Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          D0ux7MOHlaYAvvesb2OLRNsyrKid+S1IWm9C9OxJeq4=
Subject key identifier:   DD:73:62:E4:D4:7E:C3:A6:35:D3:B3:FB:70:34:65:5D:EE:EE:D8:40
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       1502D03B40E067272A4644B1DF632D2A84603200
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:44 +0000
ROA not before:           Thu 04 Apr 2024 04:22:44 +0000
ROA not after:            Thu 03 Apr 2025 04:27:44 +0000
asID:                     264500
IP address blocks:        131.255.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:02:d0:3b:40:e0:67:27:2a:46:44:b1:df:63:2d:2a:84:60:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:44 2024 GMT
            Not After : Apr  3 04:27:44 2025 GMT
        Subject: CN=DD7362E4D47EC3A635D3B3FB7034655DEEEED840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:1e:7a:a9:74:7e:76:a1:44:cd:23:7c:29:
                    7e:c9:67:a4:ef:57:11:11:7b:d8:ff:2e:70:e7:2c:
                    eb:30:f6:70:8b:f5:f8:c6:d4:20:3e:9c:fe:a0:28:
                    4e:bb:0d:6c:d8:18:8b:8c:17:4f:cb:c9:d7:18:61:
                    9c:15:25:73:b3:e9:07:e9:14:d5:02:81:39:32:63:
                    45:64:3e:4e:6f:07:4d:02:0c:33:6e:a9:09:a3:20:
                    81:c8:ce:72:c8:08:1a:0a:1f:73:da:84:21:59:96:
                    e4:8e:56:c7:d9:e2:aa:65:57:18:ec:c6:50:7a:76:
                    95:66:4a:b2:89:c5:85:0a:ce:5f:97:6b:55:d7:77:
                    85:6e:98:e3:45:ca:52:61:fa:6b:8e:29:ed:13:a7:
                    85:24:d2:75:f5:02:43:96:e6:ee:ac:2b:51:f0:4e:
                    0b:c5:e1:b5:fa:60:0d:73:82:b5:2b:65:f2:8e:fe:
                    7a:cd:2c:de:84:83:7b:b0:1f:27:9f:6d:e9:a1:d8:
                    ca:97:c7:c4:37:1f:bc:1b:98:76:89:1b:b1:13:1a:
                    3d:c2:a8:5d:1e:ee:1b:63:22:a3:c6:f5:4d:0a:b5:
                    70:32:33:dd:f5:b1:a3:06:2f:63:35:91:d9:29:14:
                    ec:0e:95:ca:46:12:03:4f:01:7f:a8:44:67:d4:84:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:73:62:E4:D4:7E:C3:A6:35:D3:B3:FB:70:34:65:5D:EE:EE:D8:40
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/3133312e3235352e3233312e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:61:ad:4a:fb:c0:08:4d:87:16:97:e0:0c:d6:f8:19:7c:6c:
         f9:89:ac:de:21:a4:58:47:1a:33:4c:54:47:cd:e9:43:36:fe:
         36:6c:09:63:89:74:f3:10:1c:8c:99:71:d4:8d:24:43:a4:8e:
         8d:7b:38:b6:27:af:fb:ac:49:cf:80:5f:98:ec:bc:0d:ef:44:
         7f:0e:c6:22:6f:20:2d:b9:51:5c:80:7d:f3:21:ae:e8:92:db:
         4b:ef:5c:47:c7:96:ad:e1:f6:66:16:bd:09:55:c2:38:34:67:
         90:fb:0c:33:c5:07:36:e5:16:98:e9:f0:b4:a9:9d:e4:d4:5a:
         3d:6c:91:fd:d8:25:9c:e3:3b:2d:1b:d4:9f:92:b5:0b:67:98:
         e2:5f:73:03:7d:bb:c2:6d:5a:da:20:90:e3:65:d8:e9:f0:bb:
         0a:44:9e:93:1e:ec:10:3f:90:cc:38:e8:1c:a3:51:ae:c1:33:
         d2:09:b1:ba:c0:9d:f9:43:65:1a:34:08:27:d3:8e:90:9a:72:
         4d:68:61:70:5d:82:7d:cf:bb:c0:a5:cf:cc:67:40:54:10:65:
         c3:a9:a4:f5:42:04:ab:93:51:78:d5:b2:f6:c4:5d:7b:58:92:
         ac:7c:0b:11:99:66:d0:be:5c:71:cb:c0:e0:6e:9b:19:d7:99:
         e7:a6:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:14:59 2025 by rpki-client