Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
File:                     3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa (raw, json)
Hash identifier:          3eCg3IhwMEI8Q4lmQoUiz0AfnNviS+TqURckT1+Fy3s=
Subject key identifier:   7B:AD:E7:F3:AE:44:71:5F:F9:3C:3A:4F:2A:22:87:1D:D6:54:A4:C2
Certificate issuer:       /CN=9525905700962482C0F4F6E9E0D71074880AC7C5
Certificate serial:       36F2D9FA0909B3C62129F1CF1D34633489404ADF
Authority key identifier: 95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
Signing time:             Tue 11 Mar 2025 20:42:03 +0000
ROA not before:           Tue 11 Mar 2025 20:37:03 +0000
ROA not after:            Tue 10 Mar 2026 20:42:03 +0000
asID:                     52741
IP address blocks:        143.255.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f2:d9:fa:09:09:b3:c6:21:29:f1:cf:1d:34:63:34:89:40:4a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9525905700962482C0F4F6E9E0D71074880AC7C5
        Validity
            Not Before: Mar 11 20:37:03 2025 GMT
            Not After : Mar 10 20:42:03 2026 GMT
        Subject: CN=7BADE7F3AE44715FF93C3A4F2A22871DD654A4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:6f:0f:8c:40:87:34:a9:84:e9:d5:47:88:
                    f8:78:9d:86:03:aa:a8:1e:d4:c3:48:c5:20:6f:b6:
                    a0:cb:50:62:b5:38:d9:d7:b1:2f:e1:6b:4d:f9:78:
                    b8:8b:37:20:17:f1:98:c5:c0:5f:a1:0b:68:05:06:
                    b4:59:f9:92:53:ff:09:88:cd:40:3a:ec:54:2a:86:
                    96:39:b7:ed:8a:d5:32:bd:c3:86:41:26:f7:e6:46:
                    0f:2f:a3:d6:1c:5e:76:bc:72:a2:6b:63:e5:2c:32:
                    af:4c:9d:18:d1:5a:70:9d:c4:03:a0:d1:f1:5d:74:
                    3a:25:68:65:76:71:2d:45:3c:d8:63:d6:98:c8:b0:
                    86:e4:e8:2c:4b:99:6b:7b:36:b4:ac:c5:81:d3:49:
                    1d:85:a8:f4:08:7a:47:6f:55:8d:d9:59:ad:89:94:
                    a3:32:02:4d:5c:cd:e6:7a:7f:ee:d3:d6:65:c5:35:
                    bc:00:35:62:74:43:93:08:7e:e7:f4:74:c4:3c:4c:
                    77:e0:e5:51:87:dd:f3:26:76:52:c1:7c:e3:43:a2:
                    82:be:ea:56:0b:bb:d6:12:64:bb:70:75:5e:73:81:
                    8d:d3:16:e9:89:a1:bd:ee:1a:e7:51:c1:e9:32:10:
                    ca:2c:7d:6a:e5:5a:b4:96:c5:e9:ab:fb:7b:cf:15:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AD:E7:F3:AE:44:71:5F:F9:3C:3A:4F:2A:22:87:1D:D6:54:A4:C2
            X509v3 Authority Key Identifier:
                keyid:95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:4c:9b:c1:be:f3:41:0e:a9:61:5c:1a:8b:49:b1:a4:a0:e8:
         f4:69:be:c0:1d:bb:84:27:24:07:8a:25:bb:da:48:b9:7a:24:
         94:3f:28:b1:48:cd:c6:56:d3:a5:d2:2d:61:00:b7:7c:3c:10:
         a7:14:02:b9:db:87:41:15:fb:65:73:ea:9c:37:54:a3:1b:11:
         3b:e8:56:11:ec:65:60:eb:98:a3:22:d1:7f:19:8c:f0:b7:5e:
         fe:62:72:41:4f:30:10:72:a1:bf:61:24:59:1a:37:6b:09:2a:
         01:fc:d0:69:61:bf:18:70:c1:40:5c:cc:81:a0:4b:44:8b:a1:
         08:6b:55:a8:96:bc:3a:33:77:51:81:7c:e0:d2:ba:11:ea:55:
         d5:58:44:ff:79:12:1d:83:76:51:71:28:0d:45:c5:19:3b:50:
         1b:04:b8:a8:5d:53:53:f5:2e:65:bf:07:23:b5:7a:4e:07:8a:
         8c:b1:39:ce:c3:5c:e7:85:0c:be:02:5d:d3:31:51:d2:de:b3:
         b1:31:d5:e7:6f:ff:c5:4a:ef:40:ef:0f:a0:f0:52:e6:30:29:
         e3:1f:b2:b2:07:ba:a8:32:e6:af:ef:e4:3a:df:24:cb:4e:a4:
         d3:66:f9:e1:39:ba:09:c1:f6:d6:50:bb:e6:07:f5:d8:4b:63:
         95:83:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:59:31 2025 by rpki-client