Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          yMT7d8YVksiPUQQQNgKDuZbs8Lftv+gO+XhRa9a8F1s=
Subject key identifier:   2D:26:5E:1C:14:16:33:EB:D8:D6:4F:8C:6B:1E:B6:FF:31:A7:1A:7A
Certificate issuer:       /CN=26D3F3740AF04BE00869BF680DD373FA32E2A56D
Certificate serial:       4B35381F08B0665828B083408FEEFD4BCD82C6A9
Authority key identifier: 26:D3:F3:74:0A:F0:4B:E0:08:69:BF:68:0D:D3:73:FA:32:E2:A5:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time:             Thu 04 Apr 2024 09:11:48 +0000
ROA not before:           Thu 04 Apr 2024 09:06:48 +0000
ROA not after:            Thu 03 Apr 2025 09:11:48 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:35:38:1f:08:b0:66:58:28:b0:83:40:8f:ee:fd:4b:cd:82:c6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D3F3740AF04BE00869BF680DD373FA32E2A56D
        Validity
            Not Before: Apr  4 09:06:48 2024 GMT
            Not After : Apr  3 09:11:48 2025 GMT
        Subject: CN=2D265E1C141633EBD8D64F8C6B1EB6FF31A71A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:27:ca:6c:1e:a2:4e:fd:77:0b:8a:73:d8:
                    fb:1c:4a:48:65:69:24:13:79:af:b0:e2:79:34:7b:
                    26:de:ba:cd:52:26:4c:f7:4d:c2:ba:05:e6:38:df:
                    49:29:9d:af:a4:17:49:87:91:3d:4c:09:17:cf:3c:
                    6a:94:2b:73:85:50:a9:78:44:b3:0f:f9:64:fe:c6:
                    ff:b7:73:8c:a2:5e:c0:75:63:45:c6:d3:74:ed:d3:
                    ea:3d:92:a8:e0:cc:60:61:b6:9c:da:f4:05:47:5f:
                    6e:ba:2a:8d:da:2c:3a:59:79:d4:84:96:bc:f0:3a:
                    97:29:81:5c:22:80:4f:a0:95:77:e2:fd:6c:01:fe:
                    f6:4c:2d:bb:48:34:4b:c0:66:1b:cb:78:05:30:3e:
                    85:5b:8b:ff:70:76:a1:fc:ff:81:c4:ac:04:ab:3a:
                    69:a3:c8:c3:d1:e4:14:d1:e5:29:ae:d0:17:14:a3:
                    26:2f:0a:4a:a6:6f:69:1c:9c:ff:21:04:9f:93:b0:
                    c2:9e:1c:eb:e9:39:ca:57:99:11:40:1e:af:5e:e1:
                    85:4a:9e:0f:97:3e:7c:35:64:25:b7:cc:0b:1b:a4:
                    51:90:1e:63:ba:56:4d:5b:37:66:ef:34:02:a7:00:
                    83:a3:1e:48:51:8e:00:fd:c0:37:5f:e2:bd:fd:bc:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:5E:1C:14:16:33:EB:D8:D6:4F:8C:6B:1E:B6:FF:31:A7:1A:7A
            X509v3 Authority Key Identifier:
                keyid:26:D3:F3:74:0A:F0:4B:E0:08:69:BF:68:0D:D3:73:FA:32:E2:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:17:7f:0a:58:68:6e:cb:a7:12:b0:2d:8c:76:6d:0a:61:50:
         6e:31:d8:e1:b7:e5:ca:be:b4:2c:d7:87:2e:82:c9:73:20:d4:
         11:92:67:88:89:60:ca:b7:07:f5:8d:05:57:4a:b9:2e:eb:0d:
         2b:0a:4f:26:a0:80:e8:71:da:9e:d3:f6:02:2d:5a:08:2c:8f:
         26:4a:4d:5f:d0:c4:f4:f9:98:a4:82:0c:f5:ca:ba:7c:be:94:
         a8:a2:c9:f4:08:5c:f3:fa:f3:07:68:3d:e7:5f:e8:6d:5b:1b:
         31:5f:6e:a7:68:63:05:d1:9a:88:01:40:17:c7:02:f7:f6:9c:
         23:b5:26:ec:10:b8:cc:7b:db:5c:ef:ee:93:ac:b6:9f:34:f6:
         c9:fd:c6:b3:1a:b3:36:76:2c:a5:ec:67:3d:f0:be:56:48:df:
         d4:fa:e4:03:f1:88:66:be:13:41:5b:ba:08:f4:9a:b4:98:cd:
         37:85:eb:20:b0:18:6a:61:d9:cf:5d:f9:6e:30:c2:cc:b3:0e:
         65:82:b3:b2:21:9a:e8:5e:6d:02:45:66:2f:22:96:e5:2a:0b:
         c2:78:26:31:7f:51:00:64:41:ed:91:d8:3c:70:16:cd:c2:9f:
         8d:9a:44:ae:1e:a9:3d:25:e7:b6:b7:2b:4f:14:81:f3:64:7c:
         64:5e:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:12:21 2025 by rpki-client