Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa
File:                     3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa (raw, json)
Hash identifier:          7ASs+zEs0cUqRb3tOwtiYfZBYy5OygFWH0eiZ1WbLpU=
Subject key identifier:   BA:8A:F0:E0:6B:E6:6A:4D:ED:16:0C:55:60:8B:4A:8C:2F:80:45:BF
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       5A793B377B4BAAFBF28CF1708C0CBDAE4A21E9B1
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa
Signing time:             Wed 17 May 2023 14:31:53 +0000
ROA not before:           Wed 17 May 2023 14:26:53 +0000
ROA not after:            Wed 15 May 2024 14:31:53 +0000
asID:                     264434
IP address blocks:        131.221.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:79:3b:37:7b:4b:aa:fb:f2:8c:f1:70:8c:0c:bd:ae:4a:21:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 17 14:26:53 2023 GMT
            Not After : May 15 14:31:53 2024 GMT
        Subject: CN=BA8AF0E06BE66A4DED160C55608B4A8C2F8045BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:47:e3:fc:9f:b8:ef:ad:0f:34:3d:bd:6e:
                    88:56:af:26:98:bf:9b:9e:ac:f9:33:09:98:9f:8e:
                    a6:af:ee:c7:1e:3d:04:57:5a:20:f7:64:d0:f9:ab:
                    de:cf:47:e8:08:bd:3e:40:54:81:72:79:2f:66:56:
                    09:af:e5:fc:74:e6:e3:e6:dc:b3:cd:08:97:dd:52:
                    ea:e6:63:cf:1a:66:a8:b8:50:f5:fc:4f:09:ce:0c:
                    11:ff:64:9a:23:3b:b0:bf:d9:55:ee:ec:77:5b:5d:
                    8b:d4:fc:75:1d:f8:db:1d:a1:69:95:2f:19:30:1b:
                    17:ea:4f:08:6b:8f:a0:90:bb:1d:50:62:ab:b6:93:
                    c5:6d:2b:85:1e:39:25:b8:6d:21:41:be:9b:dc:d3:
                    1d:df:71:6e:56:d1:c6:47:16:50:75:51:62:2b:8e:
                    c5:90:95:51:83:b6:92:7f:63:fb:67:de:04:21:dc:
                    54:0e:74:95:fa:8f:fa:b2:3d:cd:81:1d:39:d6:fa:
                    76:37:32:24:48:9c:53:25:df:a3:25:fd:3d:7e:12:
                    85:13:28:4f:01:43:f2:fa:57:ff:3c:fe:61:b3:ca:
                    e9:9d:f8:38:5e:fc:55:14:14:9f:c6:40:f2:8e:b0:
                    1d:a6:5b:d6:67:87:f9:3a:cb:b0:f3:10:0a:de:78:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:F0:E0:6B:E6:6A:4D:ED:16:0C:55:60:8B:4A:8C:2F:80:45:BF
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:b5:7f:e9:29:30:b3:f2:d9:92:cb:a1:41:fa:f1:20:5f:
         0c:ac:bc:9d:ce:d1:47:24:5d:b9:19:5c:e6:c6:cc:b7:6d:df:
         0a:2d:07:37:cb:e0:60:0d:3b:56:cb:a2:57:3c:85:22:cc:76:
         25:fa:05:12:3e:ff:21:61:75:00:c3:7c:d5:ca:9f:86:07:62:
         51:68:7a:fd:e3:96:25:49:39:3b:ad:f1:e4:be:08:f2:8f:40:
         8e:62:0e:62:be:83:de:c2:35:f6:6c:4a:72:4a:36:49:50:be:
         0f:4d:03:d9:72:16:f0:4f:6b:86:b9:b3:9b:1d:29:6e:73:30:
         51:11:38:ad:7c:ac:f5:20:b8:48:88:92:73:28:1c:26:cd:b1:
         03:83:29:1a:e5:a1:2f:93:d3:05:43:74:64:19:2d:de:78:ed:
         a2:87:05:1f:3f:21:69:54:85:25:76:dc:30:46:79:b6:93:1c:
         dc:57:91:d0:25:ef:ba:7c:94:bd:cc:d7:da:0f:fc:9d:c7:23:
         cb:dd:d6:21:2a:f7:c1:59:71:10:ea:9e:4f:59:2b:40:9c:c6:
         a3:0e:bc:eb:84:eb:04:ee:be:26:6c:d1:88:b7:3f:7c:d1:70:
         de:61:db:71:ab:ac:fd:83:cf:54:f3:d3:2a:3d:99:b5:33:b4:
         08:ef:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:50 2025 by rpki-client