Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa (raw, json)
Hash identifier:          1+hVmMgivh6rEwYyPbye+K0kdvOa8URbmfLBelXyspo=
Subject key identifier:   C5:BC:18:4F:4F:E2:69:B1:55:02:95:BD:7A:C6:26:AC:D4:28:E5:14
Certificate issuer:       /CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
Certificate serial:       61D9E2A22C527D3201D6E1457ACA3B770F854462
Authority key identifier: F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa
Signing time:             Fri 10 Jan 2025 20:28:40 +0000
ROA not before:           Fri 10 Jan 2025 20:23:40 +0000
ROA not after:            Fri 09 Jan 2026 20:28:40 +0000
asID:                     61657
IP address blocks:        131.100.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:e2:a2:2c:52:7d:32:01:d6:e1:45:7a:ca:3b:77:0f:85:44:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F950AA9EB69B6E76356621815A68620E1CFC80E6
        Validity
            Not Before: Jan 10 20:23:40 2025 GMT
            Not After : Jan  9 20:28:40 2026 GMT
        Subject: CN=C5BC184F4FE269B1550295BD7AC626ACD428E514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:7f:d9:32:be:e0:02:18:c6:af:e1:a5:a2:
                    da:53:09:1c:f0:6a:92:53:32:d1:9b:d2:77:1e:51:
                    ee:64:2a:53:c0:b2:b9:68:bf:e1:68:b5:4f:85:64:
                    60:c3:19:d9:19:2b:f0:a1:8b:89:15:87:36:fe:63:
                    7d:1d:dc:a3:9a:af:db:72:9e:0f:94:9e:cf:03:2c:
                    1a:a4:66:42:dd:e9:3b:c1:26:e2:86:37:ed:db:d3:
                    91:38:fb:94:d0:0f:ca:e7:7e:3b:31:89:70:ec:7a:
                    7c:b7:38:17:c1:0c:46:8f:06:dc:3b:8b:cb:4d:3c:
                    90:86:e3:2b:d2:95:4a:30:53:bf:1b:60:79:56:f2:
                    67:50:e2:12:48:99:af:81:e7:1f:7b:21:7a:f1:7e:
                    5f:4e:2d:fe:98:21:d0:01:1d:66:e7:da:c1:ea:9b:
                    22:0f:be:5f:80:62:02:a3:03:a7:0f:34:87:5e:40:
                    29:dc:63:34:2e:d7:09:e0:a7:f6:3b:e6:3e:d9:ff:
                    49:5c:58:c8:f4:af:eb:40:4a:9e:29:e0:48:a1:5a:
                    82:9b:45:35:cb:0f:54:7f:dc:5f:6d:10:47:ba:81:
                    91:06:6f:0d:86:a8:0d:3b:75:78:6d:96:ab:ae:ae:
                    94:dd:8e:53:de:d1:54:39:80:7f:8d:8e:b3:4a:9b:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BC:18:4F:4F:E2:69:B1:55:02:95:BD:7A:C6:26:AC:D4:28:E5:14
            X509v3 Authority Key Identifier:
                keyid:F9:50:AA:9E:B6:9B:6E:76:35:66:21:81:5A:68:62:0E:1C:FC:80:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/F950AA9EB69B6E76356621815A68620E1CFC80E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F950AA9EB69B6E76356621815A68620E1CFC80E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:13:98:a9:b3:0e:40:30:f3:89:e6:2f:bf:71:ff:e7:6d:
