Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32332d3233203d3e203631363830.roa
File:                     3133312e3130382e36362e302f32332d3233203d3e203631363830.roa (raw, json)
Hash identifier:          o7r7/UFzXuYSOMCSWivX7I1UhSGGUW0Kv3Rct3Wo/A4=
Subject key identifier:   4E:26:6A:D5:C3:C9:A0:1F:3E:B0:60:3A:E1:09:35:5A:BA:F1:1A:DC
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       2A06A58B80FC1FF0CA6B751CCC99FDC26B9D276C
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32332d3233203d3e203631363830.roa
Signing time:             Mon 23 Dec 2024 12:58:02 +0000
ROA not before:           Mon 23 Dec 2024 12:53:02 +0000
ROA not after:            Mon 22 Dec 2025 12:58:02 +0000
asID:                     61680
IP address blocks:        131.108.66.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:06:a5:8b:80:fc:1f:f0:ca:6b:75:1c:cc:99:fd:c2:6b:9d:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Dec 23 12:53:02 2024 GMT
            Not After : Dec 22 12:58:02 2025 GMT
        Subject: CN=4E266AD5C3C9A01F3EB0603AE109355ABAF11ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:e4:cc:d3:21:30:ed:f8:0c:47:b1:52:ac:
                    e1:67:04:82:ff:54:9a:bc:6d:7d:04:0e:34:79:f9:
                    c1:40:1b:81:f7:c3:46:c0:e1:78:3b:2b:70:06:6a:
                    5a:93:1c:16:7f:87:cf:51:0d:c1:af:7f:42:59:36:
                    7c:0e:1d:5f:ec:c0:d3:f6:00:62:ed:82:7d:ab:79:
                    be:04:8e:16:80:4b:b3:60:af:24:b6:0f:16:55:5b:
                    db:2d:f5:ad:94:1e:a6:56:0c:c0:3c:6b:5c:80:82:
                    5e:b7:be:e5:6e:06:68:68:54:63:fa:36:8f:e0:fb:
                    d2:7f:8c:3e:be:e3:b9:15:67:c7:d5:1e:6d:fe:27:
                    69:00:6a:ab:6a:d6:c0:df:31:9e:93:e3:41:b0:6e:
                    24:fb:8d:15:1a:02:3f:4e:40:7d:ff:73:7a:bc:cc:
                    a9:04:37:14:b1:50:23:64:54:46:c0:82:12:dc:fc:
                    4d:68:5f:a8:1a:86:67:0f:3b:d3:9a:60:ac:71:87:
                    1a:6b:ce:8a:62:6a:bc:e2:f7:33:d6:ba:fc:c5:22:
                    3e:f6:98:88:44:3f:16:0a:2e:37:76:14:0f:5c:29:
                    7f:c2:1d:6a:1d:36:6e:d8:4c:1a:10:c2:ea:b2:e5:
                    4a:34:13:97:4f:6e:da:83:74:a7:f4:bd:e6:a3:56:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:26:6A:D5:C3:C9:A0:1F:3E:B0:60:3A:E1:09:35:5A:BA:F1:1A:DC
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36362e302f32332d3233203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:7b:1e:0f:ce:00:11:bb:a9:83:76:52:84:0c:8d:48:23:
         47:c2:2c:7e:74:52:7a:53:01:69:24:8c:c9:9a:a7:87:c6:34:
         f2:35:19:24:67:a8:3c:28:4d:c2:45:75:4a:8d:75:03:46:80:
         46:28:99:9f:ad:a2:75:d8:b4:90:45:ba:fb:51:43:07:3e:82:
         48:97:29:c0:05:f2:fa:61:16:d3:d2:49:f3:09:ef:e3:c6:fa:
         bd:6a:1e:3f:f8:31:5b:b4:68:3e:98:6b:6f:25:34:6e:fd:5b:
         bb:b9:d9:53:f5:02:ee:3a:cb:53:f1:cb:3d:f6:7c:c7:dd:8e:
         ca:51:d7:a4:b5:6a:19:fe:46:8e:f2:51:b4:08:07:95:5c:81:
         2a:b3:4c:1b:2e:76:79:9c:61:99:8a:02:e1:15:3b:32:c1:18:
         47:68:71:e8:2b:e5:04:5e:a1:da:f3:93:94:e4:6b:0c:84:cb:
         1a:04:f7:63:57:c8:03:f1:df:3a:2e:71:cc:38:ec:7a:b5:ae:
         e2:09:5e:36:af:f2:15:65:29:58:db:a4:db:34:60:ef:12:3d:
         fc:8c:8a:50:2d:c0:fb:f5:11:dc:63:0d:ed:c9:34:a4:af:b4:
         ad:ef:e9:dd:17:c4:1b:ad:77:d5:c2:43:e7:5b:1d:2f:90:51:
         91:76:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:25:53 2025 by rpki-client