Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234372e302f32342d3234203d3e20323632393632.roa
File:                     3133312e3235352e3234372e302f32342d3234203d3e20323632393632.roa (raw, json)
Hash identifier:          M/kVCqkUshvuqro1KCXj86pCSMrWyUwTx6jAKNp/4f0=
Subject key identifier:   F8:A6:B4:67:13:79:7C:2F:6A:38:00:26:CF:D8:44:C2:D3:47:17:75
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       5AD2862E193EAFD7267FEAD4946251290CB03997
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234372e302f32342d3234203d3e20323632393632.roa
Signing time:             Fri 13 Oct 2023 17:09:23 +0000
ROA not before:           Fri 13 Oct 2023 17:04:23 +0000
ROA not after:            Fri 11 Oct 2024 17:09:23 +0000
asID:                     262962
IP address blocks:        131.255.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d2:86:2e:19:3e:af:d7:26:7f:ea:d4:94:62:51:29:0c:b0:39:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:04:23 2023 GMT
            Not After : Oct 11 17:09:23 2024 GMT
        Subject: CN=F8A6B46713797C2F6A380026CFD844C2D3471775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:ae:e2:e4:ae:1c:23:e6:87:17:21:a4:98:
                    2c:a0:b8:41:34:dc:fd:4d:cc:0a:13:fd:28:90:d2:
                    c6:dd:3a:d4:0b:c8:3c:0e:29:88:64:8b:28:73:09:
                    f6:b3:54:08:3f:7d:82:a9:86:78:dd:fc:01:d2:80:
                    16:45:93:40:d8:60:df:8b:61:cb:86:e2:f6:c2:1c:
                    11:96:0c:45:da:67:6d:36:23:65:43:1e:6f:4f:d6:
                    67:ab:aa:4b:35:32:55:14:64:1e:97:85:d5:cb:f7:
                    fa:18:fc:56:92:bc:54:fb:42:4f:aa:38:30:20:9a:
                    c8:a2:8d:bf:50:bf:2a:be:00:69:f7:a1:f9:2c:88:
                    e9:a1:22:e2:98:5b:82:fb:25:17:da:ad:12:73:f6:
                    18:2c:b1:fc:a4:6c:78:91:8d:fc:23:b3:b7:81:ec:
                    1e:49:e2:78:51:33:bd:4a:ed:97:85:e8:f1:8e:d8:
                    2b:ba:ab:74:5d:ef:2d:39:dc:0f:d3:5d:9d:b9:67:
                    8e:2e:13:a0:37:0d:43:73:67:45:e2:77:cc:84:86:
                    20:0f:5c:4c:58:86:b2:0c:d9:76:c5:f2:eb:71:c4:
                    9c:ce:65:c8:78:9f:fc:22:14:1a:24:7f:0d:c9:32:
                    e4:e4:1d:3d:5d:b3:f8:a2:fa:ec:5c:88:e7:2f:15:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:B4:67:13:79:7C:2F:6A:38:00:26:CF:D8:44:C2:D3:47:17:75
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234372e302f32342d3234203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:a4:99:dc:7c:b8:17:d5:b2:56:8b:0d:67:da:78:91:a8:
         88:b8:2d:0a:af:2b:c8:da:60:c9:28:50:9a:b9:09:ef:1d:5a:
         28:5d:cd:c8:96:c0:28:bd:82:62:bf:00:25:3d:5d:ae:72:4d:
         2c:fb:fd:14:67:20:79:4e:ab:f0:06:da:5c:6e:a9:a5:10:9a:
         75:3a:35:f9:68:a4:30:54:12:d8:96:8a:46:bb:01:bd:c6:ac:
         85:84:b5:e7:50:48:26:b6:a7:ed:5c:23:3d:cc:7d:33:1d:58:
         a1:85:79:a7:23:7b:6a:c7:b0:88:58:2a:7d:a5:b2:8b:cc:f6:
         23:c9:d1:e0:cc:03:19:a6:f0:14:0d:22:90:52:7b:f5:cf:54:
         2e:a9:52:a9:2b:ce:b4:1e:b4:22:ce:86:7d:e2:fa:34:f1:3b:
         f9:97:8e:31:45:cf:06:0d:94:48:b5:17:5b:7f:00:ce:cf:29:
         3d:d0:bd:98:5d:3f:dc:2b:b1:ad:e9:8e:83:49:5d:df:be:0b:
         1f:f1:40:84:ee:e0:66:74:1d:bc:f9:d0:ad:df:66:5f:da:a2:
         62:86:1a:d7:9d:60:ce:91:4f:f3:f4:3e:ca:06:c9:d9:60:96:
         a8:cf:21:7f:f7:87:f4:10:2d:7a:08:bd:4e:5c:c6:5e:49:42:
         18:a6:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:09 2025 by rpki-client