Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34372e302f32342d3234203d3e20323635313434.roa
File:                     3133312e3136312e34372e302f32342d3234203d3e20323635313434.roa (raw, json)
Hash identifier:          Mozb4P41PHReVGfMgGWkpyAgZmrTZBEjInY9Zbfxmjo=
Subject key identifier:   64:5C:0A:11:36:FA:82:72:CB:8B:05:6C:44:75:89:6F:16:D4:8C:C5
Certificate issuer:       /CN=3BC765C6BDE5B83BD81FB1D7C415D0816A98C9EA
Certificate serial:       1E1D510292A05AC5B8E4348929F4E58B2553B32A
Authority key identifier: 3B:C7:65:C6:BD:E5:B8:3B:D8:1F:B1:D7:C4:15:D0:81:6A:98:C9:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC765C6BDE5B83BD81FB1D7C415D0816A98C9EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34372e302f32342d3234203d3e20323635313434.roa
Signing time:             Mon 22 Aug 2022 16:43:24 +0000
ROA not before:           Mon 22 Aug 2022 16:38:24 +0000
ROA not after:            Mon 21 Aug 2023 16:43:24 +0000
asID:                     265144
IP address blocks:        131.161.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:51:02:92:a0:5a:c5:b8:e4:34:89:29:f4:e5:8b:25:53:b3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC765C6BDE5B83BD81FB1D7C415D0816A98C9EA
        Validity
            Not Before: Aug 22 16:38:24 2022 GMT
            Not After : Aug 21 16:43:24 2023 GMT
        Subject: CN=645C0A1136FA8272CB8B056C4475896F16D48CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:a3:ad:90:cd:fb:08:6d:55:f5:6e:50:4f:
                    e3:3f:5d:c5:65:36:f3:15:5b:d8:f7:89:57:4c:98:
                    74:97:00:38:4f:67:d4:df:3b:42:79:bd:54:64:f3:
                    ed:04:6d:75:ef:35:7b:89:14:cc:22:7f:96:e4:ee:
                    35:df:ad:32:79:82:0e:53:45:5d:09:82:35:d4:65:
                    93:3d:e0:60:49:25:b7:af:48:dc:a3:6f:61:6d:36:
                    cf:17:17:cc:cf:8f:04:5e:25:14:03:18:8e:b1:58:
                    e4:7a:c7:21:b5:3f:c9:d9:a2:01:c5:ea:ac:31:4e:
                    b0:b4:bf:bd:45:b9:70:76:86:14:1e:ae:9c:11:1b:
                    8d:f4:82:0f:af:8f:dd:6f:79:13:47:30:ed:00:ac:
                    26:74:4a:b1:a3:e9:74:5f:8e:47:92:b8:1c:7d:be:
                    4b:cd:55:a3:27:53:c4:7c:db:af:e1:ef:81:8c:aa:
                    3c:6e:a8:5b:ad:0b:e7:ff:e3:bd:34:1f:d3:7d:2a:
                    c5:3a:9f:b8:20:17:7d:b9:54:e8:82:e8:5c:8f:63:
                    5e:14:83:9f:85:cb:49:c0:b9:a0:4b:7a:a1:0d:cc:
                    4b:1e:3f:57:fb:32:5c:a5:5c:27:9c:a0:d1:f2:44:
                    57:c3:68:b0:67:13:5c:db:62:da:61:61:e2:ff:80:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5C:0A:11:36:FA:82:72:CB:8B:05:6C:44:75:89:6F:16:D4:8C:C5
            X509v3 Authority Key Identifier:
                keyid:3B:C7:65:C6:BD:E5:B8:3B:D8:1F:B1:D7:C4:15:D0:81:6A:98:C9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3BC765C6BDE5B83BD81FB1D7C415D0816A98C9EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC765C6BDE5B83BD81FB1D7C415D0816A98C9EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34372e302f32342d3234203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3e:c1:d3:b0:07:a2:10:f4:39:fb:5a:69:d3:09:ee:58:c0:
         b5:75:11:40:18:29:4e:59:be:b3:18:7a:aa:d4:ca:bb:ae:61:
         e6:3c:09:ea:8c:cc:78:bb:05:d0:e5:d2:65:e3:fe:ca:1c:e2:
         0d:ca:63:ef:0f:f6:13:fd:31:96:c1:d2:0b:b1:cb:b1:49:62:
         f8:06:09:23:ce:91:b1:74:35:91:de:b4:69:20:ac:99:d3:c4:
         87:fb:6d:29:42:4b:c9:fd:de:33:b2:ea:9c:48:ad:9d:de:d0:
         22:4a:4b:26:4a:96:69:c2:97:03:1c:76:da:57:0f:ba:67:81:
         c9:37:5f:4f:ef:7a:e1:44:24:e6:aa:bf:11:b2:4a:01:5e:87:
         40:f2:85:5f:2f:b2:30:19:c4:49:ae:12:48:28:c8:b7:90:13:
         1e:5d:36:a3:dc:ed:a3:90:6a:a3:ef:c1:7e:2e:1e:57:f0:93:
         be:8a:9a:18:29:2b:ef:a9:87:20:7a:4a:80:0f:98:0a:ce:e9:
         5d:e9:81:28:2f:80:6f:35:40:5f:46:ff:1d:3f:a8:0c:ed:e8:
         19:c3:d6:ea:75:85:27:d9:29:81:75:0c:e0:67:75:04:56:2b:
         be:40:16:52:d4:e0:81:b0:87:64:f1:81:a2:6a:1a:c5:3b:fd:
         ba:49:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:23 2025 by rpki-client