Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          KkrbIpxPLV7bowVegRNo0yMf5j4qK17QGHciJre8Fxk=
Subject key identifier:   B1:60:45:C3:8E:A0:4C:1C:B2:89:15:B7:FF:22:9A:0A:E1:A3:A3:32
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       4D8CEB90C0BC24411632A793201B1A42BC7BE984
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8c:eb:90:c0:bc:24:41:16:32:a7:93:20:1b:1a:42:bc:7b:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=B16045C38EA04C1CB28915B7FF229A0AE1A3A332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:98:50:b5:5a:bf:cd:9c:ed:0a:05:e4:d0:
                    1e:60:54:1b:11:9f:29:d5:d4:4d:d8:96:54:c9:84:
                    90:16:ac:7d:89:48:96:66:95:de:a3:c1:e9:82:63:
                    9c:e0:da:6d:59:e8:71:03:73:4c:3b:9b:a4:c1:bd:
                    c2:88:b5:85:8c:02:c8:36:bb:8b:17:bd:55:2d:ed:
                    75:08:5b:37:27:a7:e1:c2:0d:68:9e:3b:bf:f6:dd:
                    83:e8:62:c1:98:61:ad:a8:d9:39:3a:cb:80:b5:58:
                    18:ca:1d:24:e8:bf:88:04:83:10:5f:c3:47:fc:01:
                    9f:90:cf:6d:c4:63:10:c5:65:b6:fa:c3:e5:c6:33:
                    5a:72:20:95:cc:49:27:69:e2:91:b8:b4:01:06:ea:
                    79:95:17:75:b5:90:88:10:73:6f:01:41:37:09:0f:
                    5f:05:f1:a9:6d:b2:4a:49:28:b5:30:84:46:66:36:
                    ae:cb:73:89:aa:fa:18:d2:40:06:4c:51:f9:ad:46:
                    16:c5:1b:73:c0:ce:f2:4e:a0:69:be:a4:e8:0f:a7:
                    d0:90:a7:91:eb:fe:1c:a2:79:dd:61:82:f4:5f:7d:
                    a6:63:66:88:69:ef:ea:30:46:c4:bc:99:70:dd:32:
                    48:c9:0b:42:bd:69:9f:ee:57:a4:59:d4:aa:7b:bb:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:45:C3:8E:A0:4C:1C:B2:89:15:B7:FF:22:9A:0A:E1:A3:A3:32
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:05:9d:dc:da:b5:26:9e:95:91:16:0c:0d:14:91:6c:5b:50:
         cd:9a:88:79:72:5c:40:92:04:77:48:db:7e:f9:14:0a:1e:3e:
         4c:6e:65:35:7e:e2:6e:89:fe:a3:6a:8a:50:59:6e:09:96:bd:
         9d:7f:29:ae:50:b6:b8:20:d6:e2:bc:fb:93:44:29:fa:cb:e7:
         b3:18:ed:ac:a7:8c:f3:78:76:59:aa:12:76:ea:b3:62:5d:87:
         1b:7a:3a:a2:04:c1:50:6a:75:12:fa:d3:5d:c8:dc:b7:25:6f:
         65:27:39:b2:99:b1:f9:7c:31:4f:e2:1d:92:73:6d:16:c2:aa:
         6c:c2:b5:e8:f6:98:d2:b1:c7:45:94:d8:2a:32:ef:9b:51:23:
         6c:f5:70:f5:4e:c8:8a:0c:3f:e7:fe:aa:09:12:93:f9:74:2c:
         83:60:8a:50:2e:ea:db:1b:e9:80:4c:04:91:f4:c4:2a:26:7e:
         40:48:3d:16:ea:9b:b7:1c:cf:0d:f2:67:4d:fc:3f:9b:09:7e:
         30:8b:05:53:63:ba:be:5b:e3:65:89:72:0d:e8:cb:5a:d5:5b:
         d0:46:cc:73:4d:7d:03:15:41:bd:44:98:a7:79:5a:56:21:1e:
         3a:6f:78:60:05:4f:67:ce:19:7e:81:ae:db:f8:1f:00:41:54:
         0a:d3:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:54:00 2025 by rpki-client