Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e39302e302f32332d3233203d3e20323634333439.roa
File:                     3133312e3130382e39302e302f32332d3233203d3e20323634333439.roa (raw, json)
Hash identifier:          XTnj6ZjZ37S41Chf0QOyxPLpbqStxaQxMKGghJ9HcnY=
Subject key identifier:   46:2A:93:5D:C7:49:E2:22:40:09:5D:CD:A3:0C:EA:C3:9F:0F:1B:B1
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       6CC39BD5F462C95B9868D43F9DBFBA4C4E68DE9D
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e39302e302f32332d3233203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:10 +0000
ROA not before:           Tue 07 Nov 2023 15:14:10 +0000
ROA not after:            Tue 05 Nov 2024 15:19:10 +0000
asID:                     264349
IP address blocks:        131.108.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:9b:d5:f4:62:c9:5b:98:68:d4:3f:9d:bf:ba:4c:4e:68:de:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:10 2023 GMT
            Not After : Nov  5 15:19:10 2024 GMT
        Subject: CN=462A935DC749E22240095DCDA30CEAC39F0F1BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:d3:46:ec:ca:fb:38:93:83:5a:9a:2c:57:
                    da:44:81:5d:d1:ea:8a:2c:b3:31:0b:79:af:31:64:
                    49:7a:66:24:8b:5a:0e:2c:5d:11:4e:7d:66:38:70:
                    3f:49:6f:e8:99:4f:de:f6:b6:ee:71:48:96:75:08:
                    d4:bf:8d:9e:6e:ef:90:97:b8:0b:86:de:dd:5d:46:
                    d4:df:2b:29:bb:80:43:09:51:b6:44:4d:c7:09:48:
                    a8:85:2c:b3:7f:7a:4f:8c:69:4a:19:e5:14:a8:15:
                    6e:b9:e8:1f:df:9a:83:fb:81:37:ca:6c:4d:24:ac:
                    6f:fe:3d:a0:87:b4:18:8f:f7:d6:f6:60:8c:42:92:
                    5a:ba:90:78:67:74:da:5a:ee:3d:68:8a:ec:95:09:
                    2a:97:52:1c:83:b9:73:c1:16:e4:eb:6d:a8:ed:c0:
                    3d:95:83:b8:4d:5a:13:18:12:1a:54:3e:50:3e:d6:
                    53:b5:e2:4d:f5:49:f0:c5:ac:e3:45:a8:c9:49:df:
                    b9:22:8c:40:eb:5e:99:21:70:b5:ec:6a:03:d9:c2:
                    e7:a6:aa:fd:a2:aa:96:1c:e0:78:ce:ad:39:f6:e8:
                    4b:a8:83:61:b9:68:77:03:84:ea:65:9a:50:1a:99:
                    2e:be:09:85:e1:4e:1d:e9:1d:0a:41:e3:81:b6:15:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2A:93:5D:C7:49:E2:22:40:09:5D:CD:A3:0C:EA:C3:9F:0F:1B:B1
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e39302e302f32332d3233203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:64:fa:b6:ee:8f:b5:5a:49:35:38:37:bf:72:cf:e1:8a:
         4d:4a:c9:dc:8c:e8:9f:da:32:60:24:f8:0b:10:5d:05:5f:b6:
         6f:25:c9:b1:66:fe:32:a1:91:36:d6:5c:1b:4e:d0:10:08:b9:
         de:99:11:eb:54:7a:d8:ae:8f:59:5e:16:c9:49:9c:5f:8f:a7:
         9d:c7:da:3e:80:12:c8:95:56:a9:96:94:ee:2e:dd:e6:64:ec:
         ec:54:6a:0b:a9:a4:96:61:a4:c4:6c:7b:67:59:4f:3b:48:50:
         3d:af:63:6a:47:cd:7c:b2:41:39:ed:d8:5c:eb:06:4a:1e:59:
         04:a8:47:9d:41:e4:48:da:20:c9:1b:7b:69:be:4b:bc:44:25:
         55:e7:ab:46:3a:80:67:80:05:33:0b:5e:26:19:b2:8a:b4:3c:
         de:8a:ba:02:47:5a:80:07:c8:0d:6e:7e:19:cd:bf:a5:6f:51:
         62:b4:c6:91:09:53:f4:4b:02:f5:d0:1d:af:2b:1c:30:5a:3e:
         6e:7c:96:85:dc:34:7e:6e:44:ff:98:d8:9e:27:ed:10:b3:e1:
         64:cf:68:87:3b:a8:cb:74:40:8e:d5:b0:15:63:07:0b:fb:19:
         ca:2a:ff:aa:31:0d:18:b0:5a:6e:b4:a7:0a:f9:f8:05:3f:57:
         1f:ad:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:00:11 2025 by rpki-client