Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
File:                     3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa (raw, json)
Hash identifier:          7zONdnoEmXd0qzW8tSN7PwTP9avMGQq79R39C3He2u4=
Subject key identifier:   9C:C8:3A:54:EB:FD:1F:BD:AE:ED:19:A3:70:61:D3:13:EA:C4:2A:EE
Certificate issuer:       /CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
Certificate serial:       67731DA2BEB8CAB5BBB61714866E83DB6787C87B
Authority key identifier: 2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     54540
IP address blocks:        131.196.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:73:1d:a2:be:b8:ca:b5:bb:b6:17:14:86:6e:83:db:67:87:c8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:c6:cc:ff:b6:47:00:c1:fd:09:86:ec:69:
                    63:fa:55:0b:e6:ee:ef:a2:3a:12:9d:1f:bc:57:19:
                    56:75:c1:0d:56:07:60:72:86:54:dc:07:0c:29:92:
                    a6:8b:2e:d3:ad:d7:86:4c:fe:73:9d:54:aa:2d:2c:
                    10:66:ee:a4:fc:2f:10:56:c0:65:58:9e:78:0e:f0:
                    d9:68:85:90:6e:05:db:a8:65:04:bc:21:04:4f:84:
                    a9:fc:a8:50:8d:a3:84:d4:f0:ee:0e:cc:66:00:4c:
                    24:3e:ee:87:c4:a6:3e:98:7a:b2:c9:85:c4:29:0e:
                    4d:c9:37:85:cb:79:19:85:17:62:cd:c1:a1:db:dd:
                    45:e0:65:b2:19:09:76:46:77:66:4f:c9:91:dc:1c:
                    7b:bb:de:9e:5a:90:5e:1d:69:18:eb:8f:ba:9e:57:
                    4b:de:ca:30:c3:6a:f7:ff:ac:37:64:26:48:31:9b:
                    22:12:98:98:62:96:93:b9:cf:8b:d2:52:90:7d:38:
                    4f:69:cf:9a:a9:a0:56:fa:8b:59:aa:2d:72:6b:2f:
                    4d:69:92:ab:d9:43:fd:bb:7e:fc:ef:9e:2a:03:b0:
                    40:19:90:04:bc:08:17:db:c2:a3:d2:ff:73:d5:9d:
                    e3:6e:7e:0b:9c:61:d0:93:94:02:22:fc:91:c9:30:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:3A:54:EB:FD:1F:BD:AE:ED:19:A3:70:61:D3:13:EA:C4:2A:EE
            X509v3 Authority Key Identifier:
                keyid:2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:ed:a2:8e:f3:54:6c:35:4b:a8:40:ca:1e:d6:cc:3f:e6:
         d9:6d:a7:4f:20:ff:ab:ba:5a:0c:1d:4a:87:98:18:90:10:20:
         d5:ae:d5:af:fc:58:2a:3a:b4:c5:41:56:66:c2:58:1c:06:bf:
         d1:88:fa:9b:62:de:48:93:3d:08:13:5c:96:c0:19:ca:e5:3e:
         65:8e:cd:63:d5:e8:35:d9:13:e5:76:43:85:de:82:d3:4b:3a:
         ed:72:f1:02:64:60:2b:b8:7b:09:63:52:1f:7d:ad:94:80:dc:
         c4:a5:90:05:73:95:73:2e:d2:05:4f:70:b6:1f:b0:ae:f4:88:
         b3:2f:be:03:5c:6b:0d:c6:5d:3e:b0:4b:e4:cf:9c:23:84:6e:
         38:91:b1:9f:16:4b:98:55:ed:7d:e7:88:d3:07:c4:d5:b8:e3:
         8f:11:53:c9:c8:ab:fe:42:b6:11:2c:72:2d:9d:3d:b5:3c:c6:
