Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa
File:                     3136382e302e3133312e302f32342d3234203d3e20323633303639.roa (raw, json)
Hash identifier:          5oWzEs1f0M4ZdrHqiFNEKionfZfXUbwUs3VM1b4pzWA=
Subject key identifier:   A4:49:BA:E4:1F:50:A0:63:3E:5B:73:35:73:5E:23:7B:D2:4A:04:2F
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       3DC508E2DA67269DB7DB3B9CB8A1377B9C0AC654
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa
Signing time:             Fri 11 Aug 2023 15:12:18 +0000
ROA not before:           Fri 11 Aug 2023 15:07:18 +0000
ROA not after:            Fri 09 Aug 2024 15:12:18 +0000
asID:                     263069
IP address blocks:        168.0.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c5:08:e2:da:67:26:9d:b7:db:3b:9c:b8:a1:37:7b:9c:0a:c6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Aug 11 15:07:18 2023 GMT
            Not After : Aug  9 15:12:18 2024 GMT
        Subject: CN=A449BAE41F50A0633E5B7335735E237BD24A042F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:b3:9d:0f:bb:97:6b:47:5e:7e:7b:7d:4d:
                    67:2e:0b:b6:38:78:ae:10:93:16:db:83:66:eb:c2:
                    d1:a7:93:c4:6d:b3:fc:d9:1b:21:8e:a2:5a:57:b2:
                    b3:40:50:d9:a6:c5:66:1d:65:2f:3c:7d:bc:17:7a:
                    53:4f:e7:87:9c:9b:20:f3:95:56:d1:c9:14:03:f5:
                    39:47:7c:3a:01:a7:2d:11:9f:b8:f5:fc:25:e0:cb:
                    dc:82:2c:a9:b7:f5:f3:6f:4a:63:66:0d:c0:14:51:
                    e3:33:84:60:6b:56:dd:12:2c:99:6f:5b:bb:30:e9:
                    9e:14:5d:3e:5b:47:59:79:5c:88:0b:de:58:8b:de:
                    87:6f:eb:bf:cb:35:9a:24:80:4a:9d:2e:e6:31:00:
                    f3:76:be:d8:95:c5:f1:2a:50:01:a9:15:55:b0:64:
                    4d:3d:eb:79:64:8b:d4:39:2f:89:84:e0:08:36:21:
                    f4:e7:6c:78:fc:dc:34:8c:1b:a6:68:5b:21:05:6b:
                    b0:02:c9:dc:25:db:d1:37:ab:d3:b5:1e:6b:32:13:
                    a0:aa:8f:cc:94:61:83:08:84:ab:8a:ac:8e:30:4c:
                    0b:6f:d4:89:d1:43:a5:58:d2:23:ee:cf:fc:89:2a:
                    0a:07:87:b3:4b:67:ad:b7:73:fc:7e:f9:87:44:96:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:BA:E4:1F:50:A0:63:3E:5B:73:35:73:5E:23:7B:D2:4A:04:2F
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133312e302f32342d3234203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:6d:c5:d9:2f:65:c5:5f:fe:29:07:42:56:c6:8a:4c:5e:
         c7:44:b0:ee:ca:79:e5:c4:0f:1d:bc:cd:4a:59:03:cc:e4:8d:
         f3:16:9a:fb:c8:07:50:5e:72:cb:0d:80:69:68:77:d5:75:6c:
         d5:58:35:5e:60:1c:bc:86:8d:f4:d1:e4:ae:a4:85:2b:21:dc:
         79:5d:09:67:42:6a:9a:cc:ab:31:19:88:9a:5d:31:e3:bf:2c:
         3e:2c:46:92:51:ed:d8:73:a2:f2:70:a5:de:a6:c6:28:9c:5a:
         ac:90:37:2d:ba:f3:11:96:f2:f2:70:1a:3d:6b:00:dd:b2:64:
         df:c0:3f:97:73:91:f1:cd:70:a0:53:66:11:37:8d:8a:ce:4a:
         f4:56:c8:2e:6b:75:4a:65:5d:c6:94:53:77:9b:51:57:8c:a6:
         f2:57:73:de:58:c6:d4:89:87:d8:59:84:38:c9:fe:84:02:9f:
         a7:14:ab:32:1d:b9:78:af:2f:0a:e0:0f:46:1d:c7:08:75:0f:
         20:2a:01:aa:dd:2f:5f:88:f7:6f:38:7e:b2:92:58:8d:c7:c1:
         c0:ff:0f:e4:8b:4d:17:ad:cb:41:5c:a2:f4:b8:78:f6:a4:c6:
         6b:09:fc:d0:b2:ac:f4:b0:f5:ef:26:fb:4a:79:dc:a1:5f:4f:
         dd:6d:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:04 2025 by rpki-client