Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231372e302f32342d3234203d3e203631363538.roa
File:                     3133312e3130302e3231372e302f32342d3234203d3e203631363538.roa (raw, json)
Hash identifier:          xna9HhD4M4eHAvUD5+X07wg4tLvg5J37DKMiZErljSE=
Subject key identifier:   58:57:16:E1:84:6A:02:83:6E:5D:65:23:84:7C:3A:C4:3E:E9:D2:41
Certificate issuer:       /CN=6DF0863609094DB13EEED7D99E00A084A7C95256
Certificate serial:       1DD6EB515C42133032955C3C0DD5593EABA75A16
Authority key identifier: 6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231372e302f32342d3234203d3e203631363538.roa
Signing time:             Mon 09 Dec 2024 17:22:35 +0000
ROA not before:           Mon 09 Dec 2024 17:17:35 +0000
ROA not after:            Mon 08 Dec 2025 17:22:35 +0000
asID:                     61658
IP address blocks:        131.100.217.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d6:eb:51:5c:42:13:30:32:95:5c:3c:0d:d5:59:3e:ab:a7:5a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF0863609094DB13EEED7D99E00A084A7C95256
        Validity
            Not Before: Dec  9 17:17:35 2024 GMT
            Not After : Dec  8 17:22:35 2025 GMT
        Subject: CN=585716E1846A02836E5D6523847C3AC43EE9D241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:da:54:8b:f5:a9:b7:a5:cb:e0:2d:ef:46:
                    32:a3:47:62:41:07:04:98:59:b3:1e:57:22:3a:d8:
                    7a:e7:8d:dd:c3:31:4a:8b:0c:b1:95:c9:49:dc:6c:
                    f1:4c:2b:52:74:4a:0d:7b:cd:18:1b:bb:41:21:b7:
                    58:a2:03:66:e3:41:0e:b2:c3:69:16:97:70:b0:99:
                    07:f8:c9:a7:a3:63:43:ac:cc:77:53:1f:dc:b7:f4:
                    ae:5e:9a:28:f1:d4:73:4f:d5:ec:5c:87:3d:83:fb:
                    b7:42:24:45:e8:55:51:bf:0d:39:fc:b7:e9:58:5f:
                    22:ec:14:20:93:25:9b:ff:84:1e:02:df:1a:8d:e7:
                    ed:3b:a7:f8:aa:52:97:5c:ce:b0:2e:0b:6d:64:8b:
                    f4:87:76:75:5b:ed:62:54:85:99:86:74:cd:ef:9c:
                    9a:e3:1e:9f:e6:20:7d:54:69:3b:84:80:4c:26:41:
                    2d:18:5d:84:bf:ca:43:a5:ba:a1:78:42:84:fa:29:
                    3f:a6:1a:ff:a2:11:46:1e:af:6a:30:d9:a5:4d:a2:
                    16:30:78:24:38:d4:38:d9:ce:17:3e:81:68:1b:9e:
                    8f:f3:66:78:c1:91:49:97:66:9e:da:11:bf:6b:71:
                    17:d4:12:8e:f8:63:90:76:09:1e:ae:9f:ea:5b:a2:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:16:E1:84:6A:02:83:6E:5D:65:23:84:7C:3A:C4:3E:E9:D2:41
            X509v3 Authority Key Identifier:
                keyid:6D:F0:86:36:09:09:4D:B1:3E:EE:D7:D9:9E:00:A0:84:A7:C9:52:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/6DF0863609094DB13EEED7D99E00A084A7C95256.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DF0863609094DB13EEED7D99E00A084A7C95256.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhNcmFFLwr2Y54Dcqgp2mMvB6QLcV4b3sdKbVtGB8xT/0/3133312e3130302e3231372e302f32342d3234203d3e203631363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:be:b0:35:80:7a:f7:68:d0:4a:69:16:bc:bf:cf:89:60:
         c8:fc:85:6c:84:db:eb:71:b5:72:a2:80:71:30:ef:23:39:b4:
         57:d5:e7:0c:90:33:5a:ac:31:e2:37:8e:ef:cd:70:27:6e:04:
         1e:99:e1:1f:41:8d:0d:72:9c:6c:83:19:82:df:fa:fc:a5:5a:
         d4:98:f6:d1:c4:77:de:f8:a0:b0:01:90:da:75:41:c3:95:0b:
         c7:52:09:ff:d4:3a:b9:51:f4:10:9f:a3:1b:de:8c:3d:42:4b:
         90:0c:f4:ae:00:88:6e:82:83:b1:56:56:82:b1:cb:e0:cb:53:
         f6:27:e5:cd:4f:4d:83:c2:48:dd:79:2d:29:c0:d4:26:63:4a:
         20:bf:8b:ce:64:b1:e2:7b:09:eb:52:ee:2f:ac:bd:d8:5b:12:
         6c:14:01:29:6b:3c:eb:ee:7c:33:16:f2:16:45:a5:65:c2:7b:
         1d:70:49:83:71:b4:82:fb:5e:b6:f1:9f:b8:56:65:87:79:ca:
         1b:1e:8d:e8:d2:fb:21:be:01:41:65:67:25:0c:67:f4:59:10:
         41:e9:d3:55:28:8b:c6:05:01:ea:d9:18:3c:c5:94:d9:41:31:
         14:7b:86:12:c5:98:95:0e:07:19:98:3e:e7:d5:8e:46:43:2d:
         de:77:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:16 2025 by rpki-client