Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235332e302f32342d3234203d3e203631373531.roa
File:                     3133312e37322e3235332e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier:          d5ZJYuLChN81YfxVBROlq2DpmnT8Sw5QvtivEs2GGBQ=
Subject key identifier:   44:57:0D:76:5A:40:CF:89:E2:3D:82:4D:D5:59:17:CF:10:93:6D:49
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       1B42E8EC1EAD329F3A2FC39E665D06D3FA243A01
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235332e302f32342d3234203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:38:58 +0000
ROA not before:           Fri 15 Sep 2023 20:33:58 +0000
ROA not after:            Fri 13 Sep 2024 20:38:58 +0000
asID:                     61751
IP address blocks:        131.72.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:42:e8:ec:1e:ad:32:9f:3a:2f:c3:9e:66:5d:06:d3:fa:24:3a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:33:58 2023 GMT
            Not After : Sep 13 20:38:58 2024 GMT
        Subject: CN=44570D765A40CF89E23D824DD55917CF10936D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:29:66:d8:ed:60:bb:f2:1a:cf:38:a3:bd:
                    4b:84:89:3a:0b:e8:c7:97:61:51:32:e8:c7:f5:3a:
                    77:11:7d:c9:00:0f:8b:95:21:c5:9b:9a:51:3c:6e:
                    45:ed:7b:d3:5b:12:2d:85:a0:74:2f:b1:63:0f:95:
                    3a:9f:98:5a:c5:b9:64:f0:77:e4:2a:38:db:38:d1:
                    b3:73:fb:5b:21:5a:f6:4f:98:72:40:af:47:22:50:
                    c5:fa:3c:13:b5:2a:7e:28:61:e3:3f:52:87:9f:72:
                    dc:3f:53:b5:17:d2:ee:e9:2e:ee:ed:71:08:d8:ac:
                    51:b8:b3:8b:a0:54:f2:72:fa:d4:20:69:d1:57:8b:
                    5d:b1:dd:52:af:aa:30:1e:0b:f4:ff:7b:01:de:b0:
                    a2:38:71:a7:6e:6e:7f:c8:e4:a0:66:0d:bc:77:25:
                    f8:0a:ce:fc:06:f4:c9:19:5e:86:05:78:43:8e:12:
                    50:fb:57:5d:ea:dd:a4:f3:4b:37:57:38:47:e9:5d:
                    f4:4c:6d:bb:16:84:70:c8:be:e4:71:ff:5b:b6:d4:
                    73:72:83:bb:52:86:47:f1:bc:c9:87:4e:2c:17:fc:
                    a2:9d:00:cb:0b:17:e8:77:55:0f:26:9d:06:68:77:
                    bf:16:ea:1d:f9:a0:ac:f6:ad:91:e4:0e:8a:46:b9:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:0D:76:5A:40:CF:89:E2:3D:82:4D:D5:59:17:CF:10:93:6D:49
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235332e302f32342d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:a8:0f:01:ec:1a:55:8f:6f:de:ce:35:ce:e1:7c:82:42:
         ed:55:21:b9:43:fe:08:30:7d:59:14:98:1f:88:39:d2:84:67:
         69:36:d8:48:1c:b2:80:dd:74:06:31:28:b9:b5:eb:6a:57:3f:
         72:7f:e5:61:65:13:10:b9:ff:0a:6a:77:7a:c9:f7:9e:7c:46:
         da:fc:40:d6:7a:f7:a9:4f:f6:0a:62:46:25:f5:07:44:05:6a:
         96:3b:29:73:b2:2a:65:3d:2f:ff:0a:dc:23:87:5a:3b:0a:92:
         aa:ff:21:7b:63:ba:5c:6f:78:3a:8a:45:b1:2b:b9:b5:34:0d:
         5e:19:55:28:88:70:73:7d:18:f6:86:5f:c5:e4:8d:6d:e0:6a:
         ee:58:a9:2a:3f:09:6d:22:5d:2b:0a:38:d2:30:35:0b:e9:a5:
         a8:6c:b4:e5:f1:af:b6:90:aa:f9:df:1e:76:28:09:bb:f5:1d:
         39:ae:58:c7:86:22:ce:e9:b6:ce:9d:73:22:20:1e:b4:7a:6c:
         01:4a:c0:49:e0:9e:47:9d:b5:74:21:e4:b4:92:4c:57:80:26:
         b1:be:27:67:4c:55:03:14:5a:c6:3b:9e:d8:1a:d3:dd:43:51:
         ff:e0:e2:af:d3:84:ab:3f:fb:c4:a4:34:bb:a2:f3:a4:bc:ef:
         3a:5f:e5:08
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG0Lo7B6tMp86L8OeZl0G0/okOgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IyRDg3MEQ0RDkwODgzNkUzNzhFRDdCMUYyQ0M2RTJG
RUZFNTAzMjAeFw0yMzA5MTUyMDMzNThaFw0yNDA5MTMyMDM4NThaMDMxMTAvBgNV
BAMTKDQ0NTcwRDc2NUE0MENGODlFMjNEODI0REQ1NTkxN0NGMTA5MzZENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKilm2O1gu/IazzijvUuEiToL
6MeXYVEy6Mf1OncRfckAD4uVIcWbmlE8bkXte9NbEi2FoHQvsWMPlTqfmFrFuWTw
d+QqONs40bNz+1shWvZPmHJAr0ciUMX6PBO1Kn4oYeM/Uoefctw/U7UX0u7pLu7t
cQjYrFG4s4ugVPJy+tQgadFXi12x3VKvqjAeC/T/ewHesKI4cadubn/I5KBmDbx3
JfgKzvwG9MkZXoYFeEOOElD7V13q3aTzSzdXOEfpXfRMbbsWhHDIvuRx/1u21HNy
g7tShkfxvMmHTiwX/KKdAMsLF+h3VQ8mnQZod78W6h35oKz2rZHkDopGuTBxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURFcNdlpAz4niPYJN1VkXzxCTbUkwHwYDVR0j
BBgwFoAUyy2HDU2QiDbjeO17HyzG4v7+UDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa
UFMvMC9DQjJEODcwRDREOTA4ODM2RTM3OEVEN0IxRjJDQzZFMkZFRkU1MDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NCMkQ4NzBENEQ5MDg4MzZF
Mzc4RUQ3QjFGMkNDNkUyRkVGRTUwMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAv
MzEzMzMxMmUzNzMyMmUzMjM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg0j9MA0GCSqGSIb3DQEBCwUAA4IBAQBdFKgPAewa
VY9v3s41zuF8gkLtVSG5Q/4IMH1ZFJgfiDnShGdpNthIHLKA3XQGMSi5tetqVz9y
f+VhZRMQuf8Kand6yfeefEba/EDWevepT/YKYkYl9QdEBWqWOylzsiplPS//Ctwj
h1o7CpKq/yF7Y7pcb3g6ikWxK7m1NA1eGVUoiHBzfRj2hl/F5I1t4GruWKkqPwlt
Il0rCjjSMDUL6aWobLTl8a+2kKr53x52KAm79R05rljHhiLO6bbOnXMiIB60emwB
SsBJ4J5HnbV0IeS0kkxXgCaxvidnTFUDFFrGO57YGtPdQ1H/4OKv04SrP/vEpDS7
ovOkvO86X+UI
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:42 2025 by rpki-client