Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/3133312e3139362e35392e302f32342d3234203d3e20323635383933.roa
File:                     3133312e3139362e35392e302f32342d3234203d3e20323635383933.roa (raw, json)
Hash identifier:          4OsQuNU3VlM659O4hhlSm2B7+oqLbPxj3baEHOFo7ZY=
Subject key identifier:   CD:44:87:82:2A:1D:7E:AC:AA:E7:40:0C:5D:6E:DF:A4:81:9A:65:A8
Certificate issuer:       /CN=0FA65CF75626D221655891D023EE7D1DF08C74BE
Certificate serial:       2C3E37A404A589FBD4A7D3E8E412BFD7A9C0C613
Authority key identifier: 0F:A6:5C:F7:56:26:D2:21:65:58:91:D0:23:EE:7D:1D:F0:8C:74:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/3133312e3139362e35392e302f32342d3234203d3e20323635383933.roa
Signing time:             Thu 21 Jul 2022 14:32:45 +0000
ROA not before:           Thu 21 Jul 2022 14:27:45 +0000
ROA not after:            Thu 20 Jul 2023 14:32:45 +0000
asID:                     265893
IP address blocks:        131.196.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3e:37:a4:04:a5:89:fb:d4:a7:d3:e8:e4:12:bf:d7:a9:c0:c6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA65CF75626D221655891D023EE7D1DF08C74BE
        Validity
            Not Before: Jul 21 14:27:45 2022 GMT
            Not After : Jul 20 14:32:45 2023 GMT
        Subject: CN=CD4487822A1D7EACAAE7400C5D6EDFA4819A65A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:c9:67:1a:aa:04:85:a0:3d:76:39:79:57:
                    39:8f:19:ae:bd:a4:3d:f1:2b:79:06:02:63:33:4b:
                    1c:4e:d5:39:62:fa:a4:33:a9:1a:df:d0:ae:e9:c3:
                    39:73:67:4a:5d:bf:a3:c5:af:ec:cd:37:b3:0b:be:
                    fc:23:bd:e3:c1:1f:ed:90:3f:54:3e:4e:97:2e:bb:
                    1a:4e:dc:3a:d6:20:fb:b7:60:93:88:f9:fa:8f:c7:
                    9f:04:bd:5f:2b:3e:ad:c3:03:c1:dd:ac:65:f8:41:
                    dc:a5:25:a2:be:7e:65:27:b3:ca:bf:8d:64:ba:4a:
                    8c:2b:d3:65:48:f5:0c:36:ee:3b:99:3f:77:64:61:
                    21:fb:54:ef:b2:0d:40:62:bc:44:94:04:d5:11:28:
                    4f:e4:14:4d:03:46:d7:52:da:78:2f:53:9c:fb:40:
                    de:ca:9f:df:3b:ad:15:00:7b:d5:8a:8f:52:f8:5c:
                    10:4c:29:02:3b:4b:a4:7e:8e:26:b0:6f:57:e8:e5:
                    97:ae:78:a1:ee:4d:1d:6f:b3:d5:c6:00:fd:5e:ce:
                    b0:35:76:49:98:27:f4:cb:32:d1:f7:09:fa:99:ec:
                    03:6e:41:9c:ea:62:b0:4e:9f:fb:24:9f:0b:69:08:
                    1d:16:41:27:aa:57:b3:c3:2f:54:36:82:be:21:2e:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:87:82:2A:1D:7E:AC:AA:E7:40:0C:5D:6E:DF:A4:81:9A:65:A8
            X509v3 Authority Key Identifier:
                keyid:0F:A6:5C:F7:56:26:D2:21:65:58:91:D0:23:EE:7D:1D:F0:8C:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FA65CF75626D221655891D023EE7D1DF08C74BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdaSao1CGNU5vATZhmchmSyH8kgSrBf3mwa4bR5GGk7Q/0/3133312e3139362e35392e302f32342d3234203d3e20323635383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:c8:2c:0e:2d:19:e8:fb:58:fd:14:f0:a5:9e:23:68:fa:
         2d:ff:40:97:3e:3a:16:92:3c:f1:d1:3a:d8:42:f3:e7:78:01:
         18:c1:4c:66:f1:08:a4:6a:73:33:17:d8:82:23:42:11:b1:30:
         a7:ff:be:3e:dd:4c:cb:bf:38:f6:0c:38:de:e9:fb:47:ae:f1:
         b6:dd:27:6a:46:86:bf:67:c7:ca:1f:e5:11:8a:39:b5:cb:d9:
         bd:77:cd:84:93:30:08:89:bd:59:a5:94:01:a7:77:c5:d3:78:
         74:ed:c9:ab:ee:17:76:bd:e6:d9:37:f0:ba:b2:fd:4f:53:38:
         48:91:a5:b0:8d:1d:fb:bb:d1:42:54:11:4b:be:68:a4:6d:a5:
         ec:3f:3b:a2:e4:51:2a:1f:7c:49:34:bf:7e:ac:8c:e3:d8:84:
         53:d8:dd:32:e0:4a:ad:da:9f:8f:f7:62:17:8a:be:31:dd:50:
         ff:2d:e7:c5:0d:92:52:a5:9f:52:9a:7c:f8:6b:ee:85:dc:59:
         34:8e:5a:dd:6f:fb:8b:b5:17:83:aa:46:ea:ae:f5:3f:ec:84:
         7f:8a:53:0c:f3:b0:ba:21:d0:e4:c5:bb:41:3c:c7:d8:a8:d4:
         e5:c5:76:5e:c1:56:19:29:02:c1:fd:0a:41:9e:40:ea:9c:ae:
         f8:6d:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:36 2025 by rpki-client