Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa
File:                     3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          xK3uSwaZ6MbEZKo+ZV3fhpNpsscdktB1oCRMnKbkcVo=
Subject key identifier:   1A:36:89:76:F7:A8:EB:B5:5C:0C:D1:85:C7:A1:B0:01:58:58:E1:E1
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       0A0566CFD3EA5D7F030D29096E6E50DA4A5D2583
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 06 Mar 2025 18:53:29 +0000
ROA not before:           Thu 06 Mar 2025 18:48:29 +0000
ROA not after:            Thu 05 Mar 2026 18:53:29 +0000
asID:                     61672
IP address blocks:        131.108.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:05:66:cf:d3:ea:5d:7f:03:0d:29:09:6e:6e:50:da:4a:5d:25:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Mar  6 18:48:29 2025 GMT
            Not After : Mar  5 18:53:29 2026 GMT
        Subject: CN=1A368976F7A8EBB55C0CD185C7A1B0015858E1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:0c:89:40:5d:a9:bb:ea:e6:9c:48:31:48:
                    f8:a7:bf:c5:8d:43:04:22:99:ed:5e:07:fe:ab:9c:
                    35:8a:11:9a:bd:9a:d5:2f:4b:d6:f9:75:6f:dc:d4:
                    81:1a:49:50:89:70:64:f8:5b:a2:7c:32:18:14:75:
                    4a:d2:74:d8:8d:f0:30:ee:fe:5e:a4:a4:5e:cd:29:
                    62:28:01:f8:f2:ee:6c:86:10:7f:56:52:f0:de:a8:
                    dd:ea:4e:ca:50:4e:77:e7:1a:e5:04:a1:e9:2f:fb:
                    12:fd:5e:df:20:76:a0:f8:12:8d:97:70:b8:31:fe:
                    8a:b6:2b:32:42:2c:89:5e:23:de:46:9f:c8:b8:be:
                    2d:14:75:28:fd:10:1e:e4:d4:ab:df:e6:0a:1b:ef:
                    78:75:42:e1:21:c2:db:76:44:71:c7:90:2a:c0:a4:
                    df:be:ae:3f:e7:6f:15:5f:4b:6b:14:29:1d:1e:b2:
                    4e:7b:62:1b:24:83:32:4d:e7:49:8b:bb:53:e0:d5:
                    ca:ea:03:65:70:84:34:0c:8a:38:9a:b8:60:44:db:
                    78:1b:84:ec:86:c6:e8:13:4e:3b:9b:ca:6e:02:5b:
                    1a:77:e7:f8:7c:c2:8b:e8:89:7b:3c:01:c7:52:e5:
                    56:10:bf:91:af:ad:9f:c7:2e:88:49:ef:f7:6e:86:
                    5e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:89:76:F7:A8:EB:B5:5C:0C:D1:85:C7:A1:B0:01:58:58:E1:E1
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:03:ae:38:a1:07:e9:f1:b5:c0:9e:0f:c1:5a:65:46:b8:
         b5:ac:96:bd:1f:d2:3e:e0:c9:16:45:2e:f2:6c:d3:71:48:35:
         16:33:9d:13:23:b0:76:12:5a:84:3c:da:4b:b7:a2:50:67:cf:
         9e:08:34:1d:83:54:a6:ea:db:e5:f0:dd:64:5b:19:9f:86:87:
         44:75:04:8e:36:d0:b7:e4:96:4e:07:3b:13:67:a1:f4:fb:66:
         27:77:1a:38:d5:10:e3:77:d5:73:69:68:21:cc:fd:bd:3d:40:
         25:70:a6:d8:62:97:c5:a2:61:ce:ac:75:6a:45:f2:d2:b0:e0:
         fa:9c:af:6e:a7:7c:3e:f3:71:5d:25:7b:fe:14:30:e1:11:57:
         c2:e2:cb:b1:f4:cc:94:89:2e:14:4b:19:5e:ed:32:40:96:58:
         6c:c8:5c:2b:42:76:23:a6:b7:4a:9a:47:67:ee:ea:64:59:be:
         4c:4c:94:75:8d:98:25:e5:60:f6:cd:70:e1:b1:14:cf:8f:e4:
         e6:e4:93:27:a7:18:a2:f3:03:33:69:c1:ae:0e:66:e4:d0:1e:
         54:32:3a:35:db:fc:2e:64:f9:15:72:36:5f:a6:16:84:23:a5:
         05:a5:9b:22:b9:7a:a0:c0:41:c0:aa:b8:74:11:60:e4:56:54:
         29:68:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:26 2025 by rpki-client