Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
File:                     3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (raw, json)
Hash identifier:          FN02iJiPMzQ9nu2WrDzBjPefwgDptVDO6KsyWmH5eys=
Subject key identifier:   31:70:EF:30:70:48:2E:A6:F5:2B:9E:9F:E8:65:6B:DB:0A:14:46:3D
Certificate issuer:       /CN=E106C67A05B7CFF91604592ABD0C3538A343ABAB
Certificate serial:       7CB489D5614A0DD742B3950E3000F940856F46ED
Authority key identifier: E1:06:C6:7A:05:B7:CF:F9:16:04:59:2A:BD:0C:35:38:A3:43:AB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106C67A05B7CFF91604592ABD0C3538A343ABAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
Signing time:             Fri 11 Jul 2025 02:17:08 +0000
ROA not before:           Fri 11 Jul 2025 02:12:08 +0000
ROA not after:            Fri 10 Jul 2026 02:17:08 +0000
asID:                     61604
IP address blocks:        201.131.98.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b4:89:d5:61:4a:0d:d7:42:b3:95:0e:30:00:f9:40:85:6f:46:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E106C67A05B7CFF91604592ABD0C3538A343ABAB
        Validity
            Not Before: Jul 11 02:12:08 2025 GMT
            Not After : Jul 10 02:17:08 2026 GMT
        Subject: CN=3170EF3070482EA6F52B9E9FE8656BDB0A14463D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:e0:99:af:02:ac:7f:ff:a6:9d:f4:3f:9f:
                    77:83:42:7f:d1:c4:bd:c2:e9:bb:8a:a4:c5:84:6d:
                    21:b2:18:42:2a:3f:53:19:f7:66:09:32:ee:65:6b:
                    fe:f1:6b:b2:e0:25:0c:04:88:de:8d:3d:2d:51:16:
                    9b:cd:49:64:de:f9:fe:b3:b1:d1:47:dc:d3:67:2b:
                    4c:f3:23:04:cc:37:39:d2:77:5c:0f:2f:c8:b3:ae:
                    b9:cf:9d:a5:0a:90:26:0e:bc:53:24:5d:61:80:ae:
                    38:5c:ed:84:80:09:4e:ed:c0:41:d7:e3:9a:25:9c:
                    22:07:b6:e6:fe:29:1b:b3:21:c8:de:8c:39:87:23:
                    79:44:9b:bd:f9:4e:ea:f0:8f:d5:55:98:3d:c2:4a:
                    e7:32:18:32:e6:06:59:e6:7d:b8:3b:c0:32:fb:fc:
                    eb:20:2d:d6:b9:0f:6a:d1:a1:44:c3:ca:13:72:6b:
                    0a:c7:02:96:ab:9a:e5:58:bf:99:f2:22:44:47:ed:
                    8f:8d:df:70:6e:42:84:48:06:53:b3:0e:97:71:59:
                    fe:7d:1d:3f:ed:76:39:48:e4:dc:de:82:8e:32:ce:
                    eb:ff:e7:cd:78:e1:53:0e:bc:70:15:32:9c:9d:15:
                    2b:3b:31:8c:1e:e3:d6:8f:cd:53:a5:ac:92:4f:ab:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:EF:30:70:48:2E:A6:F5:2B:9E:9F:E8:65:6B:DB:0A:14:46:3D
            X509v3 Authority Key Identifier:
                keyid:E1:06:C6:7A:05:B7:CF:F9:16:04:59:2A:BD:0C:35:38:A3:43:AB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/E106C67A05B7CFF91604592ABD0C3538A343ABAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E106C67A05B7CFF91604592ABD0C3538A343ABAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:e2:83:ec:3b:a0:68:70:b6:aa:71:5a:ff:de:17:84:fa:
         03:04:45:8f:73:2e:5a:78:e4:c8:6b:e0:55:79:49:31:b6:17:
         71:5e:d2:e8:68:69:4a:94:6f:3c:23:6f:cc:45:02:5c:54:68:
         2c:64:f9:f4:1a:e4:5f:14:3f:9a:b1:34:18:3d:3e:58:c6:d9:
         ab:ea:3f:63:be:e1:db:64:ad:d2:7a:37:7b:ba:b0:b4:02:0b:
         7d:c7:02:8c:41:dd:6a:fc:7c:c3:29:4b:25:16:39:bc:a7:49:
         a6:6c:c5:a7:f1:f5:2c:ac:0e:b4:ab:2d:6e:96:17:5e:32:73:
         29:a6:68:0f:4c:bb:4d:ea:09:29:dd:43:e4:e7:4c:7a:c6:75:
         f8:17:fa:8e:97:cd:b7:dc:0f:46:53:a0:40:86:50:9a:3b:41:
         d7:99:ca:f0:e6:b7:49:5e:92:54:94:0e:eb:0a:b3:a0:7e:f1:
         91:77:89:dc:c2:3c:48:3b:05:eb:58:9b:50:4c:32:1e:4e:81:
         55:f5:7d:ff:61:ba:be:00:27:39:15:6f:c6:d4:1b:bd:53:57:
         ad:63:1b:55:45:13:59:7b:01:b2:2a:5e:ff:bb:6c:88:32:61:
         9e:22:d6:31:87:47:71:cb:6a:f2:31:7b:70:6d:8e:18:90:3c:
         84:c8:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:39 2025 by rpki-client