Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e38392e302f32342d3234203d3e20323634333439.roa
File:                     3133312e3130382e38392e302f32342d3234203d3e20323634333439.roa (raw, json)
Hash identifier:          Lrc0fC6xdGv6iFr8O54xsrC8fCswGj5QHmz7SOsH7OM=
Subject key identifier:   DE:7E:F5:06:FE:0F:EF:42:91:51:D2:83:63:66:34:D1:F4:94:74:C2
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       3E2760D2B3808911F61502A9BB0C1F2A572825BE
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e38392e302f32342d3234203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:10 +0000
ROA not before:           Tue 07 Nov 2023 15:14:10 +0000
ROA not after:            Tue 05 Nov 2024 15:19:10 +0000
asID:                     264349
IP address blocks:        131.108.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:27:60:d2:b3:80:89:11:f6:15:02:a9:bb:0c:1f:2a:57:28:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:10 2023 GMT
            Not After : Nov  5 15:19:10 2024 GMT
        Subject: CN=DE7EF506FE0FEF429151D283636634D1F49474C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:62:90:87:1d:ff:93:57:ab:54:d8:bd:87:
                    6b:a8:45:85:26:a1:65:54:18:7b:d3:0a:8f:1e:0d:
                    e1:1f:c0:ec:dd:1f:cd:00:d5:5e:2c:ac:01:e3:bc:
                    0b:aa:a7:e8:3d:f4:0a:2b:d8:6e:68:c9:e8:d4:17:
                    d6:62:3f:b1:96:10:cf:6e:35:c8:ba:5c:45:70:f3:
                    8c:0b:0c:61:c7:27:1d:9c:4e:46:5f:1a:4a:3f:00:
                    ba:e9:c7:84:40:6f:a3:3d:d1:56:13:64:3b:72:94:
                    e1:ab:3d:88:56:48:ba:28:25:79:43:a1:5a:48:c8:
                    09:ad:40:e1:df:1e:20:32:08:8a:79:73:7a:0c:f5:
                    bd:df:82:8f:ff:f2:ed:9d:c3:ac:ef:7c:38:88:34:
                    23:bb:e1:b6:6f:6b:97:63:16:66:fe:fb:05:d5:50:
                    4d:f7:c5:68:26:74:8a:94:a8:38:43:11:13:4a:6e:
                    e3:8f:97:4d:ff:d5:42:06:07:aa:31:48:8b:29:fd:
                    b5:18:e1:f8:3e:20:a6:4c:26:42:25:82:cf:99:e0:
                    4a:45:fa:a6:95:c6:ac:12:1c:4f:fa:0d:62:7f:a3:
                    e2:9b:37:50:04:f4:6f:a2:fa:f8:84:5e:f4:92:66:
                    b7:c5:58:ef:61:54:6e:ae:ca:28:69:13:4f:8c:d9:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7E:F5:06:FE:0F:EF:42:91:51:D2:83:63:66:34:D1:F4:94:74:C2
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/3133312e3130382e38392e302f32342d3234203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:36:30:07:ed:57:5e:8a:bf:9d:e6:6e:ea:23:71:7a:53:
         ab:2b:89:1a:07:84:ea:86:64:5a:6f:f5:f1:9b:df:75:9d:4b:
         f7:02:00:bd:03:95:6c:2f:de:24:19:72:8b:57:1b:b6:ac:cf:
         d0:76:57:69:91:d8:ba:2c:d2:35:1b:6a:1d:ae:ba:cb:23:5e:
         fe:96:38:de:d0:9d:86:c6:04:86:96:a1:cb:9b:27:b1:25:e7:
         51:95:67:e3:b5:80:0f:ab:e5:6c:85:f5:56:cb:4f:8d:e3:68:
         98:22:b8:51:02:3f:43:27:25:7a:59:1f:59:ee:5d:57:a2:f2:
         e6:76:80:c3:06:fd:d9:e4:17:a0:2c:b0:2e:0f:b0:9a:d6:7a:
         34:fb:e1:4f:a0:dd:39:01:1b:9f:16:17:5a:33:ad:17:4b:99:
         b9:69:c8:63:22:03:45:bc:83:99:93:90:8c:0b:b0:5d:19:af:
         bf:e7:e0:a0:8b:0f:d6:b2:93:04:33:01:6d:e0:25:e8:42:bd:
         7d:0f:ca:0e:bb:72:2d:48:5f:b0:4d:a1:c1:72:a8:e0:05:96:
         54:46:c2:30:fd:3c:8c:c7:ad:53:ca:70:dc:e5:1f:32:b6:3f:
         13:a2:e1:49:b3:3c:96:b8:3c:60:08:0e:e1:0b:b4:8a:63:f9:
         1d:96:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:40:30 2025 by rpki-client