Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
File:                     3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          WPNsvT3I0BEcMkKmdK082qZnRdl/rCsphoUZ/YstxFw=
Subject key identifier:   BF:A0:FC:C7:19:44:1C:7D:1B:CF:BD:D4:73:51:BD:57:63:AF:07:A9
Certificate issuer:       /CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
Certificate serial:       39A07F4DB3AB4D280CE1C088CDA7AC5DED1C3336
Authority key identifier: 50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
Signing time:             Thu 05 Oct 2023 01:37:19 +0000
ROA not before:           Thu 05 Oct 2023 01:32:19 +0000
ROA not after:            Thu 03 Oct 2024 01:37:19 +0000
asID:                     264367
IP address blocks:        131.108.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a0:7f:4d:b3:ab:4d:28:0c:e1:c0:88:cd:a7:ac:5d:ed:1c:33:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Validity
            Not Before: Oct  5 01:32:19 2023 GMT
            Not After : Oct  3 01:37:19 2024 GMT
        Subject: CN=BFA0FCC719441C7D1BCFBDD47351BD5763AF07A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:c0:c7:f1:a7:3b:74:16:8d:b6:62:16:ec:
                    ea:b0:df:50:75:ed:bb:f9:de:b2:86:60:f3:3e:f5:
                    db:a0:58:96:9e:40:ca:c2:94:21:9b:1b:9d:83:05:
                    6d:e9:e6:af:69:53:92:52:0e:cf:5e:6b:ba:b9:9c:
                    a1:2d:a8:dc:8b:f4:dc:15:fb:19:e1:8a:df:6a:1a:
                    4b:99:08:23:c5:6e:e3:57:f1:2a:ee:d4:6f:be:ba:
                    db:c7:1e:69:4b:4b:d2:3f:ef:0c:e7:7b:b9:16:31:
                    bc:e1:dc:c9:8f:39:5b:9a:12:1c:ec:df:50:7a:97:
                    0d:0b:55:d4:ad:4d:c0:49:ed:1b:47:42:5e:99:f5:
                    84:97:b0:02:63:35:01:b5:1e:57:f7:67:32:8e:d8:
                    cc:ca:07:a2:8a:9d:a9:0b:d5:cf:e5:e4:24:5c:81:
                    b7:84:fe:5e:ab:fb:42:0a:c1:4b:6e:18:81:3d:63:
                    fa:7b:98:a1:f6:92:ef:43:42:50:5e:00:b8:1d:c0:
                    87:3b:de:f7:c4:32:ad:95:4c:21:5a:04:bc:17:4c:
                    50:36:ba:60:30:49:40:cc:bc:bd:a1:9a:7d:a0:3f:
                    2c:06:2a:2a:dc:7d:1d:86:9e:e0:ef:97:7f:05:17:
                    63:c1:c5:c2:83:57:3f:9e:3a:e7:cd:a3:fc:62:ee:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:FC:C7:19:44:1C:7D:1B:CF:BD:D4:73:51:BD:57:63:AF:07:A9
            X509v3 Authority Key Identifier:
                keyid:50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:56:f8:4c:42:97:c8:ee:7d:a1:72:e9:02:b8:10:de:5c:5d:
         37:af:8b:f4:57:38:94:34:5d:3d:06:a7:16:46:34:4d:56:1d:
         72:34:a5:0d:8d:60:5e:dc:f9:86:e2:20:e5:1e:95:9e:69:c8:
         ff:2c:9b:2e:1d:7a:38:1b:7c:7d:3b:9d:a1:87:a5:0a:0a:01:
         8c:48:6e:93:ce:a6:f8:72:5f:95:aa:3f:06:22:38:63:b2:81:
         52:c8:14:e8:c7:3f:1b:52:02:c5:0e:7d:52:50:67:ec:32:0c:
         99:52:07:97:54:63:9b:e2:49:36:14:f9:b9:50:18:3e:cc:b8:
         87:ce:84:c4:9e:ed:34:38:c2:eb:d4:72:f3:08:07:28:08:13:
         50:d9:30:70:b8:65:71:c8:27:e8:ae:4d:57:83:0f:c6:ac:c1:
         63:8f:98:cc:80:2a:92:f1:39:c3:ef:85:9a:02:69:e3:d0:cd:
         a6:8c:df:89:9c:f9:7c:47:97:12:9b:52:e2:78:c7:aa:18:72:
         f3:dc:63:0a:e4:11:db:0e:bf:87:c3:02:96:51:da:aa:18:d6:
         60:2e:0c:39:1e:f7:55:ed:9b:54:39:4d:90:89:a4:aa:ee:95:
         c7:4d:97:8a:31:64:62:c5:56:f8:8e:40:d6:c5:5d:a7:2f:cf:
         19:af:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:26 2025 by rpki-client