Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3232203d3e203631373236.roa
File:                     3133312e37322e39362e302f32322d3232203d3e203631373236.roa (raw, json)
Hash identifier:          m9l+GLyoiXierHl0jVH5AtCdqgmsBGp5nCOj5wWSUn8=
Subject key identifier:   51:15:21:9B:CE:C1:E5:97:80:49:8E:A2:E6:14:1D:F6:CE:B9:BC:21
Certificate issuer:       /CN=FFE2AFBD0307E49D5C4A495DE2CF5022BA00A39A
Certificate serial:       2EDEA359DD65BFC9234F0FA57070DE668BE14F31
Authority key identifier: FF:E2:AF:BD:03:07:E4:9D:5C:4A:49:5D:E2:CF:50:22:BA:00:A3:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE2AFBD0307E49D5C4A495DE2CF5022BA00A39A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3232203d3e203631373236.roa
Signing time:             Wed 22 Jun 2022 14:24:40 +0000
ROA not before:           Wed 22 Jun 2022 14:19:40 +0000
ROA not after:            Wed 21 Jun 2023 14:24:40 +0000
asID:                     61726
IP address blocks:        131.72.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:a3:59:dd:65:bf:c9:23:4f:0f:a5:70:70:de:66:8b:e1:4f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFE2AFBD0307E49D5C4A495DE2CF5022BA00A39A
        Validity
            Not Before: Jun 22 14:19:40 2022 GMT
            Not After : Jun 21 14:24:40 2023 GMT
        Subject: CN=5115219BCEC1E59780498EA2E6141DF6CEB9BC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:20:b8:3e:69:10:d3:75:a3:c0:7e:6c:38:ba:
                    88:f0:8c:b4:1c:c3:20:e8:ad:19:6b:02:85:59:c6:
                    19:35:fe:f3:e0:ca:a3:11:72:55:25:bd:45:a7:ef:
                    58:fc:d4:90:9d:b0:56:f2:24:61:f2:90:2a:a6:53:
                    2c:2a:49:16:b4:fa:db:8b:e9:07:9d:66:96:0c:c0:
                    0f:d1:c7:4a:c7:a1:0f:8d:69:fb:ae:f4:1b:cc:4b:
                    71:6d:7d:82:10:f8:8a:9a:04:0a:5c:0e:b4:3e:94:
                    31:b1:35:96:88:97:72:31:37:56:58:bb:12:be:30:
                    f8:ff:0f:fe:a0:27:96:ed:2c:0b:a7:60:75:d0:b5:
                    4b:07:97:a5:80:42:8e:88:ba:df:d9:e2:51:b1:8b:
                    19:b5:4a:64:64:16:1b:a4:13:27:8c:55:59:22:f3:
                    58:d7:06:e5:79:66:e3:d2:9e:9d:9b:e8:2b:ec:9c:
                    fe:65:c4:2f:d7:8a:71:e2:2c:cf:46:05:38:82:f7:
                    82:6e:f5:9b:4b:66:9f:0a:5a:80:25:38:c4:43:7a:
                    61:23:6d:82:e9:a2:8f:4f:b3:a4:d1:a6:67:5e:5b:
                    24:27:0c:60:cc:3f:40:9b:c5:1c:e1:ec:07:14:ea:
                    5e:f9:bf:6b:99:92:a6:4c:3c:14:a1:8f:d5:dc:e6:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:21:9B:CE:C1:E5:97:80:49:8E:A2:E6:14:1D:F6:CE:B9:BC:21
            X509v3 Authority Key Identifier:
                keyid:FF:E2:AF:BD:03:07:E4:9D:5C:4A:49:5D:E2:CF:50:22:BA:00:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/FFE2AFBD0307E49D5C4A495DE2CF5022BA00A39A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFE2AFBD0307E49D5C4A495DE2CF5022BA00A39A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32322d3232203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:fc:8d:b0:4c:72:4a:51:58:ae:8f:55:7e:3e:bc:2f:fe:4f:
         0e:40:49:c2:7d:0d:78:87:cb:b4:fe:ce:6b:13:51:56:7b:ce:
         f3:be:3f:79:21:9c:7b:d7:2b:19:94:55:b3:59:be:95:72:06:
         30:21:01:e5:04:0c:de:36:53:17:09:04:11:be:a5:76:9c:3b:
         fb:88:51:dc:3a:31:9b:45:ac:d8:e3:b9:77:3b:cd:28:34:1d:
         12:94:d7:dd:1a:e3:70:f1:d4:ab:fc:89:ec:f8:da:e9:4a:59:
         b6:f0:31:43:1c:f2:c5:4a:89:7c:c2:89:68:59:49:a6:30:ea:
         5a:c2:a1:45:4c:3f:9a:fd:20:bb:be:8b:db:71:dd:cd:b8:07:
         c3:96:30:81:98:71:8d:6f:cb:b5:33:53:bf:ac:89:2d:79:07:
         67:b9:8f:5a:74:f9:d6:24:b7:62:82:8e:6c:75:ab:15:3c:e0:
         ce:2f:3f:10:9b:b9:9c:60:de:b8:39:a6:15:01:9b:81:2f:2c:
         8b:dd:c2:fd:51:a3:a9:03:92:ba:55:02:f7:09:b1:cd:13:da:
         fe:5f:0a:aa:1e:b3:28:95:b2:4b:89:74:62:13:cf:6b:3d:4d:
         9c:50:e8:d1:29:ca:11:b8:ff:20:c1:b0:61:dc:30:2c:50:c1:
         ef:7b:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:07 2025 by rpki-client