Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36352e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36352e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          5XYrWecKBJIGPnYXovVlebNP5gBxb1ad+E+Z4IPJAlQ=
Subject key identifier:   04:E8:03:33:B2:27:9E:C7:B3:DE:6F:EC:B4:B0:57:5F:FC:87:B7:02
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       7D0D4935D119D2D6D1C04A2DAC03BD3DE13BD959
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36352e302f32342d3234203d3e203631363830.roa
Signing time:             Mon 23 Dec 2024 12:58:02 +0000
ROA not before:           Mon 23 Dec 2024 12:53:02 +0000
ROA not after:            Mon 22 Dec 2025 12:58:02 +0000
asID:                     61680
IP address blocks:        131.108.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0d:49:35:d1:19:d2:d6:d1:c0:4a:2d:ac:03:bd:3d:e1:3b:d9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Dec 23 12:53:02 2024 GMT
            Not After : Dec 22 12:58:02 2025 GMT
        Subject: CN=04E80333B2279EC7B3DE6FECB4B0575FFC87B702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:13:fd:21:34:56:1c:8e:16:76:ae:c1:7e:
                    28:70:75:79:dc:f9:01:c7:e4:6f:1c:3e:0a:1e:98:
                    03:31:88:65:d6:05:e2:c3:95:4f:45:b0:2b:c0:7b:
                    0f:df:16:73:ef:18:5b:64:65:f1:df:c5:19:a7:f8:
                    04:21:bf:18:af:25:8e:ba:27:e9:2c:ec:41:ea:d7:
                    f2:1d:8e:8c:70:4e:b5:a0:f5:1f:21:a8:95:3e:d6:
                    b0:a0:06:5d:7d:3e:cf:a0:e6:4f:c9:96:3f:77:4f:
                    a8:bf:3e:a5:cd:81:76:52:03:93:4a:45:80:25:a2:
                    2f:f5:e1:7e:5f:38:25:65:ed:8d:37:9b:a6:13:21:
                    c1:58:28:da:40:fa:f6:8c:39:f2:fd:7f:fe:30:8a:
                    2d:7a:b7:91:01:fa:23:05:f4:26:4c:3e:db:7b:33:
                    1d:ec:f2:60:f4:8a:28:c2:f3:0c:e9:7e:37:9a:9e:
                    4e:a7:30:0e:d1:ad:59:95:85:54:78:95:85:18:b4:
                    b1:cb:06:f9:31:c0:f4:29:7b:c1:20:98:2c:0e:ff:
                    20:57:ff:f4:c4:7f:33:df:42:de:eb:0c:e9:17:1b:
                    60:5e:11:2b:0c:9c:bf:09:e3:f3:6d:73:c0:f0:0a:
                    12:67:55:3c:42:2e:25:6d:c4:63:e1:5b:a9:e8:81:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:03:33:B2:27:9E:C7:B3:DE:6F:EC:B4:B0:57:5F:FC:87:B7:02
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36352e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:8b:a6:63:06:23:64:e4:fc:5b:8c:07:b8:bf:a8:f9:ee:
         53:04:46:79:82:f8:8d:e8:ac:e2:70:63:c3:79:2e:31:f1:d0:
         a8:79:93:37:8c:71:78:fc:6e:1c:06:fc:ad:1e:80:51:3d:da:
         f8:9b:ea:25:5a:95:9d:c0:3d:00:e5:d5:32:22:56:6e:d5:f9:
         b2:f3:ed:4e:48:3f:12:fd:83:9c:ed:45:c0:f4:18:c3:67:4a:
         18:44:00:ce:88:0d:33:05:2c:44:dd:d9:a8:4d:f5:84:e8:0e:
         cc:f2:c8:24:3e:dc:ff:a2:2b:9f:48:e8:db:ec:4f:ca:3a:19:
         2a:3b:16:97:be:4d:94:23:10:a4:ae:38:ae:40:64:b2:c4:14:
         17:72:15:80:03:bf:63:75:64:77:59:86:2b:46:59:69:9a:eb:
         35:8d:6b:66:bf:10:2a:e8:fe:62:75:17:4c:25:ff:25:51:04:
         e6:4f:f7:8e:f7:a4:b1:2c:3b:61:ce:c2:bb:0d:4f:2d:20:e2:
         aa:0e:43:c2:7e:b2:dc:03:6b:6c:03:7f:9b:bb:5d:3a:92:b8:
         69:b0:18:d3:bf:67:28:18:73:90:58:d6:95:60:3b:c4:57:f1:
         c9:63:0e:8c:b5:c7:27:f6:f8:c5:ec:c4:3a:1e:1d:26:63:88:
         de:88:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:52:36 2025 by rpki-client