Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32332d3233203d3e20323632333534.roa
File:                     3133312e3130302e36302e302f32332d3233203d3e20323632333534.roa (raw, json)
Hash identifier:          dVrzkv3I7+eF4E6r0Z1HI7XI57nZc5Bw+LcHbkrynK8=
Subject key identifier:   6D:31:45:45:E5:9C:A4:02:70:20:41:91:86:F8:12:00:08:5D:7F:4F
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       60BC196813995D4F39D903DF7CDFD1BD1784D6EB
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32332d3233203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:31 +0000
ROA not before:           Wed 06 Mar 2024 14:09:31 +0000
ROA not after:            Wed 05 Mar 2025 14:14:31 +0000
asID:                     262354
IP address blocks:        131.100.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:19:68:13:99:5d:4f:39:d9:03:df:7c:df:d1:bd:17:84:d6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:31 2024 GMT
            Not After : Mar  5 14:14:31 2025 GMT
        Subject: CN=6D314545E59CA4027020419186F81200085D7F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:20:ca:8f:54:39:c2:6d:44:b1:4e:42:95:
                    4a:8e:74:3b:2c:ce:a2:da:6f:5b:ed:09:df:88:14:
                    a0:c5:02:f8:dc:13:81:3c:0c:9f:e3:46:18:d7:7a:
                    9f:59:3b:b6:1a:02:2b:29:b0:f4:56:b0:f1:d1:0b:
                    61:9f:e9:43:45:c7:41:7e:b1:9c:f6:81:25:91:c6:
                    81:3f:89:c0:19:7c:9d:c1:fd:5e:ae:c7:c3:b9:fb:
                    c0:1f:bb:df:ee:7c:66:35:fc:c3:59:04:c1:08:7c:
                    7f:38:90:10:22:09:71:f0:e5:1c:ed:09:fb:73:aa:
                    99:f9:b2:b8:f7:b7:51:46:81:2a:04:25:b4:05:a5:
                    05:6d:53:ed:05:3b:74:ed:54:11:25:0f:40:ea:ed:
                    40:ca:65:f9:b7:6d:4c:fb:15:5f:92:5d:35:9d:07:
                    33:7b:07:34:b1:d6:d4:80:7d:4d:e9:09:ba:57:ca:
                    e0:dd:60:da:5b:9c:4e:0e:aa:55:00:b0:f5:fb:9b:
                    ab:fc:4c:cc:75:8e:66:85:b3:5b:b7:33:f8:4b:96:
                    30:25:8b:57:cf:0e:4f:8b:94:25:43:39:d4:31:ea:
                    1a:62:c1:1c:14:a5:bb:f6:81:ab:da:a4:3c:1e:e7:
                    12:37:c5:1e:5f:d8:33:a5:2f:7c:75:15:53:61:61:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:31:45:45:E5:9C:A4:02:70:20:41:91:86:F8:12:00:08:5D:7F:4F
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36302e302f32332d3233203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:ec:0b:c6:98:6c:60:dc:67:3b:34:49:54:36:9b:06:d7:
         ce:1d:27:d6:12:54:3c:7c:76:b9:5c:98:98:e4:af:16:41:8d:
         8a:83:bb:d6:8d:d0:75:49:fe:eb:18:24:6d:8a:4e:83:cd:14:
         a5:b2:bb:e9:c8:f6:c1:0b:a6:d6:93:88:11:b2:f6:06:88:12:
         1e:27:0d:ce:a7:55:df:c4:65:a9:9a:cc:9d:b4:02:07:51:05:
         46:60:95:40:4d:e7:e9:33:1f:b1:c8:f1:41:61:70:6c:7a:2b:
         81:15:d1:45:af:16:b6:d6:45:d4:e1:ae:57:a2:6b:f6:7b:7a:
         84:4a:1d:20:e3:d3:1d:11:d8:6c:17:2f:b3:8b:e7:2f:5a:f3:
         d9:3d:35:be:50:6c:3f:a0:f1:73:ea:e9:41:70:c0:ef:4e:cb:
         87:a2:fa:77:06:df:fb:04:85:95:d4:51:a1:43:e8:e9:d7:f5:
         ca:8d:a7:28:67:f4:8c:5c:36:f0:3f:d8:8f:c4:07:f4:2e:a1:
         33:bd:23:ed:f1:f4:8d:2a:a1:7e:8c:d2:40:ef:4f:5e:4f:93:
         3a:50:77:f5:a5:fa:8c:bf:f3:42:86:a1:3e:4a:64:01:10:e7:
         88:7c:ca:df:43:26:e7:0e:e8:e6:9f:48:df:6b:ab:a1:99:a8:
         41:54:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:54:43 2025 by rpki-client