Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e302f32342d3234203d3e203631363730.roa
File:                     3133312e3130302e3130372e302f32342d3234203d3e203631363730.roa (raw, json)
Hash identifier:          yBsOyUhAJ9kSOMozBmpLNHSUUFlr/n7AhySKPavrqMQ=
Subject key identifier:   5F:C1:32:F5:F4:8A:AE:37:F8:D0:ED:4C:2B:21:0F:EF:71:B3:BF:CC
Certificate issuer:       /CN=235C1B5C008D278DFED43A1557D5D941F37370A3
Certificate serial:       62B4CC248C82BBD32B128B6435C855785116B682
Authority key identifier: 23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e302f32342d3234203d3e203631363730.roa
Signing time:             Fri 17 May 2024 20:39:31 +0000
ROA not before:           Fri 17 May 2024 20:34:31 +0000
ROA not after:            Fri 16 May 2025 20:39:31 +0000
asID:                     61670
IP address blocks:        131.100.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b4:cc:24:8c:82:bb:d3:2b:12:8b:64:35:c8:55:78:51:16:b6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235C1B5C008D278DFED43A1557D5D941F37370A3
        Validity
            Not Before: May 17 20:34:31 2024 GMT
            Not After : May 16 20:39:31 2025 GMT
        Subject: CN=5FC132F5F48AAE37F8D0ED4C2B210FEF71B3BFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:28:c5:7d:1a:cb:34:45:c5:89:06:57:fc:
                    d8:1c:9e:17:8a:fe:d2:6e:dc:8b:c3:84:e8:16:ed:
                    66:af:d6:af:e6:7e:b5:f9:a2:a7:51:4d:fd:0d:5c:
                    d7:e6:34:2b:04:1a:41:87:84:f5:71:a3:d4:b0:e5:
                    57:7d:b6:39:71:a6:56:c8:f7:a9:79:be:32:7c:90:
                    db:e4:27:35:a2:1a:ca:18:04:18:c8:fc:80:8e:bd:
                    10:ad:0c:76:a6:15:89:cc:07:7b:78:04:3c:4c:10:
                    bb:2f:7a:9a:e6:45:13:07:b9:5b:d1:b6:8d:7c:24:
                    cd:f9:42:a6:17:3e:bc:1b:80:19:cb:21:b3:5b:22:
                    07:06:9a:07:cb:33:40:61:53:1f:44:55:a3:fb:eb:
                    45:b2:e0:cd:56:75:59:87:da:d9:93:29:88:b5:cd:
                    fb:d7:c1:56:46:a6:93:90:d5:20:b4:c7:7e:34:94:
                    9a:26:d5:8d:84:08:c4:9f:af:d9:a5:8e:63:9e:97:
                    79:72:bd:58:59:d7:78:86:87:a4:d4:10:5b:3d:1c:
                    23:fb:f6:77:36:a2:f9:64:ce:a5:44:81:ee:43:7b:
                    a3:91:b1:6b:d0:b0:1a:e6:13:e6:50:2f:69:37:64:
                    dd:6c:fc:dc:73:6a:8f:c3:a0:ba:89:7e:d8:26:2b:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:32:F5:F4:8A:AE:37:F8:D0:ED:4C:2B:21:0F:EF:71:B3:BF:CC
            X509v3 Authority Key Identifier:
                keyid:23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/235C1B5C008D278DFED43A1557D5D941F37370A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130372e302f32342d3234203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:30:c8:da:6e:b2:0e:55:c6:c9:c2:fb:a5:9a:43:63:db:2d:
         05:35:b9:41:72:a6:b6:f6:71:dc:a0:61:25:d7:d5:8c:25:1d:
         f7:65:d5:dc:37:8b:b6:69:de:95:cf:d2:0a:28:cd:2e:2d:4f:
         9a:93:35:9e:97:f3:46:5c:0e:a8:56:59:dc:29:cf:7c:b6:8c:
         0d:00:ee:33:eb:65:13:bb:27:5c:38:fa:fc:74:a2:f6:01:63:
         f2:3c:3e:a5:e4:08:82:6f:d3:d8:6f:9c:57:24:26:b3:77:6c:
         7b:c6:10:e7:36:87:43:4c:30:c2:6d:69:81:90:5e:fb:a6:d5:
         46:65:0c:22:fa:4d:b9:cd:e1:38:eb:5e:71:37:77:a8:70:27:
         80:7c:2d:2c:25:0f:6e:75:2c:0c:5b:45:a6:ae:ec:02:49:1b:
         36:32:32:a6:99:79:54:70:fd:e0:92:02:2c:59:ec:f9:90:7c:
         06:72:df:04:cc:8f:cb:89:bf:f6:54:58:5d:b7:25:12:c1:a7:
         a4:95:83:50:b3:f4:d8:27:e8:93:9e:29:a9:6e:2a:c3:8a:65:
         9f:7a:a7:3a:50:4f:50:fb:56:d4:75:db:cb:9f:b8:78:84:af:
         6f:74:8c:a6:c7:ec:3b:11:c5:d1:3b:fa:4f:ec:8b:0a:bf:fc:
         64:8e:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:18:38 2025 by rpki-client