Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa
File:                     3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa (raw, json)
Hash identifier:          +uVKsOO5uYcaL+GENUpxcUMzxMnIijPk+l083UyHGRY=
Subject key identifier:   BE:EE:7E:EC:A6:09:93:04:D0:9B:A8:50:41:1B:98:F1:09:B9:3D:93
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       717CF0130A040CF0EC2DC6343CC84BB445D3CC2E
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:56 +0000
ROA not before:           Fri 23 Aug 2024 19:49:56 +0000
ROA not after:            Fri 22 Aug 2025 19:54:56 +0000
asID:                     61633
IP address blocks:        131.100.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:f0:13:0a:04:0c:f0:ec:2d:c6:34:3c:c8:4b:b4:45:d3:cc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:56 2024 GMT
            Not After : Aug 22 19:54:56 2025 GMT
        Subject: CN=BEEE7EECA6099304D09BA850411B98F109B93D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:1f:5c:7e:68:93:c6:34:21:95:8f:4c:f7:
                    ca:8c:b9:69:90:e1:a2:6b:b4:2a:01:2d:1f:40:ad:
                    3c:31:3d:ba:6a:6d:c0:c6:20:98:84:8d:bf:9b:a6:
                    c4:d7:f0:0f:e1:74:10:99:1d:d8:c8:95:32:1d:e6:
                    a7:76:c6:5b:cc:27:99:47:c6:29:1e:9a:f7:37:e4:
                    23:1f:c1:e1:6c:5a:b0:6d:6e:82:dd:10:78:e9:7d:
                    47:d6:5c:fc:0c:48:3d:86:28:76:c4:27:00:5f:dc:
                    83:8b:d2:7f:18:7e:f8:30:d7:69:55:ec:1a:45:73:
                    1b:5e:c9:07:ec:53:19:90:fe:03:be:49:53:42:4e:
                    7c:f1:f8:27:ae:1a:28:51:ab:5a:92:9a:d3:c8:57:
                    71:1d:fb:d8:76:69:ff:a4:01:cb:68:d0:be:07:81:
                    38:39:e0:f0:47:f9:04:09:26:5e:f4:eb:71:ed:a8:
                    85:3f:d3:9f:75:2d:b0:e4:3e:5d:27:e0:54:a6:25:
                    b2:1d:2a:4a:4c:7b:b5:2e:4d:32:2c:67:6e:7f:f2:
                    e2:69:8d:15:cf:aa:17:e3:81:6d:fe:91:6a:80:ec:
                    b8:e8:c9:27:b4:7b:e7:38:85:c0:27:be:20:3f:5b:
                    d0:32:0b:9d:18:b1:3f:72:b7:6c:a2:f3:74:26:5a:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EE:7E:EC:A6:09:93:04:D0:9B:A8:50:41:1B:98:F1:09:B9:3D:93
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:0d:e1:e0:10:68:aa:b4:41:17:fe:e4:df:88:47:45:aa:
         58:e0:96:28:e8:37:01:33:6f:9c:aa:a2:3c:ae:c0:a5:06:a6:
         27:29:7c:7d:1b:11:2c:da:07:7e:f9:6a:0e:eb:a5:d4:16:15:
         e1:75:8c:12:00:f5:e6:a0:62:e0:5d:06:aa:68:75:b8:49:56:
         83:2a:7e:48:19:22:2f:68:cb:78:7a:06:5c:d4:ca:12:3a:0d:
         7e:4a:4a:61:4a:00:00:fa:11:01:94:d1:af:e5:c6:c7:21:c5:
         11:73:ac:c8:f8:d3:f8:83:27:2d:49:c4:a9:8c:6f:83:0d:92:
         e1:46:7a:6b:48:33:95:61:a5:f8:9f:0b:4e:f7:d1:13:44:1d:
         f7:4f:c9:54:10:d3:73:68:7c:82:bc:50:f0:4e:3e:84:80:81:
         2a:69:36:4f:8a:77:2d:b2:a8:a5:87:ef:0b:08:61:aa:90:96:
         99:6b:ac:20:30:16:fc:e6:25:a2:ff:db:b9:a1:32:3f:9d:38:
         4e:e3:9c:1d:92:a0:c3:4c:77:d8:fd:de:33:b8:2b:62:cf:4e:
         51:f8:c4:b2:40:b0:82:09:a9:52:67:5e:07:5b:83:a9:94:88:
         b3:02:fa:e0:bd:f4:fe:6f:d7:b7:a4:5e:e2:63:62:ca:40:db:
         ff:d1:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:29 2025 by rpki-client