Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          8qks23jncllF6wJ6pffJ2XCPgRngtRf/nrslSUs9JNc=
Subject key identifier:   9A:D2:FF:F4:AC:6F:80:37:26:7E:14:E7:ED:73:7C:E1:50:6D:E3:E8
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       1390B5555EA6B869F003BECFF9C3939FE0695992
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
Signing time:             Fri 28 Feb 2025 14:53:39 +0000
ROA not before:           Fri 28 Feb 2025 14:48:39 +0000
ROA not after:            Fri 27 Feb 2026 14:53:39 +0000
asID:                     265919
IP address blocks:        131.196.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:90:b5:55:5e:a6:b8:69:f0:03:be:cf:f9:c3:93:9f:e0:69:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Feb 28 14:48:39 2025 GMT
            Not After : Feb 27 14:53:39 2026 GMT
        Subject: CN=9AD2FFF4AC6F8037267E14E7ED737CE1506DE3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:34:3c:ce:36:3c:bd:43:74:64:ed:2e:e8:
                    8c:e1:f8:59:3b:cd:c6:60:08:9b:42:57:11:8b:25:
                    6e:d8:a1:fd:07:6e:fe:68:24:06:87:b6:12:c7:95:
                    2c:e8:a3:de:b4:a4:b2:26:2b:81:28:5a:65:84:4f:
                    b6:06:dc:d2:9f:43:ab:50:56:b0:d9:09:3c:ae:e3:
                    0f:10:3f:93:a3:16:ea:b5:2d:07:d7:3c:69:d9:41:
                    01:de:28:f5:c0:98:a4:d9:f0:e6:7b:4b:48:a8:55:
                    1e:8e:58:36:0c:c8:fb:ae:28:86:ce:8c:c2:7a:4c:
                    da:a2:ec:7f:4d:5e:25:65:e2:a8:08:5d:b5:9f:74:
                    17:f4:34:59:58:ec:f5:fb:10:72:29:a0:3b:5b:ef:
                    3f:fe:28:15:96:45:fb:34:8c:58:fb:2e:c3:90:71:
                    18:eb:21:ad:96:ef:9e:d6:fc:ee:1f:64:70:de:df:
                    66:45:01:de:48:e4:b1:14:67:70:6f:6b:4c:da:8d:
                    57:04:ac:6d:15:95:6a:3d:93:65:ba:e9:fc:41:33:
                    83:79:c8:b6:a0:ff:48:64:b8:ef:52:61:06:d8:97:
                    23:33:bf:b5:bc:d0:da:59:03:38:88:85:cf:f3:17:
                    ba:e8:13:2f:d5:b6:12:ee:68:2b:3f:26:c3:22:b6:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D2:FF:F4:AC:6F:80:37:26:7E:14:E7:ED:73:7C:E1:50:6D:E3:E8
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:cb:d8:75:b1:76:78:0a:cc:83:c5:ad:78:25:f0:89:ce:
         b4:cc:62:d0:71:75:7e:7e:7d:c5:e0:17:a2:c6:c2:8c:5a:d8:
         22:79:28:63:cf:3b:68:ed:c1:8e:25:0b:04:fa:1d:11:a4:b5:
         0e:a3:7c:f5:73:ee:94:80:e6:8d:20:a5:1f:b4:b0:e8:56:25:
         74:6b:49:7e:dc:f5:9c:de:b0:4a:ce:d0:bd:f7:26:1e:3e:22:
         23:91:ea:d2:fe:70:c6:04:36:7e:da:8c:cc:b8:cc:5f:35:c4:
         ea:e7:52:68:b4:37:d3:bc:44:76:42:fb:9f:bb:37:2f:13:de:
         97:02:a6:50:a1:cf:26:22:ce:fc:b2:bb:29:d9:3e:37:31:32:
         7f:80:d3:5b:e6:a5:43:a7:c4:ee:0f:1d:75:88:55:69:36:a0:
         78:ce:a5:a0:70:a9:9e:e0:28:26:d7:8b:3d:9f:a4:90:53:ad:
         7e:ea:42:f1:02:5d:50:60:77:35:17:17:a7:04:b5:a0:a5:8e:
         33:00:51:77:ba:da:62:66:fe:93:3a:1d:29:9a:4f:1a:62:91:
         f6:8c:10:7c:ae:78:10:48:0f:6a:1a:59:04:bf:08:f2:5b:bd:
         15:9b:ca:da:86:a2:4d:03:83:56:01:7e:a2:00:74:37:3b:ab:
         6c:ae:9b:51
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE5C1VV6muGnwA77P+cOTn+BpWZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0NzM5ODg2QTE0NTUyNEQyRjg0RTdGNjcwNEIwRDZB
RkZDMkFFOTAeFw0yNTAyMjgxNDQ4MzlaFw0yNjAyMjcxNDUzMzlaMDMxMTAvBgNV
BAMTKDlBRDJGRkY0QUM2RjgwMzcyNjdFMTRFN0VENzM3Q0UxNTA2REUzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRBDQ8zjY8vUN0ZO0u6Izh+Fk7
zcZgCJtCVxGLJW7Yof0Hbv5oJAaHthLHlSzoo960pLImK4EoWmWET7YG3NKfQ6tQ
VrDZCTyu4w8QP5OjFuq1LQfXPGnZQQHeKPXAmKTZ8OZ7S0ioVR6OWDYMyPuuKIbO
jMJ6TNqi7H9NXiVl4qgIXbWfdBf0NFlY7PX7EHIpoDtb7z/+KBWWRfs0jFj7LsOQ
cRjrIa2W757W/O4fZHDe32ZFAd5I5LEUZ3Bva0zajVcErG0VlWo9k2W66fxBM4N5
yLag/0hkuO9SYQbYlyMzv7W80NpZAziIhc/zF7roEy/VthLuaCs/JsMitlbNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmtL/9KxvgDcmfhTn7XN84VBt4+gwHwYDVR0j
BBgwFoAUHUc5iGoUVSTS+E5/ZwSw1q/8KukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8xRDQ3Mzk4ODZBMTQ1NTI0RDJGODRFN0Y2NzA0QjBENkFGRkMyQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENDczOTg4NkExNDU1MjRE
MkY4NEU3RjY3MDRCMEQ2QUZGQzJBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPExDANBgkqhkiG9w0BAQsFAAOCAQEAaNnL
2HWxdngKzIPFrXgl8InOtMxi0HF1fn59xeAXosbCjFrYInkoY887aO3BjiULBPod
EaS1DqN89XPulIDmjSClH7Sw6FYldGtJftz1nN6wSs7QvfcmHj4iI5Hq0v5wxgQ2
ftqMzLjMXzXE6udSaLQ307xEdkL7n7s3LxPelwKmUKHPJiLO/LK7Kdk+NzEyf4DT
W+alQ6fE7g8ddYhVaTageM6loHCpnuAoJteLPZ+kkFOtfupC8QJdUGB3NRcXpwS1
oKWOMwBRd7raYmb+kzodKZpPGmKR9owQfK54EEgPahpZBL8I8lu9FZvK2oaiTQOD
VgF+ogB0NzurbK6bUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:28:07 2025 by rpki-client