Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32322d3232203d3e203631363538.roa
File:                     3133312e3130302e3231362e302f32322d3232203d3e203631363538.roa (raw, json)
Hash identifier:          275lhaiSGPWN/u5K65fZXoJXpu+HaFCSdnMm5+S4iYk=
Subject key identifier:   8C:F9:77:15:62:32:2B:0D:88:26:3C:DF:76:5B:77:9A:9C:C1:41:9C
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       0D1778C3144C8DA6F0F0E2C6E88D0D5020F320F8
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32322d3232203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:21:31 +0000
ROA not before:           Mon 09 Dec 2024 17:16:31 +0000
ROA not after:            Mon 08 Dec 2025 17:21:31 +0000
asID:                     61658
IP address blocks:        131.100.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:17:78:c3:14:4c:8d:a6:f0:f0:e2:c6:e8:8d:0d:50:20:f3:20:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:16:31 2024 GMT
            Not After : Dec  8 17:21:31 2025 GMT
        Subject: CN=8CF9771562322B0D88263CDF765B779A9CC1419C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:08:d6:d3:f8:93:8e:a6:14:73:a6:72:c2:
                    0e:4f:37:99:ee:a1:6e:73:73:df:1f:c7:a8:89:22:
                    94:32:be:cc:17:c0:ef:22:99:6e:fd:59:71:06:30:
                    65:50:65:7b:59:9c:34:35:71:4f:6a:12:0a:5c:a5:
                    80:9c:22:8f:a5:98:6c:a1:18:4e:57:98:4e:e9:c4:
                    d6:f0:bc:82:5a:3a:20:a2:0e:d9:db:a9:ba:c5:95:
                    e8:24:2b:8d:8e:0f:29:75:88:96:3c:6e:d2:78:ca:
                    a1:c8:74:65:60:ff:12:12:c8:8a:30:54:e4:6e:a8:
                    13:60:63:6b:46:3f:21:52:c3:19:68:cb:4e:d8:f5:
                    c3:83:7e:60:5c:9e:11:07:eb:99:44:ef:8f:42:6e:
                    9c:04:58:c9:ad:77:6a:77:16:16:13:77:ed:b0:c1:
                    8f:98:8e:9d:45:1d:20:53:7e:3a:c7:98:0d:cf:2b:
                    cc:c2:e6:04:68:6f:66:1d:98:b8:08:b2:5b:19:4d:
                    e2:fd:4c:5d:ba:d0:96:d3:ac:32:ba:b8:32:85:88:
                    af:d4:ff:c8:fd:08:9b:a0:98:64:eb:7f:7e:60:71:
                    1c:49:cb:c8:92:ce:52:7a:eb:b3:c4:de:a7:41:1d:
                    b9:3c:e2:82:7e:88:b5:2c:9c:4f:ce:44:81:f3:d3:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:77:15:62:32:2B:0D:88:26:3C:DF:76:5B:77:9A:9C:C1:41:9C
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231362e302f32322d3232203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:51:17:70:c7:1e:4c:40:cc:e4:73:8d:59:3b:1c:4b:9d:
         25:7c:0d:12:8a:72:e2:3d:d8:20:42:64:e3:0c:a6:b4:81:b8:
         7c:65:13:73:f9:4d:e2:d1:73:be:1e:79:10:51:45:23:16:4d:
         44:ba:0f:dc:ff:cf:9c:b0:e3:47:7a:2d:de:d4:9a:80:13:85:
         e7:5a:f9:54:6b:20:0a:8b:5f:52:0e:fd:98:9a:df:83:4f:9a:
         9d:05:9f:b4:63:5f:6b:17:a8:4e:a0:8c:c0:fe:92:8f:c5:a2:
         91:1f:36:0c:d0:15:df:6e:f8:8a:78:b4:4e:af:0e:a8:f8:6d:
         c0:9a:71:3e:49:db:c7:e8:34:19:4f:27:aa:43:0b:8f:91:4e:
         7c:b7:9b:24:c2:cf:0b:3a:b2:9e:80:6a:52:ac:fb:93:15:03:
         49:5c:d0:ac:33:4d:48:d0:06:13:6d:29:2c:ea:85:22:43:6f:
         98:f6:fa:dc:dd:3f:9e:bf:33:fd:8b:bf:7e:a3:df:76:23:8f:
         0a:ee:74:82:a2:ed:83:40:2f:d6:c6:c5:ec:81:91:24:97:b6:
         35:e6:c5:c1:8d:80:e3:05:28:81:da:c3:c8:40:1d:f5:bd:2b:
         ce:18:1e:88:f6:23:2d:03:b3:d9:c9:0c:0f:16:a4:51:23:f3:
         47:eb:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:31 2025 by rpki-client