Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3133312e302e3232342e302f32322d3234203d3e203532393635.roa
File:                     3133312e302e3232342e302f32322d3234203d3e203532393635.roa (raw, json)
Hash identifier:          pOT1LsXKEL34cThKGR6ta/DGMUYlpUxQsOMx77TfBws=
Subject key identifier:   EB:35:67:F5:FA:13:D5:C1:9B:29:CF:FC:BC:A3:E6:53:CC:6B:6D:48
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       3C089BD8D49A1FCC8D9A524A1A726BCFBFA292A4
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3133312e302e3232342e302f32322d3234203d3e203532393635.roa
Signing time:             Thu 06 Oct 2022 19:08:57 +0000
ROA not before:           Thu 06 Oct 2022 19:03:57 +0000
ROA not after:            Thu 05 Oct 2023 19:08:57 +0000
asID:                     52965
IP address blocks:        131.0.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:9b:d8:d4:9a:1f:cc:8d:9a:52:4a:1a:72:6b:cf:bf:a2:92:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Oct  6 19:03:57 2022 GMT
            Not After : Oct  5 19:08:57 2023 GMT
        Subject: CN=EB3567F5FA13D5C19B29CFFCBCA3E653CC6B6D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:94:47:27:0a:58:37:89:7d:86:b8:48:77:
                    1b:b8:fb:fc:b9:50:74:c6:cd:38:16:0f:79:f6:fb:
                    43:6b:c3:ed:c5:28:73:91:dc:2c:a7:f4:7e:2f:4e:
                    ef:fd:c9:23:f3:08:df:ce:77:79:a4:22:51:99:9d:
                    cd:0a:b5:a7:7f:7c:00:15:b8:8c:f0:56:3d:81:f3:
                    78:28:c2:8e:d9:fb:2f:56:a5:15:bf:b2:2d:b6:8d:
                    ce:67:36:5a:52:f8:68:95:ec:44:db:1f:80:0b:53:
                    ed:1a:45:24:06:c2:2c:28:10:a4:b7:54:1a:bb:0d:
                    09:68:75:46:0e:10:50:0e:b3:09:85:74:50:23:92:
                    41:c6:53:d1:8a:2e:da:5f:5c:78:f6:b9:99:94:9f:
                    84:da:bd:1a:7d:d3:12:b7:2e:b7:e5:6d:9f:eb:82:
                    c8:7d:5b:74:29:a4:c4:bf:14:30:de:55:ad:b6:dd:
                    9c:96:fb:c8:93:d9:81:13:48:8b:da:f4:d0:c9:5d:
                    33:c1:8b:1a:30:81:d9:e0:7f:bd:25:99:7b:81:04:
                    d6:38:36:90:7f:13:8c:1e:60:f5:fc:d2:64:ae:84:
                    48:41:d0:90:c1:27:4d:87:9e:9f:54:25:50:32:df:
                    fe:67:6d:9d:3f:8c:27:7f:f3:e2:5a:c3:c1:0f:ce:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:35:67:F5:FA:13:D5:C1:9B:29:CF:FC:BC:A3:E6:53:CC:6B:6D:48
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3133312e302e3232342e302f32322d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:69:9a:cf:ac:1e:93:2f:82:76:6d:33:12:39:5a:38:00:
         7a:ff:1a:9a:59:d5:83:5d:d2:1d:29:18:18:76:9e:62:75:14:
         6d:6d:a1:87:41:a8:cf:d0:79:69:57:72:a7:05:ad:8a:cf:53:
         df:33:d3:d8:8e:f1:36:19:39:8f:f1:61:6c:cd:e8:6d:75:70:
         d4:f2:92:6f:4a:52:7f:1d:84:48:23:40:9e:bf:e6:53:51:df:
         cd:30:ff:32:e2:4b:17:e2:50:9b:e7:88:ce:e5:16:d4:02:3f:
         70:e2:d9:0a:82:9a:bd:ee:f3:2a:f4:49:d1:d7:08:ca:44:39:
         96:6d:95:57:c1:87:f5:e2:3f:89:7d:5c:bd:8f:06:67:b1:e3:
         05:69:03:38:3c:30:73:b1:41:f2:2b:c1:a6:d7:bc:24:08:c2:
         39:20:df:35:a7:b7:85:91:9c:57:3e:b1:28:14:bc:58:74:09:
         a3:29:76:45:e9:cd:68:72:7a:49:a1:6e:97:ac:9b:e9:07:95:
         09:c0:e2:e3:1b:20:74:ec:e7:ce:4b:16:a8:dc:fa:05:c6:c3:
         23:1f:80:cc:19:be:0a:61:43:c8:a4:6f:b2:49:34:bb:b1:53:
         cb:be:db:f0:c3:8a:07:ad:0e:bd:c2:95:20:d9:8c:2c:20:87:
         c8:67:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:09:14 2025 by rpki-client