Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa
File:                     3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa (raw, json)
Hash identifier:          I0Kip+6vgqeW7xqSLqdHDNqOSOjHThYM4J2NRrC/L+M=
Subject key identifier:   3E:51:F6:B8:FB:CC:9C:15:C2:D2:EC:51:AD:2B:01:1F:5F:F4:23:29
Certificate issuer:       /CN=771FF973372CAC3C336F8F05ECA7B996235C209B
Certificate serial:       6ACFDC9B82D2FD1EC0F700F85D34090B99B3BC9F
Authority key identifier: 77:1F:F9:73:37:2C:AC:3C:33:6F:8F:05:EC:A7:B9:96:23:5C:20:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/771FF973372CAC3C336F8F05ECA7B996235C209B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa
Signing time:             Sat 06 Aug 2022 14:11:14 +0000
ROA not before:           Sat 06 Aug 2022 14:06:14 +0000
ROA not after:            Sat 05 Aug 2023 14:11:14 +0000
asID:                     264397
IP address blocks:        131.161.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cf:dc:9b:82:d2:fd:1e:c0:f7:00:f8:5d:34:09:0b:99:b3:bc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771FF973372CAC3C336F8F05ECA7B996235C209B
        Validity
            Not Before: Aug  6 14:06:14 2022 GMT
            Not After : Aug  5 14:11:14 2023 GMT
        Subject: CN=3E51F6B8FBCC9C15C2D2EC51AD2B011F5FF42329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:bf:c1:72:7e:b0:62:d7:80:8c:29:3b:68:
                    c4:f0:d4:39:4b:77:a6:f8:11:d9:2c:9c:1f:70:33:
                    04:46:77:bd:36:93:76:9a:71:8b:78:d7:ab:54:2d:
                    5c:5e:5f:8e:01:87:df:ea:e1:5d:fb:6d:85:5d:59:
                    c7:3d:20:5d:e4:a5:11:d0:74:bc:b0:18:52:a5:15:
                    02:a6:7d:fe:cc:85:f8:cf:de:d6:48:9f:7e:39:02:
                    29:33:3e:cf:55:5d:dd:b2:c3:c6:54:33:8c:2e:f2:
                    50:ae:88:f5:72:92:e6:7f:a0:6a:87:cb:d7:9c:ec:
                    07:53:05:fe:a3:e4:24:e1:97:0d:06:8b:54:84:99:
                    fe:b7:d0:d7:7a:0c:cd:64:ce:44:90:71:0b:6e:a8:
                    28:78:48:e4:68:c8:fb:47:11:8e:7e:6e:c8:f1:77:
                    2d:8f:3d:71:70:0b:c5:57:33:db:2b:f4:af:2f:0c:
                    59:52:35:b4:a7:81:4a:ae:08:a5:be:e8:16:0d:5b:
                    10:8e:ae:25:60:04:f7:a8:1b:97:dc:f4:fd:aa:ac:
                    e4:c5:90:dc:20:c6:1e:a7:59:50:f3:42:68:e6:ed:
                    47:25:f6:c5:0c:dd:66:e0:75:43:c3:ff:af:b4:87:
                    77:94:f0:82:89:a1:c7:47:60:b6:92:98:da:f2:08:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:F6:B8:FB:CC:9C:15:C2:D2:EC:51:AD:2B:01:1F:5F:F4:23:29
            X509v3 Authority Key Identifier:
                keyid:77:1F:F9:73:37:2C:AC:3C:33:6F:8F:05:EC:A7:B9:96:23:5C:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/771FF973372CAC3C336F8F05ECA7B996235C209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/771FF973372CAC3C336F8F05ECA7B996235C209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32342d3234203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:d0:e0:78:b6:18:2d:94:22:88:f1:68:74:7c:52:47:97:
         3e:a7:b0:21:8b:0a:b8:ae:94:8e:a3:8a:a1:55:6f:fe:50:ed:
         7b:cb:2c:da:8b:f5:32:f4:e6:68:50:a9:b1:f5:7c:42:ab:7d:
         7a:d9:f8:da:f0:78:22:0f:85:21:1d:63:ce:83:4a:57:21:23:
         89:56:e0:d9:17:b7:51:54:b6:c4:15:d9:d8:98:3b:10:ff:51:
         ec:54:64:d1:05:98:30:40:af:3d:1b:f8:98:b0:ca:42:3f:8b:
         43:9b:72:f0:6f:7a:8c:62:80:cd:c6:a2:5f:ca:fc:fa:12:40:
         b5:54:db:58:bd:0e:68:69:0c:73:aa:76:96:7c:a9:4f:d2:04:
         45:8e:63:8e:a2:eb:19:18:3b:73:d3:37:e5:7b:f5:06:a8:c1:
         9c:cd:36:1d:af:48:ce:25:fd:41:bf:b5:01:ab:d0:9a:69:f1:
         48:3f:ab:6c:3c:fb:85:cc:5a:44:8d:aa:7a:84:54:0d:0d:0b:
         a7:55:a1:9f:cd:1a:eb:d7:e5:e5:75:a0:ee:90:d8:59:d0:3d:
         91:b0:ee:5b:16:bf:9c:46:14:94:fd:d0:24:e6:dc:fa:3b:f1:
         b0:54:15:ff:88:79:c8:f6:0d:d9:e7:bc:57:8f:e4:76:3e:d1:
         59:10:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:41 2025 by rpki-client