Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32332d3233203d3e20323634333835.roa
File:                     3133312e3130382e3134382e302f32332d3233203d3e20323634333835.roa (raw, json)
Hash identifier:          G3KQ0vAmXumDoyfIHrJgpcUp+ZWRnbPRGAPLu3YSTOM=
Subject key identifier:   7B:05:7F:8A:97:EE:F5:CE:7A:34:69:D4:C8:AA:97:AF:AE:F7:15:C4
Certificate issuer:       /CN=F6040AB66B5057ADB8752A8F3320197F1323C253
Certificate serial:       4707C235E7A0F6E3823772C0AC0DAC0BC9A6E058
Authority key identifier: F6:04:0A:B6:6B:50:57:AD:B8:75:2A:8F:33:20:19:7F:13:23:C2:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6040AB66B5057ADB8752A8F3320197F1323C253.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32332d3233203d3e20323634333835.roa
Signing time:             Mon 27 Jun 2022 18:39:41 +0000
ROA not before:           Mon 27 Jun 2022 18:34:41 +0000
ROA not after:            Mon 26 Jun 2023 18:39:41 +0000
asID:                     264385
IP address blocks:        131.108.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:c2:35:e7:a0:f6:e3:82:37:72:c0:ac:0d:ac:0b:c9:a6:e0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6040AB66B5057ADB8752A8F3320197F1323C253
        Validity
            Not Before: Jun 27 18:34:41 2022 GMT
            Not After : Jun 26 18:39:41 2023 GMT
        Subject: CN=7B057F8A97EEF5CE7A3469D4C8AA97AFAEF715C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:21:1f:f0:3c:41:36:1c:aa:a9:c3:9a:8f:
                    b1:7d:6b:6d:8a:39:86:16:4b:02:e5:a4:9f:a1:50:
                    79:60:7c:8a:b6:48:01:9f:36:a4:89:04:60:a5:d0:
                    33:ac:ae:cd:74:c6:69:bc:a8:ab:17:ae:fe:7a:c0:
                    0b:02:7e:68:32:42:61:e7:02:c1:37:a0:eb:ae:7b:
                    51:a5:0e:f7:45:25:0f:02:11:80:f9:f2:17:94:c8:
                    07:07:a4:4a:de:b9:2a:0c:6d:0c:8f:26:78:c2:64:
                    13:76:33:e5:58:e5:6e:21:f2:23:ff:dd:ae:67:8a:
                    42:d3:77:68:31:06:fb:16:a4:a2:46:3b:da:ee:e8:
                    06:70:a5:71:cf:29:74:7a:2c:76:72:06:f5:98:f5:
                    dd:9e:bf:91:77:28:8c:f6:ff:c7:8e:75:0d:5d:df:
                    5e:f4:35:fe:03:48:5d:2c:85:df:00:3b:2e:7a:3b:
                    6c:17:a8:4f:0c:40:4b:f2:93:f6:4d:a2:99:1c:18:
                    22:a7:66:37:17:85:c9:fa:88:90:72:c0:23:77:7e:
                    e0:ab:91:d0:7d:79:6a:f6:ca:72:57:cd:01:4a:4c:
                    cb:a8:eb:02:4d:05:6f:8d:da:23:40:0a:e3:3f:e3:
                    eb:5c:37:c7:8b:31:cb:99:a8:b4:84:ee:94:04:04:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:7F:8A:97:EE:F5:CE:7A:34:69:D4:C8:AA:97:AF:AE:F7:15:C4
            X509v3 Authority Key Identifier:
                keyid:F6:04:0A:B6:6B:50:57:AD:B8:75:2A:8F:33:20:19:7F:13:23:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/F6040AB66B5057ADB8752A8F3320197F1323C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6040AB66B5057ADB8752A8F3320197F1323C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/3133312e3130382e3134382e302f32332d3233203d3e20323634333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:c6:f8:a5:ad:60:df:27:5b:c5:3b:e9:51:fb:27:39:bb:e4:
         83:d3:6d:b1:1a:85:66:a0:a8:f0:ca:6f:c7:c1:72:b0:3d:99:
         b9:f8:b2:44:0b:0c:11:55:43:a9:e1:63:c1:e6:8f:f7:52:82:
         38:aa:9c:7f:74:b3:ca:87:65:71:19:b4:bd:8b:ee:46:24:9a:
         de:0c:fb:e2:2a:16:fd:47:d0:0b:30:1e:d0:d2:ad:39:2e:e8:
         5f:6a:c4:38:eb:bc:3d:11:02:f5:7a:33:6b:db:5d:37:d1:15:
         80:90:7c:c9:fb:48:95:3b:94:06:c8:3d:20:78:47:1b:ef:d1:
         7d:e4:d3:30:cf:20:5d:9c:ba:9a:3c:59:59:6e:11:b1:c7:06:
         b8:ad:20:f7:1e:45:3e:5e:0e:47:70:8d:08:4a:9b:47:ce:22:
         a1:e8:ff:4e:71:7a:bb:89:5c:9b:e8:4c:e1:68:de:91:ab:38:
         a9:18:10:f8:a8:8b:1a:79:b5:27:62:de:fe:c8:4d:b5:24:d1:
         2a:dc:49:15:46:0d:82:b7:73:f5:85:f4:21:49:eb:0e:8d:a6:
         b4:f1:cd:7f:68:17:98:0b:94:33:20:cd:3d:ff:00:57:60:74:
         04:3e:94:d6:59:ae:75:53:7c:a5:b5:c1:78:69:75:00:cf:ea:
         8a:37:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:36:14 2025 by rpki-client