Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          q3ycRynzJnT3HY8sjI8CsEdtDdcL7HGnLY1kn02NNTg=
Subject key identifier:   0B:98:CB:6A:81:2A:E7:A4:C0:ED:B5:50:6D:18:03:E7:73:85:F1:52
Certificate issuer:       /CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
Certificate serial:       78B60A5BCE5423D0A6D32320EE2AD35E5950511C
Authority key identifier: A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time:             Thu 16 Jan 2025 16:29:06 +0000
ROA not before:           Thu 16 Jan 2025 16:24:06 +0000
ROA not after:            Thu 15 Jan 2026 16:29:06 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b6:0a:5b:ce:54:23:d0:a6:d3:23:20:ee:2a:d3:5e:59:50:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D7C61DBB9645C282D594045FD27D9E265B6A5F
        Validity
            Not Before: Jan 16 16:24:06 2025 GMT
            Not After : Jan 15 16:29:06 2026 GMT
        Subject: CN=0B98CB6A812AE7A4C0EDB5506D1803E77385F152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:1f:67:9c:a9:a3:a3:f3:09:fd:20:9a:27:
                    4d:2c:b4:d6:b2:cc:fd:d6:55:6c:d9:e7:d8:18:6a:
                    b1:b1:7c:08:f7:f1:bf:15:a8:af:41:62:aa:ed:da:
                    59:7d:cd:cc:04:d5:e6:d8:a9:74:3c:42:50:eb:44:
                    58:4f:68:0a:33:77:64:08:52:a7:64:e2:64:f6:fb:
                    19:95:5e:7a:03:82:db:eb:24:6e:6b:78:35:eb:d1:
                    9a:1e:79:ad:f1:96:a5:72:4f:a7:e6:31:2f:1a:64:
                    00:14:bb:80:ec:10:30:a6:a4:15:b1:28:9e:2b:7c:
                    f7:f9:d1:10:5b:25:d4:e9:8d:6f:82:17:3a:1a:eb:
                    d6:8d:42:f4:1f:f1:e0:c3:0e:9f:4d:45:5e:aa:b1:
                    55:bb:08:07:bb:78:2a:e3:22:33:43:0f:11:6e:2f:
                    52:8d:b3:c5:f7:31:70:e1:96:e1:fc:cc:18:24:5a:
                    24:1f:63:09:c3:1d:49:c2:9f:87:e4:70:42:b8:f5:
                    db:b3:dd:e7:50:80:00:cf:a6:e2:b7:de:27:2d:a1:
                    71:cd:9c:02:bf:20:23:99:3c:97:54:8e:2d:80:da:
                    d7:93:7b:ba:68:33:e1:ee:48:06:cd:b6:4f:87:c6:
                    73:b1:6d:d1:8c:01:c2:f0:ce:fd:3b:c5:6b:36:ac:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:CB:6A:81:2A:E7:A4:C0:ED:B5:50:6D:18:03:E7:73:85:F1:52
            X509v3 Authority Key Identifier:
                keyid:A5:D7:C6:1D:BB:96:45:C2:82:D5:94:04:5F:D2:7D:9E:26:5B:6A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D7C61DBB9645C282D594045FD27D9E265B6A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:db:0d:95:49:0b:64:38:85:d6:c6:24:2b:8b:e6:43:2d:be:
         be:53:af:32:46:30:74:b7:75:86:0a:dc:07:c5:95:0a:58:cf:
         5f:7e:84:82:3f:6a:25:a0:a4:67:1a:a5:d8:7a:bb:32:40:9d:
         6b:56:07:a1:2c:65:43:3b:42:f7:7d:29:58:b9:1f:18:96:dd:
         7e:30:34:3f:98:00:ee:70:71:81:8a:de:6b:c9:bf:31:ab:cd:
         c9:8a:f8:c4:d9:3f:24:b0:34:03:ee:85:1e:6b:eb:eb:a6:36:
         dc:3b:fc:e9:87:9f:c2:94:bb:20:70:26:67:27:e4:f6:9c:1f:
         6c:85:9e:24:18:76:b1:13:31:9a:fc:7b:65:2e:cf:02:04:81:
         56:7a:f4:49:6b:05:4d:c7:2f:82:bd:75:e9:04:8a:ee:da:87:
         a9:2c:8b:e3:f7:39:82:1e:93:e0:ce:8c:48:35:d4:97:c4:93:
         65:0a:54:e9:48:bc:e0:7f:87:68:06:f0:83:e5:f4:20:c9:ec:
         af:5d:49:09:9a:00:8c:d1:b3:31:f2:88:da:e3:ae:9e:85:30:
         39:78:20:51:df:9a:3d:eb:6b:16:2f:86:85:b6:0c:68:ac:65:
         c4:c0:22:af:a5:b6:c3:34:b6:f0:b1:69:fe:15:ef:ce:69:05:
         28:2f:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:04:53 2025 by rpki-client