Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          NmxQwRmGdprV9qjhziX2IGmBiHo5hKeiDd1ShzMI5hI=
Subject key identifier:   B8:9E:ED:12:5F:D8:BE:3D:2D:79:0D:A7:B9:11:37:49:5D:95:A5:1F
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       0B760537259F96A28FCE9FC5FAC9DB2614F25EB2
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa
Signing time:             Wed 05 Mar 2025 21:33:04 +0000
ROA not before:           Wed 05 Mar 2025 21:28:04 +0000
ROA not after:            Wed 04 Mar 2026 21:33:04 +0000
asID:                     264368
IP address blocks:        131.161.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:76:05:37:25:9f:96:a2:8f:ce:9f:c5:fa:c9:db:26:14:f2:5e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Mar  5 21:28:04 2025 GMT
            Not After : Mar  4 21:33:04 2026 GMT
        Subject: CN=B89EED125FD8BE3D2D790DA7B91137495D95A51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:c2:a3:59:ad:cb:18:b1:8b:37:4e:8a:d4:
                    f6:85:6c:9e:e3:47:c5:24:3d:b4:cb:7f:8e:99:02:
                    af:4d:78:7f:59:c9:cf:9a:81:52:b1:02:8d:df:ea:
                    b7:4a:f3:c0:a3:30:a3:49:e8:2a:70:56:22:f6:99:
                    7c:cd:fc:16:09:5e:13:25:70:c4:b3:ae:c9:0b:36:
                    fe:58:86:79:0f:c9:f7:9b:0f:e4:c4:bf:21:f5:b3:
                    85:08:28:4a:01:d9:2c:03:2a:9a:f3:e4:28:7e:58:
                    4c:dd:a8:92:cb:35:51:a5:52:d6:62:9f:42:8e:93:
                    a6:cf:b6:3f:96:40:99:7e:5d:0f:05:77:08:fa:de:
                    8e:a3:9c:b4:38:2a:13:6b:1b:08:b0:60:0d:57:c4:
                    c0:9d:63:bd:38:35:d4:f8:48:7d:aa:05:ab:0f:b2:
                    7f:4f:d9:d6:52:a2:ef:8c:e6:49:1d:08:03:d0:23:
                    2e:4b:06:16:90:a3:f1:4b:f8:3b:82:55:3e:f1:f9:
                    b9:66:7a:dc:6c:6f:d4:65:b4:59:7e:55:9c:da:2b:
                    65:de:b6:19:01:4b:3b:3b:d3:36:83:73:30:72:66:
                    45:80:d5:5a:9f:ae:62:d8:18:63:5e:28:75:3b:ce:
                    9c:d3:d4:4f:ad:29:33:ab:5a:9a:04:0b:45:65:c7:
                    45:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:ED:12:5F:D8:BE:3D:2D:79:0D:A7:B9:11:37:49:5D:95:A5:1F
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e35302e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:ed:72:ba:f9:d9:cb:c6:d0:af:20:f9:4a:f2:03:38:cf:
         0f:a5:a9:11:0e:6a:b6:5a:7b:6d:47:fb:dd:46:1e:a5:0e:fe:
         0d:a1:ee:4d:17:fb:8b:9d:e6:a3:31:33:8e:bf:f5:c8:ac:13:
         21:c0:e3:2e:34:a5:77:8e:12:8f:84:c5:42:b9:12:4f:78:07:
         cc:0f:19:e4:2d:0c:fc:ec:50:54:45:19:98:04:72:b9:c4:67:
         fd:e8:4e:dd:48:99:5a:9c:90:12:23:0c:0e:d9:ad:6a:c6:b2:
         3d:b7:68:db:41:8b:7e:06:db:c5:8e:63:31:4c:84:8c:7e:5f:
         15:bb:9d:c6:37:fc:30:86:58:13:69:d3:79:0f:b8:7b:45:c0:
         57:9f:08:d7:a7:0f:a5:a5:4e:f8:6d:86:c8:96:54:3a:ab:95:
         e0:ed:dd:68:2d:6d:3f:6f:71:14:c5:37:13:67:af:fe:9c:c8:
         d1:0d:98:e5:c0:b7:7b:e8:bc:3e:6c:95:49:27:c1:a8:2e:34:
         de:1f:15:59:b7:27:1a:bc:b2:c4:9a:de:2a:4f:e8:fd:49:cc:
         28:78:6e:1f:ed:be:4a:64:fc:37:37:33:c0:d0:33:95:2f:41:
         80:5b:bf:dc:b6:26:f3:82:75:70:9b:93:bc:d4:0c:98:ca:9e:
         1e:ca:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:05 2025 by rpki-client