Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3234203d3e20323634333835.roa
File:                     3133312e3130382e3134382e302f32322d3234203d3e20323634333835.roa (raw, json)
Hash identifier:          b4/hEhsFxQFd78JmLyYlCGLSDPGuwUw3GG/Qa3aSQ68=
Subject key identifier:   1F:7D:0C:23:A8:4E:6F:B8:25:FD:F2:18:78:71:C9:EC:73:32:C8:45
Certificate issuer:       /CN=4F8D0C704227A42DB2A4039E324000F4D79DFEF8
Certificate serial:       77B0C5F4ED57515C5C718893431794B069C69DF2
Authority key identifier: 4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3234203d3e20323634333835.roa
Signing time:             Wed 18 Oct 2023 17:42:49 +0000
ROA not before:           Wed 18 Oct 2023 17:37:49 +0000
ROA not after:            Wed 16 Oct 2024 17:42:49 +0000
asID:                     264385
IP address blocks:        131.108.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:c5:f4:ed:57:51:5c:5c:71:88:93:43:17:94:b0:69:c6:9d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8D0C704227A42DB2A4039E324000F4D79DFEF8
        Validity
            Not Before: Oct 18 17:37:49 2023 GMT
            Not After : Oct 16 17:42:49 2024 GMT
        Subject: CN=1F7D0C23A84E6FB825FDF2187871C9EC7332C845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:91:05:0a:24:6e:e2:c3:8e:dc:60:83:25:
                    d8:5f:df:c8:9c:9c:60:4b:e8:16:23:2f:d2:27:53:
                    b7:b8:ad:0c:20:d9:18:13:3c:8a:d8:a3:78:3f:2c:
                    f9:5a:30:cf:7c:cc:d1:c3:32:95:42:f8:c3:eb:fb:
                    0d:3d:ec:4a:0a:f8:9e:55:b9:4c:dd:2a:a2:37:49:
                    39:d0:6a:4f:f2:fa:f4:23:ac:af:b2:91:e4:80:ee:
                    34:6b:56:89:0a:81:a9:b9:5d:5f:7d:e5:c2:17:54:
                    39:22:f9:fe:7d:cc:64:12:b9:69:6d:a3:5f:68:87:
                    96:54:24:40:35:c5:f1:ce:d7:80:15:15:26:42:74:
                    04:4c:13:18:0b:20:06:55:8a:02:e4:41:66:7b:a8:
                    f5:11:f1:68:2b:e0:f3:56:4d:0b:88:b8:57:5d:83:
                    7b:d6:be:ea:55:c1:35:a8:20:15:58:98:2b:dd:79:
                    f3:f1:0b:da:3e:f8:a7:62:cf:e9:0c:10:39:8f:db:
                    7f:3b:14:3e:e8:02:9a:bf:ad:60:b1:c2:9a:af:65:
                    e6:57:dc:36:37:99:13:d7:b9:5b:e6:90:9f:b7:13:
                    36:a6:ae:37:90:cd:81:05:5d:fa:66:ac:4e:14:ac:
                    04:36:80:54:7a:79:c0:16:42:f7:7a:3d:e2:a0:99:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:0C:23:A8:4E:6F:B8:25:FD:F2:18:78:71:C9:EC:73:32:C8:45
            X509v3 Authority Key Identifier:
                keyid:4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32322d3234203d3e20323634333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:1d:a8:a0:84:44:10:4d:3a:29:08:b6:fd:f8:e3:b9:df:
         c4:12:01:1e:8d:85:6a:3b:84:cc:9f:7d:8d:0e:a1:d1:aa:7f:
         b5:eb:87:c4:4b:cd:20:2d:67:8b:9a:d9:52:dd:02:c8:c9:b5:
         4f:7f:16:10:c7:19:6b:4a:90:d3:14:4e:64:04:ae:c8:61:aa:
         2c:d0:f9:c6:a9:18:b9:05:0b:20:1c:31:65:fa:1e:7d:cb:d4:
         b9:1b:b2:95:80:ab:93:2c:54:a9:48:97:f2:e7:c0:8a:ab:ce:
         1d:6f:dd:b6:df:0b:b5:69:3b:7c:54:2b:00:d8:88:68:d6:b0:
         3b:75:16:38:cb:e0:09:52:13:e8:54:6c:e4:5b:26:9d:d8:63:
         eb:2d:c7:0c:8b:ba:b4:86:9d:25:1c:f1:e4:19:0d:34:3b:80:
         49:f4:a7:32:cc:a5:f2:8d:fd:45:f7:a7:7e:06:78:e7:b1:9b:
         1f:41:e5:61:73:a2:36:a4:0a:04:27:de:f7:48:1d:65:b6:6e:
         f7:16:f6:6c:45:04:31:91:3f:03:a4:d9:23:53:fd:d6:1a:1a:
         11:24:f0:c4:78:1b:19:de:0c:e5:01:b2:0a:6a:c5:a0:5d:cb:
         32:4a:9f:0b:9b:c1:f8:0d:77:d7:13:ad:f7:b1:47:99:39:83:
         6d:65:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:14:18 2025 by rpki-client