         f7:c5:e1:57:11:fe:3d:36:37:08:fc:89:d9:b8:2d:e3:6a:c9:
         5e:b8:d8:38:10:23:2d:17:58:85:ed:c1:f7:34:cd:ea:2a:2b:
         4a:0b:ed:50:59:38:4b:2c:b7:22:43:68:96:c6:88:58:4e:96:
         7f:26:d7:9f:de:ac:2f:ee:23:e1:5d:57:ce:3f:8c:5f:d3:a7:
         1c:73:fb:eb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZ3Mdor64yrW7thcUhm6D22eHyHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE1ODNGRUVFRUZBN0QwRjgyQ0ZGODMyODc0QTgzQ0RE
RDIxNDRBMzAeFw0yNTAzMDYxODU1MDBaFw0yNjAzMDYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTU4QkM2Q0NGRkI2NDcwMEMx
RkQwOTg2RUM2OTYzRkE1NTBCRTZFRUVGQTIzQTEyOUQxRkJDNTcxOTU2NzVDMTBE
NTYwNzYwNzI4NjU0REMwNzBDMjk5MkE2OEIyRUQzQURENzg2NENGRTczOUQ1NEFB
MkQyQzEwNjZFRUE0RkMyRjEwNTZDMDY1NTg5RTc4MEVGMEQ5Njg4NTkwNkUwNURC
QTg2NTA0QkMyMTA0NEY4NEE5RkNBODUwOERBMzg0RDRGMEVFMEVDQzY2MDA0QzI0
M0VFRTg3QzRBNjNFOTg3QUIyQzk4NUM0MjkwRTREQzkzNzg1Q0I3OTE5ODUxNzYy
Q0RDMUExREJERDQ1RTA2NUIyMTkwOTc2NDY3NzY2NEZDOTkxREMxQzdCQkJERTlF
NUE5MDVFMUQ2OTE4RUI4RkJBOUU1NzRCREVDQTMwQzM2QUY3RkZBQzM3NjQyNjQ4
MzE5QjIyMTI5ODk4NjI5NjkzQjlDRjhCRDI1MjkwN0QzODRGNjlDRjlBQTlBMDU2
RkE4QjU5QUEyRDcyNkIyRjRENjk5MkFCRDk0M0ZEQkI3RUZDRUY5RTJBMDNCMDQw
MTk5MDA0QkMwODE3REJDMkEzRDJGRjczRDU5REUzNkU3RTBCOUM2MUQwOTM5NDAy
MjJGQzkxQzkzMDQwRUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5YvGzP+2RwDB/QmG7Glj+lUL5u7vojoSnR+8VxlWdcENVgdgcoZU
3AcMKZKmiy7TrdeGTP5znVSqLSwQZu6k/C8QVsBlWJ54DvDZaIWQbgXbqGUEvCEE
T4Sp/KhQjaOE1PDuDsxmAEwkPu6HxKY+mHqyyYXEKQ5NyTeFy3kZhRdizcGh291F
4GWyGQl2RndmT8mR3Bx7u96eWpBeHWkY64+6nldL3soww2r3/6w3ZCZIMZsiEpiY
YpaTuc+L0lKQfThPac+aqaBW+otZqi1yay9NaZKr2UP9u378754qA7BAGZAEvAgX
28Kj0v9z1Z3jbn4LnGHQk5QCIvyRyTBA7wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJzIOlTr/R+9ru0Zo3Bh0xPqxCruMB8GA1UdIwQYMBaAFCpYP+7u+n0Pgs/4ModK
g83dIUSjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI
RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzEvMkE1ODNGRUVFRUZBN0Qw
RjgyQ0ZGODMyODc0QTgzQ0RERDIxNDRBMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQTU4M0ZFRUVFRkE3RDBGODJDRkY4MzI4NzRBODNDREREMjE0
NEEzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bTNRYnRvdlpmVURYSEUydUJ0
QktCNHZIY20zaEdCbVNoam13UkRyZ3FlUi8xLzMxMzMzMTJlMzEzOTM2MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM0MzUzNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
g8SsMA0GCSqGSIb3DQEBCwUAA4IBAQAjH+2ijvNUbDVLqEDKHtbMP+bZbadPIP+r
uloMHUqHmBiQECDVrtWv/FgqOrTFQVZmwlgcBr/RiPqbYt5Ikz0IE1yWwBnK5T5l
js1j1eg12RPldkOF3oLTSzrtcvECZGAruHsJY1Iffa2UgNzEpZAFc5VzLtIFT3C2
H7Cu9IizL74DXGsNxl0+sEvkz5wjhG44kbGfFkuYVe1954jTB8TVuOOPEVPJyKv+
QrYRLHItnT21PMb3xeFXEf49NjcI/InZuC3jasleuNg4ECMtF1iF7cH3NM3qKitK
C+1QWThLLLciQ2iWxohYTpZ/Jtef3qwv7iPhXVfOP4xf06ccc/vr
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:00:44 2025 by rpki-client