Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e33312e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e33312e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          W85n24YPaN+pWYa8dw9F305GhH2MgyXLKJAKYgUoctg=
Subject key identifier:   8C:67:76:E9:02:4B:A8:B6:C6:10:07:FA:8B:67:FA:B1:1B:C6:A1:49
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       07B68C9BD21908CE94BE483F4A10D115F382241D
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e33312e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:51 +0000
ROA not before:           Wed 23 Jun 2021 17:55:51 +0000
ROA not after:            Wed 22 Jun 2022 18:00:51 +0000
asID:                     262760
IP address blocks:        186.225.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b6:8c:9b:d2:19:08:ce:94:be:48:3f:4a:10:d1:15:f3:82:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:51 2021 GMT
            Not After : Jun 22 18:00:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:21:c4:7b:2e:b6:ef:6a:50:6c:48:fc:d7:
                    66:ed:d2:fe:4c:62:2b:9d:16:50:00:92:e1:53:eb:
                    4a:6d:a9:fe:ad:db:a1:e2:ed:22:b8:07:8b:f2:2c:
                    dc:f5:1b:5d:f7:66:a6:82:bd:d1:6a:16:b1:56:5a:
                    ef:08:34:79:23:3b:5b:ab:ff:28:68:15:70:4f:d8:
                    07:f3:4c:eb:a7:7f:8a:e1:cd:10:ce:51:a8:79:d2:
                    03:78:36:80:29:ee:8b:fd:31:f9:e7:73:66:b7:6a:
                    ae:1f:a2:73:24:34:b4:c6:22:c9:31:40:0e:46:c4:
                    19:fb:66:48:ba:b3:72:7a:c7:23:dc:97:a2:f5:e1:
                    45:05:98:04:9a:08:8f:98:32:ea:9b:c2:c9:a7:93:
                    51:3d:1c:9e:96:94:e9:38:82:03:c8:69:ef:9d:44:
                    67:13:8b:71:76:1e:83:eb:df:29:67:db:37:f6:27:
                    32:1f:25:e2:7e:f8:f5:82:9b:d6:3b:5c:be:1c:60:
                    f3:b2:f3:9e:a4:a9:33:a6:fa:0e:0b:51:7a:2a:5f:
                    47:01:e7:22:31:ab:82:23:03:55:fe:93:7b:77:76:
                    11:c4:61:3e:db:28:01:e9:bd:76:16:94:78:60:ed:
                    4b:d1:93:76:89:38:b2:a0:dd:b6:81:5f:33:2a:e8:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:76:E9:02:4B:A8:B6:C6:10:07:FA:8B:67:FA:B1:1B:C6:A1:49
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e33312e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:72:84:26:e3:52:9d:c5:89:c7:d2:47:8d:7d:10:60:99:cc:
         0c:52:3f:50:3c:e2:fb:2c:32:40:66:d9:f1:87:2c:6a:d3:7f:
         07:16:05:07:8e:06:43:84:17:24:cb:34:da:a9:56:78:60:ba:
         4c:86:d8:51:42:42:9a:13:45:20:48:d6:5a:2b:fa:a3:97:a9:
         1e:28:d6:16:3e:e0:ab:fe:7c:25:0e:df:6a:cd:bd:f2:bf:eb:
         52:05:d1:27:60:4a:be:04:bd:ac:11:f3:79:a3:36:7f:ef:b5:
         27:34:cc:fd:31:9c:6a:40:f9:63:8b:01:3e:4c:bc:03:1c:f5:
         1a:f2:71:0f:e0:cc:8d:e1:c7:8b:ad:d5:55:2c:11:1a:53:21:
         1e:95:19:85:77:53:39:ca:cd:b0:f5:6e:7f:f8:56:c2:3c:40:
         51:78:da:45:6f:25:06:98:4b:1e:e0:6d:be:ee:b2:3b:37:5a:
         2e:60:fc:46:83:4d:a5:fc:df:7b:22:e3:ad:d8:e9:18:65:7a:
         fc:2a:3c:4f:dc:57:f1:06:db:94:14:b1:e9:60:80:21:91:be:
         c3:51:b3:ea:dd:ff:02:15:bd:c1:67:8b:88:cf:85:f9:1c:f1:
         55:55:5b:3e:a2:b9:3c:4b:af:c3:f2:07:b2:bb:c1:11:b0:6a:
         e1:a7:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:12:59 2025 by rpki-client