Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137362e302f32342d3234203d3e20323634333834.roa
File:                     3133312e3136312e3137362e302f32342d3234203d3e20323634333834.roa (raw, json)
Hash identifier:          EXfqF+d1iVWGuPfHNykgywtvKw6+duItvjkhuoiRJ/Q=
Subject key identifier:   1C:0C:18:11:2A:C0:F9:B8:0B:3C:41:0F:7F:4C:AB:26:AC:03:9F:65
Certificate issuer:       /CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
Certificate serial:       038FB6C7C8CD273F0CC3EE00DA38928FF89B0F48
Authority key identifier: AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137362e302f32342d3234203d3e20323634333834.roa
Signing time:             Mon 27 Feb 2023 18:00:47 +0000
ROA not before:           Mon 27 Feb 2023 17:55:47 +0000
ROA not after:            Mon 26 Feb 2024 18:00:47 +0000
asID:                     264384
IP address blocks:        131.161.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8f:b6:c7:c8:cd:27:3f:0c:c3:ee:00:da:38:92:8f:f8:9b:0f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
        Validity
            Not Before: Feb 27 17:55:47 2023 GMT
            Not After : Feb 26 18:00:47 2024 GMT
        Subject: CN=1C0C18112AC0F9B80B3C410F7F4CAB26AC039F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:db:2d:ab:2d:96:82:92:b2:a2:1d:55:4b:
                    24:4a:22:e0:9e:1a:d3:91:e6:86:ff:1e:22:1b:dc:
                    54:d0:a0:25:e7:ee:a1:4b:1e:b5:49:4c:7b:d3:d2:
                    fd:e5:e0:d4:e2:4b:f2:d5:b4:4e:d2:ff:57:0b:a4:
                    e9:9d:88:ab:cd:fe:0f:c5:a2:49:36:4f:36:5e:b3:
                    92:c7:85:ae:3d:58:52:4b:31:04:43:c3:f3:a5:3e:
                    12:ea:c2:bc:55:6d:5d:5b:4a:b8:88:ed:16:3b:63:
                    bf:60:05:05:0e:d4:af:4d:a7:1b:37:1a:14:c6:d2:
                    45:cc:d1:77:b8:0e:fe:bf:75:09:a6:54:24:21:fc:
                    03:7e:da:08:87:a1:61:32:6a:21:ca:32:e8:db:28:
                    d7:ae:7d:9d:0a:37:48:b4:9e:2b:35:33:db:4a:60:
                    ef:a6:fa:62:63:da:ed:1a:55:dc:20:a5:13:2c:4b:
                    eb:52:1e:1e:3e:01:46:63:8d:2a:21:e3:25:e6:03:
                    fe:01:e5:04:42:30:3f:3b:57:b4:f5:d4:66:04:36:
                    83:b5:9f:75:fd:3a:96:dc:58:e8:b3:d8:b6:ce:10:
                    73:7a:60:89:dc:2c:bc:a6:85:47:55:16:e5:c1:2d:
                    3a:56:83:03:83:36:d5:10:d9:0f:cf:f3:d5:b4:99:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:18:11:2A:C0:F9:B8:0B:3C:41:0F:7F:4C:AB:26:AC:03:9F:65
            X509v3 Authority Key Identifier:
                keyid:AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137362e302f32342d3234203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:2c:b8:ff:8f:f3:95:0d:c6:fc:c2:91:2d:f7:5c:a3:61:
         70:ee:33:4f:cf:ef:fd:18:de:b6:04:e7:8f:9b:6f:d2:71:ef:
         6e:5a:74:10:4a:23:a8:aa:d4:24:e7:ea:17:87:42:1a:66:9c:
         3e:f1:4e:09:45:75:a7:3c:45:1d:ae:89:73:9b:16:c2:65:88:
         a7:d5:65:14:4c:0d:6b:99:48:c6:01:4b:ce:af:0c:c6:c1:73:
         c2:f0:64:2e:53:fb:ea:9d:b3:f7:db:e9:84:cb:29:54:19:a0:
         4a:dc:33:b5:5d:dd:3d:c5:07:12:c7:79:bc:e8:8c:7f:91:2b:
         36:8f:ac:31:20:f6:47:d9:7d:eb:5d:ca:28:32:27:88:dc:dc:
         d0:2c:b1:b4:9d:cb:85:be:97:c9:51:31:e1:e4:19:97:06:d4:
         bd:ec:4a:90:07:1e:cd:54:cc:42:ba:dc:be:70:d5:37:08:97:
         5b:bd:8d:2f:f3:93:51:66:fd:57:dc:d0:cc:e2:62:f6:5a:41:
         6f:37:fc:f1:54:4f:5d:e0:e8:29:78:5f:b4:d4:f7:b6:2b:d3:
         e1:bc:f6:bb:76:d6:40:55:df:71:23:7c:be:b7:9e:2e:63:9a:
         02:c5:ff:06:34:ff:89:44:74:ed:2d:4e:5f:44:18:ce:65:3d:
         1a:4c:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:24 2025 by rpki-client