Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa
File:                     3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (raw, json)
Hash identifier:          EYBucmWtx6R+Joh7WBZe+qFjNHAMfid0JkU65ILilB8=
Subject key identifier:   94:ED:65:F1:7F:F9:C1:A0:DA:06:23:3C:2F:C1:D1:3B:A2:9A:39:EC
Certificate issuer:       /CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
Certificate serial:       1DCAE14782A4831A75D1F6B59A9056D6779A2081
Authority key identifier: 0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa
Signing time:             Mon 02 Sep 2024 16:00:14 +0000
ROA not before:           Mon 02 Sep 2024 15:55:14 +0000
ROA not after:            Mon 01 Sep 2025 16:00:14 +0000
asID:                     271410
IP address blocks:        131.196.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:e1:47:82:a4:83:1a:75:d1:f6:b5:9a:90:56:d6:77:9a:20:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FBDD3F993E0EB0555216070730CE01AE2863A6A
        Validity
            Not Before: Sep  2 15:55:14 2024 GMT
            Not After : Sep  1 16:00:14 2025 GMT
        Subject: CN=94ED65F17FF9C1A0DA06233C2FC1D13BA29A39EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:f8:72:83:2f:4a:df:02:8b:0f:c0:5b:24:
                    81:04:a7:df:96:38:40:79:b2:45:e5:42:b5:2b:13:
                    b6:87:33:f4:77:1c:f5:d6:45:a3:0a:3c:c8:54:7e:
                    e5:4b:ce:37:0d:55:97:b1:30:14:f9:ff:ed:ed:1b:
                    7a:c4:bb:02:50:af:8e:12:28:9f:12:44:7b:6b:91:
                    91:41:7d:e6:b9:50:51:b1:4d:fc:98:dc:66:11:8a:
                    e2:7f:ac:c5:e4:1d:14:30:e2:74:33:ca:c1:ef:48:
                    dc:cb:c7:05:66:9c:2d:a1:bc:bd:a4:2b:81:45:db:
                    87:d4:79:cd:cf:d3:6f:6f:73:60:c8:3e:d5:a4:ab:
                    41:85:03:25:a1:d4:5a:8f:08:b2:0a:37:11:7c:c4:
                    33:33:47:ab:a9:95:63:c0:fc:68:e4:e6:95:dd:c1:
                    a0:40:ed:d6:1c:0b:0f:55:95:c4:45:9f:f8:04:1a:
                    73:70:b4:11:5e:a1:be:7d:cb:ac:ba:ca:25:d6:92:
                    47:fe:ad:2d:18:03:5f:ec:d2:48:8a:b5:83:66:86:
                    1b:80:90:d9:53:f2:29:37:d3:16:8c:49:37:a8:a2:
                    25:78:1f:25:82:f2:fa:f8:93:a4:3d:bd:8d:a1:53:
                    cb:83:4d:be:5d:c3:4b:a2:af:d8:d2:15:08:e9:d5:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:65:F1:7F:F9:C1:A0:DA:06:23:3C:2F:C1:D1:3B:A2:9A:39:EC
            X509v3 Authority Key Identifier:
                keyid:0F:BD:D3:F9:93:E0:EB:05:55:21:60:70:73:0C:E0:1A:E2:86:3A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FBDD3F993E0EB0555216070730CE01AE2863A6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/1/3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:fd:c3:2b:07:59:64:8b:2b:79:fc:83:c2:bb:18:fc:5a:
         d9:d6:f0:f1:c7:ae:4d:eb:47:89:37:81:74:00:79:67:49:29:
         36:5b:bd:9e:ab:80:8c:1f:ad:6d:fe:e2:75:15:7e:ba:e7:ad:
         74:82:ea:91:1a:3a:81:b8:bd:95:af:75:43:15:ca:ae:e8:4d:
         2c:1f:30:44:8e:58:8f:a2:2c:dc:98:c9:48:18:9e:62:52:bd:
         78:bf:ff:b6:67:c6:06:9b:d5:fd:fa:00:f0:aa:1e:b6:69:a7:
         5b:55:f9:53:e1:e2:ec:db:37:b0:e6:57:54:d4:f6:ad:bd:55:
         bd:a3:ba:13:67:9f:f6:f5:2e:a0:bd:41:91:44:06:15:43:99:
         e2:a0:88:a3:59:f4:dc:5c:43:3f:d3:7b:77:d9:b8:ff:a5:17:
         77:a7:08:f2:e2:55:11:c5:2a:eb:c5:0f:10:9a:d9:d9:d2:57:
         df:71:db:d3:0b:f1:f1:da:43:48:bf:d8:04:1e:11:a9:6d:6d:
         fc:85:5f:ae:21:78:ca:e4:f5:c1:27:d3:94:0c:3a:5e:0e:b5:
         f8:5f:26:3d:4a:45:ab:03:cb:11:11:87:18:90:5c:6b:6b:12:
         f1:20:59:67:90:1c:5c:e3:fa:0d:0a:ae:dc:0e:68:0b:3f:09:
         85:ba:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:45:48 2025 by rpki-client