Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34362e302f32332d3233203d3e20323635393034.roa
File:                     3133312e3139362e34362e302f32332d3233203d3e20323635393034.roa (raw, json)
Hash identifier:          5sEQMDcpK/SH+VfhKeji90mWo0Kgdu1u4hN1ed66B68=
Subject key identifier:   AF:4C:44:99:68:0B:FD:C0:F3:49:10:49:A7:15:05:85:30:88:69:DB
Certificate issuer:       /CN=C63806621ABBC4CDC2DA29D5A8E315B014535CDA
Certificate serial:       2181F653AABF247F1B73A01D939BD6B6625CB1F6
Authority key identifier: C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34362e302f32332d3233203d3e20323635393034.roa
Signing time:             Thu 20 Apr 2023 20:08:07 +0000
ROA not before:           Thu 20 Apr 2023 20:03:07 +0000
ROA not after:            Thu 18 Apr 2024 20:08:07 +0000
asID:                     265904
IP address blocks:        131.196.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:81:f6:53:aa:bf:24:7f:1b:73:a0:1d:93:9b:d6:b6:62:5c:b1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63806621ABBC4CDC2DA29D5A8E315B014535CDA
        Validity
            Not Before: Apr 20 20:03:07 2023 GMT
            Not After : Apr 18 20:08:07 2024 GMT
        Subject: CN=AF4C4499680BFDC0F3491049A7150585308869DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:44:47:91:b8:21:30:e1:17:df:3b:67:3c:
                    81:53:86:ae:16:2a:66:c2:e6:85:38:16:49:11:cd:
                    94:86:9b:ac:01:f6:cb:27:fa:16:3a:5c:54:fa:8d:
                    6d:25:af:fb:57:62:59:ae:09:58:d1:75:5c:e6:de:
                    f1:eb:5b:cc:1a:ba:de:64:b7:da:7b:81:00:54:bb:
                    a3:70:d5:1c:63:d5:2d:2a:ca:26:49:01:21:dc:7b:
                    d8:5e:17:01:9f:e7:fa:18:81:44:c0:9e:11:d2:b9:
                    15:2c:dc:e8:c4:eb:10:b0:1d:7f:6d:b0:90:7a:3a:
                    de:5d:6c:fa:1e:f4:35:c1:09:e9:b9:40:f0:b4:24:
                    a0:2e:ca:47:84:7c:66:cf:14:53:f7:b9:12:b5:94:
                    2c:d2:8f:c6:8d:63:c7:00:c8:cd:d3:97:af:7e:71:
                    7b:8a:2c:08:b3:32:a1:cc:3f:98:42:a2:3b:be:4f:
                    59:b8:e7:c6:81:5a:4a:ad:e4:5b:bf:2a:db:05:12:
                    61:fa:cb:d0:45:17:dd:9f:99:55:7d:a9:e4:de:42:
                    0f:37:fb:7a:07:ad:72:75:3c:89:d4:a6:6f:2b:75:
                    e5:5a:21:8b:85:9c:54:d3:9d:a9:1c:20:a4:fc:dc:
                    2b:af:44:54:89:5d:36:57:ed:80:17:08:6a:27:a0:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:44:99:68:0B:FD:C0:F3:49:10:49:A7:15:05:85:30:88:69:DB
            X509v3 Authority Key Identifier:
                keyid:C6:38:06:62:1A:BB:C4:CD:C2:DA:29:D5:A8:E3:15:B0:14:53:5C:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C63806621ABBC4CDC2DA29D5A8E315B014535CDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvDVEY7dwA7k7PfxUPur62it5Nb3K54UD5UHkoLF5QGM/0/3133312e3139362e34362e302f32332d3233203d3e20323635393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:b2:97:18:18:18:0d:0b:fb:d4:d7:f1:aa:c1:a3:37:6f:
         df:f9:22:ff:f8:47:e9:c8:6e:e4:f3:ee:6d:67:da:49:78:46:
         cb:f3:f3:97:20:d6:ea:40:c8:b3:84:67:80:1b:68:9b:06:ee:
         e9:88:7d:86:7e:8f:4a:c0:11:d6:ac:f0:d9:38:1d:44:11:27:
         d5:0e:59:a9:63:05:e4:33:f9:c9:32:42:04:f6:59:ab:d8:e8:
         1f:d4:83:a0:a9:4c:52:92:b6:08:c2:c7:0a:e4:4b:3f:d4:a0:
         1e:ae:f9:18:9d:4b:f0:01:26:d1:b1:1a:e2:b3:a8:0b:a9:ad:
         c0:86:37:e7:1a:58:57:69:48:b2:93:3e:1b:a5:32:e9:65:e0:
         9a:bb:55:af:86:46:7b:62:ea:ae:45:c9:84:91:40:fd:b8:30:
         a4:b6:c2:7d:94:46:37:14:41:7a:8e:d0:49:ca:7d:69:2b:a3:
         80:1f:97:01:0d:c3:28:f6:72:16:27:a0:f6:4a:a9:32:ad:7c:
         16:c1:4b:61:cb:37:e5:94:39:58:a3:3e:9a:4e:14:e1:f1:5d:
         a8:32:57:b2:2a:b3:da:53:97:47:5a:e8:2c:f3:45:f5:90:6c:
         31:2f:4b:1d:1f:92:c7:bb:5b:91:d2:03:25:c8:09:10:f3:0f:
         af:20:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:38 2025 by rpki-client