Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
File:                     3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (raw, json)
Hash identifier:          HrXIiluGxXHQPCxPdJNp4Myb1AAJl+WRtodfSFBWAsk=
Subject key identifier:   F4:2D:3E:A6:D0:22:BE:1E:7F:A4:C2:E3:75:6C:3E:33:0B:04:85:1B
Certificate issuer:       /CN=0788534AE206ADFCCDDCE737423FD789BFB281C4
Certificate serial:       4CBE89EBDD4F15D6F3E6965C5695FCE3EDE6CDC0
Authority key identifier: 07:88:53:4A:E2:06:AD:FC:CD:DC:E7:37:42:3F:D7:89:BF:B2:81:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
Signing time:             Tue 16 May 2023 13:24:19 +0000
ROA not before:           Tue 16 May 2023 13:19:19 +0000
ROA not after:            Tue 14 May 2024 13:24:19 +0000
asID:                     264354
IP address blocks:        131.108.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:be:89:eb:dd:4f:15:d6:f3:e6:96:5c:56:95:fc:e3:ed:e6:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0788534AE206ADFCCDDCE737423FD789BFB281C4
        Validity
            Not Before: May 16 13:19:19 2023 GMT
            Not After : May 14 13:24:19 2024 GMT
        Subject: CN=F42D3EA6D022BE1E7FA4C2E3756C3E330B04851B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:1b:de:c3:bb:e3:a4:7a:01:70:2c:cb:e2:
                    c1:31:fc:1c:29:cf:7b:0d:fa:af:2e:50:85:3b:33:
                    32:e5:4e:bc:b1:12:d3:b2:b3:c1:59:79:23:a3:ed:
                    77:20:00:71:ec:fc:50:01:81:9a:52:d6:60:b0:29:
                    ac:f0:73:81:a0:7f:93:b7:b5:94:fc:34:14:81:19:
                    a8:5f:66:7f:95:5e:1a:3f:54:92:fa:9a:a8:3e:7e:
                    4b:34:a2:e1:79:04:e9:6e:6d:09:62:c8:32:ed:4f:
                    d9:c5:a7:8b:52:c0:73:c6:ba:93:e5:c6:9e:64:b8:
                    84:9e:85:e9:49:7f:7e:1b:b0:97:9c:e3:57:33:3e:
                    34:44:17:b9:2c:2e:11:69:23:6d:18:6f:e3:f3:ee:
                    eb:23:42:28:00:73:0e:96:fc:82:a8:ca:0d:b4:34:
                    d2:4f:dd:90:d6:67:d5:4a:a4:5c:e4:b4:11:2b:a7:
                    9e:0d:2d:cd:10:d8:dc:a6:5c:83:1a:98:e2:57:c8:
                    4f:7c:bc:f1:fc:88:c8:98:72:4f:c8:10:4d:fc:af:
                    6c:61:48:94:44:87:63:5d:7a:5a:50:31:72:0a:0c:
                    12:9d:51:5b:f4:05:26:39:cc:65:f4:fd:92:9e:da:
                    ec:9d:ca:a4:9e:59:c5:88:63:0c:d3:a4:2e:ff:3e:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:3E:A6:D0:22:BE:1E:7F:A4:C2:E3:75:6C:3E:33:0B:04:85:1B
            X509v3 Authority Key Identifier:
                keyid:07:88:53:4A:E2:06:AD:FC:CD:DC:E7:37:42:3F:D7:89:BF:B2:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0788534AE206ADFCCDDCE737423FD789BFB281C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/0/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:df:ca:e4:78:a3:91:08:28:ff:6b:e6:43:cc:49:f2:16:
         30:73:7d:2b:14:05:d4:01:b5:52:f2:23:14:9d:82:a0:22:28:
         c0:89:c7:45:fe:be:a8:6a:d7:9b:6f:31:c9:38:8e:54:a5:71:
         9a:9b:12:87:37:68:1f:41:64:02:88:e3:85:56:9e:8d:24:85:
         2c:ff:7e:e8:f9:00:48:78:bc:13:8e:26:2d:75:18:02:d0:68:
         61:c0:19:e3:b5:30:5a:f1:47:10:e3:7e:37:66:af:33:78:eb:
         d6:35:0b:36:17:08:ef:40:8f:d8:c2:78:f3:6a:6e:7c:82:bb:
         38:78:c8:02:21:96:b8:9c:56:84:30:48:0b:92:46:76:1e:97:
         b1:b2:0e:05:ec:f7:76:86:33:cb:e9:f7:91:01:12:ae:6b:f3:
         03:94:e8:93:af:a9:8c:fc:1c:15:4f:01:94:13:15:50:d2:67:
         56:e0:34:c2:c7:8d:53:b9:75:01:ba:26:86:c6:b8:ef:6c:de:
         27:52:15:ed:66:9e:ab:82:3f:b7:5d:a0:8f:bc:83:4e:ef:d7:
         10:99:f8:99:1b:ea:2d:26:1f:ce:67:84:c7:16:72:b1:81:2c:
         9e:94:17:14:03:1f:c4:82:c3:bb:a1:07:aa:03:7a:05:57:a5:
         26:f9:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:37 2025 by rpki-client