Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa
File:                     3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa (raw, json)
Hash identifier:          pINQ4zJpJDaysxusi8vz/9GRzqoQDop4PXq13ps6xUI=
Subject key identifier:   1C:BF:FC:DC:60:52:C2:4A:D2:EF:F5:9A:CB:7E:A5:AE:9E:B6:CE:29
Certificate issuer:       /CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
Certificate serial:       34F9582E2B548DF1219CFFBE1F84A0693450A6D6
Authority key identifier: FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa
Signing time:             Tue 05 Mar 2024 16:51:51 +0000
ROA not before:           Tue 05 Mar 2024 16:46:51 +0000
ROA not after:            Tue 04 Mar 2025 16:51:51 +0000
asID:                     264392
IP address blocks:        131.161.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f9:58:2e:2b:54:8d:f1:21:9c:ff:be:1f:84:a0:69:34:50:a6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Validity
            Not Before: Mar  5 16:46:51 2024 GMT
            Not After : Mar  4 16:51:51 2025 GMT
        Subject: CN=1CBFFCDC6052C24AD2EFF59ACB7EA5AE9EB6CE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:18:09:01:0d:87:1e:3f:ae:19:d5:58:e8:
                    ce:4d:29:9f:a9:05:99:01:5a:19:3b:43:f8:5d:38:
                    ae:ed:30:d6:37:d9:c9:91:e4:b3:da:20:07:d1:ce:
                    86:8c:d5:43:5c:a4:84:e2:c6:29:d1:59:d3:a7:a2:
                    e2:da:3a:f7:a8:1e:22:0d:05:8b:af:50:c0:38:48:
                    e7:92:d6:f9:72:6e:c0:f8:b2:8a:21:4a:49:83:a4:
                    d8:90:37:ce:63:13:3a:33:3d:2f:29:11:5d:19:2d:
                    ec:aa:20:ab:e0:29:f3:b5:7f:20:8a:c5:07:3a:af:
                    15:fe:f6:38:b7:8e:ff:30:ab:ff:f2:21:b8:13:d9:
                    eb:62:08:a0:32:f3:8c:f7:ce:11:99:99:5f:ec:52:
                    ad:7a:b0:cc:69:09:4a:1c:9c:7b:1f:79:b4:0d:25:
                    00:57:c3:d7:fc:41:cd:f5:d6:03:79:87:d2:3f:89:
                    30:0d:85:9a:59:d1:9e:13:f8:05:4f:93:ba:f2:34:
                    d1:dd:e8:2e:31:ef:86:a5:4b:ca:75:15:d9:77:ec:
                    3f:31:ac:43:46:d7:f6:32:33:eb:1a:3a:e7:40:4d:
                    ef:97:ed:0e:19:c2:04:3e:f6:1d:a5:53:55:c6:b9:
                    b6:40:d8:5b:6c:8d:3b:90:13:69:5d:94:46:8d:c6:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BF:FC:DC:60:52:C2:4A:D2:EF:F5:9A:CB:7E:A5:AE:9E:B6:CE:29
            X509v3 Authority Key Identifier:
                keyid:FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3139302e302f32332d3233203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:63:5b:43:61:b3:c1:1c:15:2d:c4:c2:3b:ec:89:1f:d0:
         ed:93:e2:b3:19:90:f7:12:53:30:62:c2:6e:50:b6:19:c7:24:
         66:99:0b:5d:54:a2:9c:ed:93:81:e2:b8:f1:d2:66:42:ee:b7:
         8f:24:06:08:a3:42:1c:6e:67:31:a3:df:49:69:e9:4c:8d:a1:
         90:f0:29:db:00:49:d0:91:48:84:01:e8:3f:95:d1:dd:f8:23:
         c6:2c:17:49:2f:79:dd:ab:18:71:db:3a:79:c7:ce:8b:cb:56:
         f2:44:cd:10:ab:f0:83:ff:ea:2d:15:94:de:3d:38:cd:b2:d1:
         d8:70:28:0e:dd:68:e5:b8:7b:07:39:69:c9:29:d0:b5:e2:d0:
         3b:4e:77:fa:a4:6e:89:c0:32:be:b8:fe:2a:15:10:11:42:62:
         cd:15:3b:7a:22:7d:8e:31:69:12:2b:cd:b4:df:5c:90:cd:23:
         68:6b:76:57:16:84:42:8f:0f:30:33:89:87:12:e5:d1:c7:c9:
         8e:3b:06:81:34:9b:55:2d:d0:a7:99:91:50:ac:78:6f:45:ed:
         15:f5:c2:64:9c:d9:15:c9:4a:3d:cb:da:1a:56:2c:64:dc:47:
         04:01:d3:20:94:e4:60:d4:a6:3a:70:44:bf:15:be:ce:3f:a9:
         61:24:e4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:52:41 2025 by rpki-client