Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32322d3234203d3e203631373534.roa
File:                     3133312e3130302e34302e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          aKQdnh4LH/5zZaVwnNoO38gvV6GTDJFqxyy48tSNc7M=
Subject key identifier:   D3:6B:71:E2:B7:AF:34:F1:A3:6E:0F:4F:D4:E9:47:9B:93:8F:93:73
Certificate issuer:       /CN=107B680E5B5FB305DB89311B48605A8468508948
Certificate serial:       7A66FE33361BB0D0F3B83D8F261BC0394A27198C
Authority key identifier: 10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32322d3234203d3e203631373534.roa
Signing time:             Wed 24 Jan 2024 14:53:44 +0000
ROA not before:           Wed 24 Jan 2024 14:48:44 +0000
ROA not after:            Wed 22 Jan 2025 14:53:44 +0000
asID:                     61754
IP address blocks:        131.100.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:66:fe:33:36:1b:b0:d0:f3:b8:3d:8f:26:1b:c0:39:4a:27:19:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107B680E5B5FB305DB89311B48605A8468508948
        Validity
            Not Before: Jan 24 14:48:44 2024 GMT
            Not After : Jan 22 14:53:44 2025 GMT
        Subject: CN=D36B71E2B7AF34F1A36E0F4FD4E9479B938F9373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:fc:49:55:6a:a8:0e:5d:d3:fa:16:6d:34:
                    f9:dc:a7:3d:8f:94:0d:82:15:db:9f:b5:2a:56:e1:
                    97:9c:11:73:e4:12:c7:5e:d7:95:63:23:ce:6a:0a:
                    46:e4:2d:f2:e5:1d:64:f9:b4:21:29:9a:60:1b:7d:
                    ff:7b:aa:58:2d:e8:a8:d2:ed:91:62:a0:74:c2:b1:
                    2f:8c:31:a9:59:36:03:b7:3c:a4:26:64:1e:d8:ef:
                    da:da:c1:6f:18:ed:1e:04:1b:e5:dc:db:8f:df:29:
                    cc:fd:36:01:12:01:ad:09:c3:5e:76:5d:6a:66:df:
                    72:b7:48:5b:0c:a6:1f:93:d9:b4:36:10:2b:1a:52:
                    ab:6b:5a:b5:d1:f7:12:45:31:b5:8e:3b:cc:a9:df:
                    f6:a7:3b:93:8d:15:d9:c5:1e:5e:4c:6c:c4:3c:4f:
                    95:31:d9:6b:6b:db:dc:84:fa:fc:b2:70:5e:d0:2d:
                    f9:3d:2c:23:eb:57:e3:f4:d6:c1:17:88:11:7a:7d:
                    6a:d1:53:a6:49:a5:18:5c:09:b4:72:05:0e:d3:99:
                    ac:2c:62:d5:e4:12:e2:e7:72:71:5d:52:9c:55:ba:
                    f7:e1:18:0e:fd:de:11:52:61:b4:9b:50:6b:73:dd:
                    13:93:ba:74:d1:ce:2b:0f:31:88:c5:99:8e:b1:b1:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6B:71:E2:B7:AF:34:F1:A3:6E:0F:4F:D4:E9:47:9B:93:8F:93:73
            X509v3 Authority Key Identifier:
                keyid:10:7B:68:0E:5B:5F:B3:05:DB:89:31:1B:48:60:5A:84:68:50:89:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/107B680E5B5FB305DB89311B48605A8468508948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/107B680E5B5FB305DB89311B48605A8468508948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:7d:42:6c:68:3d:b7:32:55:9b:26:e1:2f:bd:25:13:86:
         a2:c7:b6:37:7c:55:56:31:c9:81:8f:78:77:f1:76:b2:bb:ec:
         1b:50:b0:d8:4b:5a:65:57:ec:68:b3:0c:02:48:db:46:6d:58:
         5c:bc:ec:a0:9f:2f:78:62:2b:a9:68:c9:49:d6:6b:22:49:9c:
         e2:1c:c3:d7:7f:ff:f2:2a:a8:c5:ad:8e:35:d6:f7:b0:fb:1e:
         00:2f:50:8a:23:aa:cf:dd:2b:5a:86:1c:98:b1:71:f3:4a:9f:
         66:f5:01:06:b2:53:25:00:e5:f3:da:0f:82:15:76:43:69:38:
         2d:8d:87:56:1d:23:2c:f6:db:dc:d4:25:e8:8f:57:3e:51:ed:
         a6:bb:83:8d:f5:0d:fe:b9:fe:37:ee:3c:27:ad:98:3d:8a:a5:
         6d:b7:6f:78:8d:15:e5:13:0a:01:39:a3:d0:ad:c5:e2:a2:5e:
         06:37:9b:86:4e:95:d3:f8:ac:6f:7f:3b:8d:b3:f6:84:46:29:
         eb:06:a1:e7:7d:aa:a1:14:8c:04:19:27:8c:60:c2:16:5d:c1:
         20:06:8a:24:06:e6:82:b6:cc:95:e7:46:79:a9:d4:79:9a:5f:
         14:28:e2:9a:c5:ee:7c:a1:5b:fd:f2:88:6b:e7:2e:31:df:d8:
         3b:5a:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:51 2025 by rpki-client