Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232352e302f32342d3234203d3e20323634343936.roa
File:                     3133312e3235352e3232352e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          noFbbImAIqXYFykrroxk+enbaVfMsZE6dzalk8oZ6Pg=
Subject key identifier:   11:0F:7C:8F:86:0B:17:EF:53:9D:42:73:64:BB:05:B9:31:17:B6:47
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       594A0F178A9244483D45177B2C52F2974B3FA416
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232352e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 14:34:17 +0000
ROA not before:           Wed 26 Feb 2025 14:29:17 +0000
ROA not after:            Wed 25 Feb 2026 14:34:17 +0000
asID:                     264496
IP address blocks:        131.255.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4a:0f:17:8a:92:44:48:3d:45:17:7b:2c:52:f2:97:4b:3f:a4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 14:29:17 2025 GMT
            Not After : Feb 25 14:34:17 2026 GMT
        Subject: CN=110F7C8F860B17EF539D427364BB05B93117B647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:01:ce:e6:16:b7:12:aa:d6:7d:bc:82:39:
                    98:55:d9:de:88:04:a4:db:46:0e:5e:1a:aa:07:b1:
                    85:ab:77:5d:f9:33:b5:d6:d8:c9:b7:2e:d6:31:3c:
                    d0:13:9d:65:2a:9c:f6:21:15:d1:83:9a:cf:47:1c:
                    e5:41:a8:08:ac:50:ea:59:6e:f0:6f:14:f2:8d:04:
                    33:f7:3d:37:1e:62:be:a3:e9:24:41:b4:87:96:f3:
                    78:c8:29:c5:c8:9e:24:bc:f4:7f:50:e2:6a:07:46:
                    40:f1:fa:d4:3f:f0:7f:75:f3:00:2c:58:d7:6f:61:
                    c3:98:97:4f:d4:f9:e1:00:f6:96:43:2a:86:38:6c:
                    83:46:67:e5:c7:ce:00:03:7b:d8:e7:f3:36:4a:c9:
                    1d:53:5c:57:67:ec:ea:d1:f6:b2:61:d9:3d:50:65:
                    16:59:03:52:37:22:04:aa:12:d6:60:86:8e:94:8c:
                    1d:15:41:4e:15:53:39:cf:8c:64:78:4f:09:76:6c:
                    82:cc:5d:13:0e:f4:cd:c4:91:6a:30:b0:ed:b5:ae:
                    d5:98:e3:df:dd:6b:c1:39:74:be:6f:99:db:0e:a8:
                    26:ed:ea:7d:78:f1:96:f6:4e:7e:a2:6f:4f:e0:1f:
                    9b:11:d8:e9:c0:e5:19:61:cb:30:8a:dc:1f:54:04:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:7C:8F:86:0B:17:EF:53:9D:42:73:64:BB:05:B9:31:17:B6:47
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232352e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:b4:eb:2d:00:e7:e8:be:e5:59:73:64:10:09:65:7a:01:
         53:74:f9:89:04:3b:e4:38:35:3a:a6:41:c2:b8:e3:98:86:d0:
         8c:ed:29:50:9a:6b:7c:f0:06:6d:4a:27:f7:09:a9:22:8b:31:
         6c:86:8a:87:51:72:71:ec:8a:66:f0:f7:f9:90:a6:2a:10:14:
         64:ec:ec:cb:67:27:66:fc:c9:09:9e:95:ff:02:eb:52:3f:b5:
         f7:ac:dc:5f:c8:bf:60:71:20:51:e2:9b:69:b3:62:39:59:b9:
         83:ed:80:79:9d:f6:28:69:34:0f:69:6d:5a:2f:ca:da:1f:08:
         0f:2f:5c:a6:ab:c6:c1:a9:ac:9e:19:43:97:85:c2:e7:cf:7e:
         af:47:d0:cd:49:ed:f8:e6:42:d0:cc:a9:41:53:84:32:52:b4:
         09:a2:e0:f6:7f:47:af:f0:07:d2:35:6f:f2:ee:8f:c4:93:07:
         92:31:43:18:84:45:b6:97:c6:08:92:59:aa:d0:4b:0a:41:9a:
         98:1f:3f:cd:b0:06:12:35:98:a5:98:5d:bc:6e:ba:34:67:e5:
         24:1f:ee:36:60:0c:95:d6:38:9f:b1:96:99:f5:a7:47:18:0b:
         95:7f:98:e4:26:73:6e:fe:34:eb:4c:e9:57:0d:67:54:8e:70:
         f7:70:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:04 2025 by rpki-client