Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa
File:                     3133312e37322e3134342e302f32322d3234203d3e203238363730.roa (raw, json)
Hash identifier:          DDYbUZ/G5/VfQZctagP1EkWJOnq7ubdr8WJh/py7js8=
Subject key identifier:   EE:71:D4:E6:40:AC:1E:30:DF:E0:B0:C7:35:0F:0B:0B:1E:98:FE:9B
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       50E181BAEDAEA03787A1D5D6EBAD1A8D75EEFEB0
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa
Signing time:             Tue 30 Jul 2024 15:03:20 +0000
ROA not before:           Tue 30 Jul 2024 14:58:20 +0000
ROA not after:            Tue 29 Jul 2025 15:03:20 +0000
asID:                     28670
IP address blocks:        131.72.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e1:81:ba:ed:ae:a0:37:87:a1:d5:d6:eb:ad:1a:8d:75:ee:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jul 30 14:58:20 2024 GMT
            Not After : Jul 29 15:03:20 2025 GMT
        Subject: CN=EE71D4E640AC1E30DFE0B0C7350F0B0B1E98FE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:2a:9d:6c:a4:ed:3d:fe:8b:b4:2f:98:6e:
                    9b:a3:a4:8d:33:c2:02:0c:f9:76:37:49:52:80:44:
                    c3:66:e2:11:82:86:58:1a:a8:0d:a8:11:b6:00:9e:
                    de:69:10:58:0b:25:ad:10:39:7a:1d:7c:bd:8a:b4:
                    25:48:f6:b8:cb:87:c6:6f:e2:10:7d:b0:0a:bd:45:
                    de:58:9e:6b:fb:6c:19:c3:f0:9f:77:ce:e2:ff:52:
                    ce:d0:dd:ad:c4:8c:b4:08:36:88:87:73:4c:37:7b:
                    58:cb:dd:a6:42:b8:df:4b:52:92:cf:8f:4d:74:ef:
                    13:c7:81:16:27:b3:ee:ba:be:8d:b4:50:dc:36:f8:
                    0d:d4:e7:55:66:d0:93:57:6f:f9:75:51:56:5c:80:
                    38:fd:b5:6b:7b:26:c4:71:18:de:2f:8c:16:7f:e7:
                    4f:43:be:e2:75:db:76:72:82:85:a8:0d:c3:94:59:
                    90:ed:ae:99:7c:71:79:15:11:1f:36:e9:c0:0b:ab:
                    84:58:c9:53:27:97:12:48:5c:8a:45:3f:17:a2:10:
                    6a:87:04:e1:67:1a:f2:e2:e1:8b:9a:64:5b:89:9b:
                    e4:8f:64:2e:22:05:a7:bc:a8:36:28:17:77:2f:f7:
                    31:fb:7c:51:36:0c:5a:53:b9:8b:4c:b2:94:41:4a:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:71:D4:E6:40:AC:1E:30:DF:E0:B0:C7:35:0F:0B:0B:1E:98:FE:9B
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134342e302f32322d3234203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:b9:d4:2a:65:af:98:4c:97:fc:b7:c4:99:4d:11:62:db:87:
         1e:ea:53:c4:db:c7:33:9c:7c:7c:fd:8d:ed:ca:3c:e5:6a:3a:
         72:3c:8f:83:3b:aa:34:4f:d0:e4:2c:25:ab:5d:e5:72:12:52:
         a5:1b:4b:83:af:47:db:87:0c:4d:ea:f3:4b:5c:5d:56:50:4f:
         86:6b:f7:d2:a0:8d:97:32:e4:d6:2c:a2:87:04:47:81:94:11:
         eb:f5:d4:ae:18:da:12:07:6b:41:53:76:81:bd:3b:6a:c2:9b:
         50:12:3a:94:2d:d7:45:4b:67:76:c4:02:bc:a8:f3:35:7a:88:
         ec:1c:bb:c0:7c:16:55:32:f0:f2:b5:1c:db:b8:df:80:6c:62:
         8a:8d:91:97:e8:09:45:0c:1d:2b:a1:14:5b:04:b5:1f:93:62:
         b5:a5:ae:fd:b1:d1:ca:76:64:fa:70:48:95:45:dd:0c:c5:4e:
         8c:68:1d:4d:5f:d8:35:a6:75:6a:94:f7:27:23:a0:55:cf:08:
         58:df:0c:70:b4:f2:17:b8:77:09:f4:e6:4b:e2:3c:bd:ef:f1:
         a9:ae:72:38:bb:23:2e:19:a0:53:f6:33:0c:09:a7:01:69:e9:
         7d:ac:23:9d:00:7e:1b:77:07:e6:f9:9a:7a:7a:29:35:b7:95:
         7e:91:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:06:51 2025 by rpki-client