Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32342d3234203d3e203631363538.roa
File:                     3133312e3130302e3231362e302f32342d3234203d3e203631363538.roa (raw, json)
Hash identifier:          bqmevogGQjXrtgRsRH+BNf6QnvKnuOQRtkMv1QU+xbs=
Subject key identifier:   34:25:78:76:1C:7E:1E:05:8B:4D:05:D6:88:46:DC:64:05:F1:45:0D
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       6B1B78892C5A86F9F281214E626FF2686F55441C
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32342d3234203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:22:31 +0000
ROA not before:           Mon 09 Dec 2024 17:17:31 +0000
ROA not after:            Mon 08 Dec 2025 17:22:31 +0000
asID:                     61658
IP address blocks:        131.100.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:78:89:2c:5a:86:f9:f2:81:21:4e:62:6f:f2:68:6f:55:44:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:17:31 2024 GMT
            Not After : Dec  8 17:22:31 2025 GMT
        Subject: CN=342578761C7E1E058B4D05D68846DC6405F1450D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:ed:12:4d:bf:51:56:83:e4:b1:89:e8:fe:
                    e2:0c:75:7e:df:94:3f:20:46:3b:bf:7b:e2:83:78:
                    08:67:27:a0:36:2f:e4:1d:6a:9a:9f:09:83:ed:25:
                    ac:18:9f:14:a3:f0:52:78:c9:0e:ed:0a:63:d0:ed:
                    a5:48:e5:e8:d7:64:c3:6a:af:e7:bf:1b:12:a7:80:
                    e9:6f:23:22:a6:06:df:77:29:28:77:cd:cd:e5:db:
                    f8:b3:50:d6:4e:4a:cd:b9:9e:25:a5:2d:d2:28:d6:
                    e6:fa:68:40:65:fe:31:f1:d8:79:b9:87:9a:9c:16:
                    48:e8:40:56:f3:fc:1d:b2:92:3a:ce:33:56:2e:6c:
                    4f:2d:8b:bf:7b:6d:85:3d:f9:9b:9b:c7:8a:ea:9b:
                    e7:09:ec:d8:89:61:35:b1:5c:a8:8f:f7:51:e3:a7:
                    57:70:8f:82:4c:cc:5d:ba:ce:fe:04:0b:3e:66:34:
                    71:b2:86:bb:2e:e7:05:a6:97:92:58:58:36:2d:09:
                    c7:b3:6b:c2:34:5f:67:bc:44:c6:9c:6f:d3:00:93:
                    79:89:b4:84:c6:31:65:45:b1:7e:a0:3b:4b:a8:c8:
                    c6:28:a2:ec:bf:72:7d:9e:6f:3c:ff:4d:13:a8:cb:
                    50:36:ac:f1:d9:7f:21:11:ab:e1:3b:ca:8f:f3:7c:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:78:76:1C:7E:1E:05:8B:4D:05:D6:88:46:DC:64:05:F1:45:0D
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32342d3234203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:17:41:4f:04:8a:f7:a6:1a:ba:82:5e:2e:4f:77:38:c4:89:
         20:76:21:68:43:31:0e:97:b7:fb:0f:02:e8:68:91:91:94:41:
         d0:ed:ed:eb:98:c7:0a:c0:e3:fc:d5:b7:f1:fb:b5:34:3a:df:
         7f:e3:aa:ab:a7:e6:43:2a:81:9e:7e:35:0d:c0:2f:e8:15:a0:
         4f:c1:26:42:8e:cc:7b:33:35:8a:bb:6d:2b:3f:aa:db:d5:47:
         9b:9b:09:74:ba:7b:61:79:21:8b:d5:c1:df:f4:8e:6b:2b:65:
         5d:d9:2d:8b:a0:16:63:1a:33:a7:80:a7:30:2b:59:5a:b4:89:
         ec:5e:56:18:10:ab:ec:4c:84:7d:84:b7:3f:13:93:b6:ff:2e:
         55:a0:a5:20:59:7c:86:2a:e2:dd:35:56:79:72:5f:cc:d1:2e:
         ce:b4:4d:95:3c:8b:6b:9c:cd:11:13:cf:74:ef:62:41:1a:49:
         9f:56:30:8f:b6:b5:03:8d:aa:3d:c5:91:ac:3c:a6:72:c0:8a:
         0d:e5:77:8f:03:cd:6f:dd:4c:1f:b8:6c:07:77:bd:8e:70:13:
         ca:fe:43:18:d0:79:60:f4:79:0d:9a:15:6a:ec:28:c2:b7:be:
         67:68:41:fe:78:76:c5:00:b3:63:3a:5b:bf:3d:ff:8e:5f:fe:
         31:68:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:25 2025 by rpki-client