Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39322e302f32332d3233203d3e20323635393137.roa
File:                     3133312e3139362e39322e302f32332d3233203d3e20323635393137.roa (raw, json)
Hash identifier:          JxdCmmG9AOITkNYuzxJ8ybLxFK7/GrcaG33rv5j/S0g=
Subject key identifier:   7A:08:EB:19:76:B4:B8:99:05:22:50:86:FB:C7:43:B1:77:A6:37:AE
Certificate issuer:       /CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
Certificate serial:       612E2A7B80ED4CAF77752C0BAE1669B79000E261
Authority key identifier: DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39322e302f32332d3233203d3e20323635393137.roa
Signing time:             Tue 02 Jan 2024 14:00:00 +0000
ROA not before:           Tue 02 Jan 2024 13:55:00 +0000
ROA not after:            Tue 31 Dec 2024 14:00:00 +0000
asID:                     265917
IP address blocks:        131.196.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2e:2a:7b:80:ed:4c:af:77:75:2c:0b:ae:16:69:b7:90:00:e2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
        Validity
            Not Before: Jan  2 13:55:00 2024 GMT
            Not After : Dec 31 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:31:59:a8:30:cd:f4:c2:bf:90:82:97:6d:
                    29:ee:69:3f:e4:88:ea:a8:fc:a3:f9:84:f9:6b:c3:
                    54:d7:59:a7:59:c9:86:cd:56:16:24:53:e6:97:f8:
                    e8:e9:d2:8f:fd:3b:7f:79:c1:17:90:79:82:26:c7:
                    11:52:8c:75:f3:fa:1d:6c:b5:81:ad:92:c6:6b:df:
                    41:6a:c8:47:cb:78:b1:26:05:9c:ea:4f:2c:0e:19:
                    d2:1a:eb:67:72:db:71:23:30:9a:6e:cc:bf:4b:75:
                    4d:6c:19:6b:52:de:58:b3:86:42:55:69:47:24:7d:
                    91:28:43:e2:4b:25:da:fc:e4:44:e5:4e:eb:15:ef:
                    2a:a7:a5:ee:e2:76:30:80:2c:a6:cd:67:05:79:3c:
                    c7:11:43:0d:d1:25:88:ce:99:ad:4e:63:4b:55:68:
                    74:f8:c7:60:f4:47:a6:ff:32:ac:c2:74:f3:9a:0b:
                    28:8b:31:1f:06:22:c4:64:24:20:7b:c5:5e:62:d8:
                    e2:df:97:65:80:0d:c9:34:cf:e4:5b:db:7d:2d:1e:
                    b1:3c:29:13:ed:f7:21:5c:ed:6b:c8:2c:b3:2d:11:
                    90:24:91:eb:31:22:c8:cf:25:fb:dc:93:f4:7c:2b:
                    8a:08:4a:7d:dc:75:3d:80:f5:41:bd:dc:f2:e5:a5:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:EB:19:76:B4:B8:99:05:22:50:86:FB:C7:43:B1:77:A6:37:AE
            X509v3 Authority Key Identifier:
                keyid:DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/3133312e3139362e39322e302f32332d3233203d3e20323635393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7d:b2:6c:49:30:eb:13:9d:c9:9f:8d:14:fd:20:af:23:a2:
         87:15:8e:ef:a5:d1:da:58:a9:5a:99:04:e8:31:c4:de:89:60:
         09:fe:14:82:70:7a:9f:a3:d1:97:8c:ba:05:90:af:ec:c0:12:
         4d:55:5c:54:fc:92:29:67:80:2e:76:9f:e6:2c:8c:f9:66:10:
         0e:23:c3:56:49:d7:1d:67:ec:11:09:c5:90:23:4b:99:d0:84:
         f5:43:ae:22:55:9a:76:96:18:cd:19:8c:86:d0:89:98:3b:d0:
         bc:db:a4:e1:f9:30:a5:68:3c:9b:c0:9c:f5:b8:27:4c:73:0a:
         84:f6:8f:ef:d0:66:74:82:56:a2:23:11:3b:b4:96:07:5b:38:
         c6:76:58:dd:45:65:da:0a:c7:e9:36:5d:e5:9a:0a:eb:98:8d:
         d0:b5:99:f0:3a:77:ad:82:0a:9d:23:49:70:38:dc:62:3e:c4:
         b8:12:1a:6a:8c:28:db:9a:f4:55:03:39:a6:2e:1c:57:ea:fb:
         ed:1c:03:9c:3c:02:67:26:31:78:87:b9:e5:a3:22:ca:5d:d5:
         79:09:4e:cd:b0:c1:d2:14:a4:0c:f9:8f:36:b5:e4:81:69:c4:
         cd:8e:78:a7:23:02:ed:20:26:50:79:97:96:35:50:83:37:ba:
         78:61:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:25 2025 by rpki-client