Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa
File:                     3133312e37322e3138342e302f32322d3234203d3e203631373530.roa (raw, json)
Hash identifier:          WOc804GL5O6rAbuK0PXLnvcquBktlYjxpDw/C49pPTk=
Subject key identifier:   C5:28:76:C6:64:19:E5:D7:3E:55:5E:EB:34:44:49:60:AF:87:FC:AA
Certificate issuer:       /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
Certificate serial:       3FA91051A7986CE5B4901FA846E15BC2D01AEE8E
Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa
Signing time:             Wed 18 Dec 2024 12:40:08 +0000
ROA not before:           Wed 18 Dec 2024 12:35:08 +0000
ROA not after:            Wed 17 Dec 2025 12:40:08 +0000
asID:                     61750
IP address blocks:        131.72.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a9:10:51:a7:98:6c:e5:b4:90:1f:a8:46:e1:5b:c2:d0:1a:ee:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
        Validity
            Not Before: Dec 18 12:35:08 2024 GMT
            Not After : Dec 17 12:40:08 2025 GMT
        Subject: CN=C52876C66419E5D73E555EEB34444960AF87FCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:d3:4c:0b:0e:f1:5a:4f:cb:88:63:a5:3b:
                    fd:f3:c8:f1:c5:43:7c:b2:f2:2f:08:5e:f6:61:bb:
                    f5:89:72:eb:09:ca:33:5a:1e:68:a1:84:b4:b0:01:
                    69:92:9b:92:42:1d:73:98:0e:5e:32:02:94:59:62:
                    58:4b:65:8d:f1:94:dd:85:a8:9a:a7:c5:3e:04:71:
                    72:76:e4:15:5a:3c:7d:18:4f:1f:ed:64:fa:35:75:
                    64:2f:c6:67:83:92:c7:70:ea:b7:7e:85:aa:0f:e6:
                    18:4a:58:66:e7:d9:a9:21:14:4c:81:bd:11:0c:2a:
                    74:6f:2a:06:d2:61:de:c2:ab:c6:68:50:12:a1:d4:
                    e0:61:d6:77:48:e2:b3:fa:06:ae:06:b0:91:a0:ab:
                    f5:4c:96:61:44:c5:8a:02:68:ab:b3:cb:00:98:43:
                    14:2b:34:77:ed:46:39:92:df:d3:84:5b:11:db:77:
                    68:cd:10:3f:2b:bf:43:e6:d7:33:e5:75:a4:9b:5a:
                    c2:cb:51:3b:a5:ab:44:92:2e:f3:ec:63:6c:1f:ac:
                    16:47:ea:bf:10:07:0f:62:aa:fc:e5:1e:72:c1:68:
                    f8:ff:44:74:14:7e:3c:0a:5a:2b:9d:8f:e3:27:98:
                    1a:b0:28:ad:e2:c2:b3:41:06:b4:44:c4:8e:aa:71:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:76:C6:64:19:E5:D7:3E:55:5E:EB:34:44:49:60:AF:87:FC:AA
            X509v3 Authority Key Identifier:
                keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:f5:fc:f4:b7:34:0f:7a:da:10:0f:e3:27:4d:f1:aa:ce:9b:
         97:ce:1d:11:eb:05:0f:a8:6a:ef:b1:ce:9b:6d:c6:63:c4:37:
         4c:7a:4c:17:cc:16:ca:c4:69:b1:8a:ad:df:37:a1:81:ec:12:
         69:68:2b:67:2f:04:94:d5:b7:d2:bf:0c:7f:50:26:90:b2:0c:
         84:85:ed:8a:46:d3:6a:29:b9:86:f2:64:45:b2:f5:91:99:f2:
         51:d1:d5:7e:7f:ad:03:37:ba:cd:ab:02:e1:31:1c:08:12:9d:
         94:5c:33:ff:bb:57:d4:a3:45:68:ab:84:60:67:64:af:fd:52:
         5b:eb:2f:49:dc:7b:a4:14:fa:97:2e:00:c8:50:2d:a4:08:9d:
         ce:c0:56:48:d2:2c:81:69:9a:20:46:20:b7:f3:07:f3:5c:a1:
         19:d8:3b:d6:fe:c9:eb:c2:84:e1:ec:f0:52:12:41:0c:83:f6:
         62:55:3f:30:f4:36:0b:f4:0d:d3:40:4c:5e:93:d9:66:b3:00:
         e1:96:bd:22:8b:55:66:9d:da:2e:c7:0f:84:b6:09:b2:b1:c8:
         3c:a0:cb:78:0b:ea:81:5b:9a:9b:ab:29:c1:85:75:13:39:fd:
         8a:aa:14:1d:4f:de:1e:1f:77:a8:39:ce:e5:f3:be:33:7d:42:
         0c:eb:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:21 2025 by rpki-client