Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa
File:                     3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          TUADQjD7gIQqgeGNYi1bSJ5inGz612gm7sUdmpNre8I=
Subject key identifier:   27:AE:44:3D:1F:96:7C:75:C9:7E:B9:07:2B:6C:B7:1A:6C:EE:75:27
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       0318099E76962EA66B555FA9E950E5AB474B5A1B
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:15:10 +0000
ROA not before:           Sat 30 Mar 2024 14:10:10 +0000
ROA not after:            Sat 29 Mar 2025 14:15:10 +0000
asID:                     262491
IP address blocks:        131.255.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:09:9e:76:96:2e:a6:6b:55:5f:a9:e9:50:e5:ab:47:4b:5a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:10:10 2024 GMT
            Not After : Mar 29 14:15:10 2025 GMT
        Subject: CN=27AE443D1F967C75C97EB9072B6CB71A6CEE7527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:17:06:75:49:77:0d:e0:bc:c3:bc:4a:92:
                    e7:54:b9:45:4f:b5:c1:e2:38:4a:e3:e9:70:90:6f:
                    d5:43:79:b7:4b:1d:62:75:92:93:47:6e:c8:30:04:
                    ba:a2:6a:a2:55:82:4e:2b:f7:73:68:1b:f3:20:46:
                    b5:9a:02:47:2f:4f:ce:df:9c:4f:25:77:ec:3a:37:
                    0f:49:fe:8c:89:6b:b9:3b:c3:a0:ea:d0:38:ec:41:
                    b5:a1:88:f4:83:15:63:4e:ac:8a:ea:f1:b5:75:45:
                    a3:1a:8d:b0:89:51:25:e9:7f:fa:2c:ad:eb:cc:4e:
                    ab:89:21:9a:fe:ef:f0:a2:f9:95:3b:0d:d9:cd:6f:
                    7b:a1:96:7b:90:c6:92:b4:10:b7:0e:64:d8:21:f2:
                    e8:ea:fb:dc:dd:a2:63:c1:5c:90:0d:30:f9:57:9f:
                    c3:ee:91:ea:5a:25:f5:5f:ba:ee:58:1e:2f:d0:e5:
                    62:61:f2:1f:fb:97:84:11:84:26:8f:65:36:ac:f0:
                    f1:03:bb:d4:1d:55:02:90:4f:d1:39:ed:c0:36:d8:
                    87:58:98:9d:8a:ed:60:eb:0a:a4:28:20:e9:69:9c:
                    e3:74:95:29:79:53:5b:65:a8:93:b2:61:64:37:82:
                    96:c7:7d:50:62:c6:40:f4:82:21:ce:a4:89:42:43:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:44:3D:1F:96:7C:75:C9:7E:B9:07:2B:6C:B7:1A:6C:EE:75:27
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:be:0c:4b:a0:f3:62:52:a2:44:cb:96:6d:25:52:cd:8c:
         5d:95:1b:09:80:64:b6:cf:ab:53:8b:15:68:5d:da:8a:8c:24:
         ec:5f:fe:0c:dd:fe:a8:ab:7a:01:76:e1:23:d0:b7:71:7a:1f:
         23:0e:1c:b0:93:f2:eb:21:03:24:92:97:94:ba:f1:5b:bb:9a:
         f8:24:bb:ac:81:48:26:32:d9:71:2e:d6:05:0a:5b:1b:97:3a:
         d7:e5:e4:6f:3e:88:98:88:51:56:d2:3b:27:97:c2:bd:d8:e0:
         b1:1c:ab:0d:4e:cc:a7:6f:b1:97:74:d0:ec:f4:aa:11:32:61:
         bd:f3:1d:88:97:99:22:0d:17:3f:32:d8:4f:85:93:67:d4:22:
         bc:1d:57:ff:80:37:a5:14:bd:ec:d9:a9:88:98:2e:22:0d:8a:
         90:a4:73:7f:20:5b:db:a7:66:69:43:61:f5:3b:5c:c7:e6:0c:
         90:cf:9b:5a:5f:b2:97:82:8f:67:96:fd:d5:9d:0f:0d:81:d2:
         f2:d5:6b:e9:f8:47:35:d2:8e:27:fb:93:51:e8:ea:d3:02:e0:
         23:ab:c8:6c:8d:78:73:73:18:ba:d7:3f:95:ce:bc:94:bb:2c:
         af:ac:9a:05:24:88:32:3b:58:5d:9f:ac:16:ce:01:20:12:26:
         ba:33:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:21:51 2025 by rpki-client