Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231392e302f32342d3234203d3e203631363538.roa
File:                     3133312e3130302e3231392e302f32342d3234203d3e203631363538.roa (raw, json)
Hash identifier:          G4quGN2w8h28lWHMud2BUFt85FELIVaHgpVGRD94b1U=
Subject key identifier:   D7:1D:F3:11:92:E7:58:78:8F:3D:53:31:29:FD:1C:E4:AE:EA:85:75
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       0DCA97706B20044BFC1EF14A0E71BD3BCE52B8A0
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231392e302f32342d3234203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:22:43 +0000
ROA not before:           Mon 09 Dec 2024 17:17:43 +0000
ROA not after:            Mon 08 Dec 2025 17:22:43 +0000
asID:                     61658
IP address blocks:        131.100.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ca:97:70:6b:20:04:4b:fc:1e:f1:4a:0e:71:bd:3b:ce:52:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:17:43 2024 GMT
            Not After : Dec  8 17:22:43 2025 GMT
        Subject: CN=D71DF31192E758788F3D533129FD1CE4AEEA8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:79:92:02:c9:f6:0c:34:d9:6d:ed:a8:b8:
                    fb:e0:6c:c5:75:b9:0f:8a:e9:ca:90:10:5f:b7:16:
                    6b:67:19:4b:78:91:de:14:b8:98:5d:4c:4f:32:f7:
                    95:04:e1:40:36:0a:69:dc:7a:63:d9:03:80:a6:75:
                    76:e3:64:89:f7:64:03:c9:33:92:d3:ca:f1:b0:fe:
                    8d:5f:e0:48:9a:ac:c3:a3:34:8f:69:9d:e6:11:7f:
                    07:14:3b:89:ed:98:66:03:82:fe:c4:83:01:56:22:
                    a4:a1:b8:62:f3:88:e2:d7:3a:f1:bd:52:8c:37:1f:
                    f7:67:a9:99:84:e9:b9:9d:27:94:c0:3e:ca:e2:cc:
                    2a:16:9c:dc:98:c1:5a:e9:bc:98:82:a5:f8:69:ab:
                    a8:35:8c:2c:6f:dd:bc:84:1a:a5:4b:b9:21:c2:32:
                    e6:c6:41:5c:f5:c3:10:f7:0c:93:2e:40:10:08:4e:
                    28:d5:47:32:6b:0f:03:0d:e6:b9:a5:63:2b:d9:2f:
                    e0:19:d6:c0:6a:26:5e:15:9c:cc:74:ee:32:4d:2a:
                    c9:46:42:73:2c:c4:10:95:6e:a3:26:f4:17:6e:23:
                    96:ed:6a:05:21:f0:f4:56:93:5b:07:2d:04:d5:da:
                    63:b5:87:a6:7c:83:19:c4:00:d7:c5:3c:82:2c:12:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:F3:11:92:E7:58:78:8F:3D:53:31:29:FD:1C:E4:AE:EA:85:75
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231392e302f32342d3234203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b6:22:87:09:4b:bd:bf:37:f6:05:cf:34:86:c7:d2:f4:7c:
         87:a4:58:c2:88:8f:b9:7e:75:c8:74:2f:d0:3f:1d:8f:d6:c3:
         2c:1e:39:e9:ad:91:db:a4:94:16:84:b7:b6:2d:af:0f:ae:9b:
         6f:95:96:f4:b2:a2:c9:7d:8d:2f:82:ef:60:42:9b:c9:ec:78:
         09:b4:64:7b:b9:49:8c:15:24:8b:c0:38:5a:8b:33:de:f2:12:
         9d:fd:e3:f6:8f:a1:8f:b5:bc:6e:24:30:50:48:9c:b9:41:67:
         f9:48:94:b9:fe:a9:44:57:17:e7:36:8a:f6:37:6c:53:43:4a:
         7e:d0:bd:5e:69:ba:3e:12:78:f7:45:59:96:23:08:78:2a:88:
         a7:58:7a:f0:e2:13:6d:8c:6d:77:b9:30:67:56:e9:89:0d:1a:
         d6:bf:04:b8:d3:ba:fc:04:d9:4a:77:a3:90:73:97:f3:f5:e6:
         6a:0f:e8:cd:00:da:2a:bf:51:b8:0a:ce:c1:64:3d:a3:d8:81:
         75:68:fb:70:a4:43:de:a6:2e:2b:69:43:9c:e6:bc:69:5b:85:
         e2:1d:d2:2a:6f:3d:87:20:9b:d0:91:b0:95:1d:32:70:53:47:
         69:ed:02:18:e0:25:a4:8b:ef:16:55:1e:ba:d9:b0:f6:9f:9d:
         9e:2f:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:07:24 2025 by rpki-client