         80:4e:a4:46:7f:6f:bd:3e:66:8c:11:15:73:a6:4e:12:b0:08:
         28:73:e0:d4:6b:ef:db:77:e4:cd:ee:35:f8:a4:b2:f0:c7:68:
         ca:7f:51:28:5a:f7:d4:78:42:e9:50:3d:99:d2:a9:3a:2a:d7:
         9b:a7:7a:66:bb:54:e9:48:28:d6:82:52:7b:aa:a8:a0:58:43:
         d8:68:bf:09:9d:4d:3d:e1:dc:20:ca:5a:8c:53:61:e9:1a:09:
         19:e5:13:be:ff:a4:f2:0c:9c:34:03:29:fb:6b:08:14:0f:2e:
         cd:2a:bf:97:de:bd:b6:8b:cd:bb:92:88:1c:b4:97:81:a9:81:
         d4:9f:e0:50:ef:57:60:24:b3:f2:23:f2:8e:64:14:31:38:b3:
         e2:7f:5e:42:9a:a6:bc:4d:5f:8a:17:08:33:0d:a8:68:fb:63:
         08:6d:66:05:a1:e8:37:02:98:47:c9:94:39:ca:a7:b1:4a:d9:
         51:88:ca:fe:4b:9d:3c:d7:4b:01:9d:a0:b8:b9:d6:a1:fa:4c:
         ac:0b:36:38:0c:4e:b4:23:00:ec:d4:6b:03:aa:f3:f5:e0:b6:
         de:ea:ea:92:b8:7f:f6:57:c9:49:5a:20:73:32:00:b0:38:da:
         0f:cc:51:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYdnioixSfTIB1uFFeso7dw+FRGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk1MEFBOUVCNjlCNkU3NjM1NjYyMTgxNUE2ODYyMEUx
Q0ZDODBFNjAeFw0yNTAxMTAyMDIzNDBaFw0yNjAxMDkyMDI4NDBaMDMxMTAvBgNV
BAMTKEM1QkMxODRGNEZFMjY5QjE1NTAyOTVCRDdBQzYyNkFDRDQyOEU1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAX/ZMr7gAhjGr+GlotpTCRzw
apJTMtGb0nceUe5kKlPAsrlov+FotU+FZGDDGdkZK/Chi4kVhzb+Y30d3KOar9ty
ng+Uns8DLBqkZkLd6TvBJuKGN+3b05E4+5TQD8rnfjsxiXDseny3OBfBDEaPBtw7
i8tNPJCG4yvSlUowU78bYHlW8mdQ4hJIma+B5x97IXrxfl9OLf6YIdABHWbn2sHq
myIPvl+AYgKjA6cPNIdeQCncYzQu1wngp/Y75j7Z/0lcWMj0r+tASp4p4EihWoKb
RTXLD1R/3F9tEEe6gZEGbw2GqA07dXhtlquurpTdjlPe0VQ5gH+NjrNKmxW9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxbwYT0/iabFVApW9esYmrNQo5RQwHwYDVR0j
BBgwFoAU+VCqnrabbnY1ZiGBWmhiDhz8gOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnAxMWppRGVFVUdwTmZlUGd4djZmbVdIdm5VSjhpb1hrQnpLN1A3TkpW
QzIvMC9GOTUwQUE5RUI2OUI2RTc2MzU2NjIxODE1QTY4NjIwRTFDRkM4MEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NTBBQTlFQjY5QjZFNzYz
NTY2MjE4MTVBNjg2MjBFMUNGQzgwRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwMTFqaURlRVVHcE5mZVBneHY2Zm1XSHZuVUo4aW9Ya0J6SzdQN05KVkMyLzAv
MzEzMzMxMmUzMTMwMzAyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZPwwDQYJKoZIhvcNAQELBQADggEBAAq7E5ip
sw5AMPOJ5i+/cf/nbYBOpEZ/b70+ZowRFXOmThKwCChz4NRr79t35M3uNfiksvDH
aMp/USha99R4QulQPZnSqToq15unema7VOlIKNaCUnuqqKBYQ9hovwmdTT3h3CDK
WoxTYekaCRnlE77/pPIMnDQDKftrCBQPLs0qv5fevbaLzbuSiBy0l4GpgdSf4FDv
V2Aks/Ij8o5kFDE4s+J/XkKaprxNX4oXCDMNqGj7YwhtZgWh6DcCmEfJlDnKp7FK
2VGIyv5LnTzXSwGdoLi51qH6TKwLNjgMTrQjAOzUawOq8/Xgtt7q6pK4f/ZXyUla
IHMyALA42g/MUYc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:35:12 2025 by rpki-client