Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3234203d3e20323730393834.roa
File:                     3133312e3232312e3134302e302f32322d3234203d3e20323730393834.roa (raw, json)
Hash identifier:          8IVPH+9bRBag0t3k7zhETaUIgzreowGrbemsBc7Q0WU=
Subject key identifier:   BE:97:18:50:4B:3A:28:4A:94:97:29:EA:EE:D6:9D:B0:2F:E7:CD:A4
Certificate issuer:       /CN=45C9392AF50D0AF9130F1975B5978B71F958966F
Certificate serial:       3E8E5FFF91F93B2F5F852E365969BC03F21CFFAD
Authority key identifier: 45:C9:39:2A:F5:0D:0A:F9:13:0F:19:75:B5:97:8B:71:F9:58:96:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3234203d3e20323730393834.roa
Signing time:             Fri 12 Aug 2022 18:23:58 +0000
ROA not before:           Fri 12 Aug 2022 18:18:58 +0000
ROA not after:            Fri 11 Aug 2023 18:23:58 +0000
asID:                     270984
IP address blocks:        131.221.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:5f:ff:91:f9:3b:2f:5f:85:2e:36:59:69:bc:03:f2:1c:ff:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C9392AF50D0AF9130F1975B5978B71F958966F
        Validity
            Not Before: Aug 12 18:18:58 2022 GMT
            Not After : Aug 11 18:23:58 2023 GMT
        Subject: CN=BE9718504B3A284A949729EAEED69DB02FE7CDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:07:d7:d4:63:a3:e9:27:2f:1c:68:f1:9c:
                    6f:f8:3a:06:61:31:5f:01:66:98:95:57:89:3e:ce:
                    f6:ad:5e:3d:77:97:0e:c5:18:a6:6c:47:4d:f3:24:
                    2e:f1:2e:a0:53:a5:47:a7:d2:60:e6:fa:00:f2:d9:
                    85:62:ba:f8:d3:35:6a:91:c3:ae:c3:2b:6c:e2:22:
                    5e:dd:73:47:ca:e1:38:3f:8c:67:35:0f:47:9d:38:
                    90:4a:8f:a0:01:85:55:6e:00:ab:11:cb:e5:f0:2b:
                    7a:9d:b1:8a:e9:b1:93:08:82:bd:a1:6e:38:6c:0f:
                    17:e2:24:e4:d8:4a:03:75:44:58:c5:53:4b:0b:b7:
                    34:ba:d2:c6:d3:5d:49:bf:e8:6c:a9:68:c8:17:05:
                    ae:8d:6f:53:e8:ae:9a:34:a9:2f:f5:e1:c7:fd:b9:
                    fd:99:e1:1e:4e:9d:fc:84:c9:39:85:ec:37:11:38:
                    bc:45:c2:fe:7e:b2:ad:23:3e:05:26:48:75:71:f4:
                    27:f9:46:29:5d:ff:b7:ff:c1:57:a2:35:aa:f5:52:
                    a2:da:b2:10:b3:fa:e9:d5:f3:fb:4a:a4:35:ba:e9:
                    f6:e0:e6:f5:63:e5:ff:1f:d4:c8:81:04:e9:92:53:
                    77:59:6e:25:45:1d:ef:69:80:01:54:c2:24:20:b4:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:97:18:50:4B:3A:28:4A:94:97:29:EA:EE:D6:9D:B0:2F:E7:CD:A4
            X509v3 Authority Key Identifier:
                keyid:45:C9:39:2A:F5:0D:0A:F9:13:0F:19:75:B5:97:8B:71:F9:58:96:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3234203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:a1:b5:2d:dd:3f:5c:9b:5f:e9:81:35:9b:af:84:c9:28:fe:
         42:07:ba:7c:23:a1:a0:1b:db:e6:35:ab:4b:d0:9d:04:65:3e:
         03:c6:0b:db:55:42:4b:44:b6:f1:f3:89:4b:7b:80:e5:78:99:
         e2:d1:15:38:8c:41:3c:33:e8:84:8c:a3:6a:f8:2a:fa:2f:f4:
         e0:16:a3:b1:fa:72:8f:2c:92:4f:58:03:36:08:52:82:dd:18:
         61:4d:5f:c5:fc:52:a2:c7:5a:d0:c6:44:a9:44:77:1d:72:df:
         32:5c:53:7e:47:6e:fb:c9:21:1d:ac:bd:ba:64:29:97:bc:6f:
         8f:d3:68:e4:01:97:90:6f:c3:ff:ec:b5:02:40:f1:32:fd:cb:
         14:6f:a9:fe:bc:a8:4c:13:3d:41:51:c0:da:05:44:20:1e:ff:
         92:67:7b:6c:61:7a:f9:fb:cd:e4:b7:26:3c:80:96:a9:3c:26:
         3e:c3:b6:0a:9c:47:cb:85:bb:3c:50:57:03:ad:74:31:f4:61:
         7e:69:7f:95:18:f2:f2:db:0e:72:f8:4f:1e:5c:9c:56:0e:c3:
         cc:0a:54:ef:1d:fc:cc:2f:a2:b4:6b:15:81:52:f6:23:d6:01:
         49:b7:69:63:6c:6b:7b:5a:c3:19:53:e6:30:5f:66:7f:ea:56:
         87:df:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:40:03 2025 by rpki-client