33:0e:62:f2:df:11:79:81:74:81:ae:dc:3a:cf:a9:2b:67:
         70:dd:dd:ea:00:1c:77:33:1e:f7:3c:7d:b9:93:6a:90:ed:4e:
         6f:30:84:49:19:0b:4c:21:80:cc:9d:2a:09:23:7d:e4:50:89:
         ef:0e:aa:db:0c:85:eb:57:80:90:02:89:1d:2f:d1:a9:2b:4d:
         5e:bc:13:ab:d9:36:66:4d:f8:c0:ad:ac:be:f1:78:8e:b8:31:
         67:6a:f4:98:f5:24:6d:43:5d:ed:ff:37:dc:64:a5:26:86:14:
         fc:a6:07:16:9d:4d:d0:aa:1d:fc:33:32:0a:9a:33:60:df:24:
         4f:fd:a1:dc:cd:ec:a2:85:6b:df:10:69:92:fd:39:da:be:67:
         33:74:73:63:99:4e:23:89:4a:eb:53:ef:8c:8a:d4:8b:c3:64:
         c6:7e:7e:44:ad:88:ae:ef:e6:f9:26:91:03:ee:9c:7d:69:76:
         06:4b:0d:30:b4:45:8c:3c:ed:9e:76:2c:29:a7:da:78:e9:c6:
         48:34:5d:4e:5b:07:6f:f2:98:d5:ce:cd:06:c8:c9:5a:e8:ea:
         95:e7:89:8a:e1:1d:33:93:9d:c0:87:4b:01:36:ac:be:0e:ca:
         77:f5:09:44:3c:40:76:f8:4d:2c:f8:77:01:2d:d2:c8:d4:2b:
         49:09:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:03:14 2025 by rpki-client