Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          nZnttd+m+6gbSCeZy28OAh6iyIa+N5uBWPT0KBPAo4o=
Subject key identifier:   2E:5A:A9:8A:B3:42:E8:56:BA:0A:5A:24:49:93:FA:53:DD:4C:FB:DE
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       06B3E775D9D2B2889E333745D9894B43ADF0C3B9
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     262509
IP address blocks:        131.196.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:e7:75:d9:d2:b2:88:9e:33:37:45:d9:89:4b:43:ad:f0:c3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=2E5AA98AB342E856BA0A5A244993FA53DD4CFBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:60:30:25:5d:a1:ca:2d:47:f6:17:c0:7f:
                    34:49:85:f6:57:0b:3b:c0:32:5e:03:4b:6c:48:fa:
                    11:ff:79:10:a3:d1:83:55:43:27:6f:ee:b4:22:96:
                    b0:cb:3e:65:85:71:68:cb:65:84:34:85:ac:bc:04:
                    6e:8b:0a:fb:e6:81:79:4a:eb:67:a8:fa:c9:4a:56:
                    94:5a:93:7f:aa:cd:60:0c:59:d9:aa:77:9e:77:a6:
                    b2:cc:f4:18:fd:5c:13:27:2c:3b:76:99:fa:09:a3:
                    66:2d:ab:5f:ae:8f:b6:7f:f7:c5:7d:03:66:9a:24:
                    ce:2c:14:8e:6f:41:9f:aa:8b:51:82:43:93:78:a4:
                    d3:8d:90:c4:41:e9:ff:da:f0:45:5a:e0:b1:61:d6:
                    30:92:68:ab:19:37:4e:95:48:eb:fa:ea:c1:a8:5e:
                    ea:6e:c1:5f:87:b0:5e:b1:b7:d0:98:99:15:a4:ab:
                    1e:fa:1d:96:2c:f1:db:75:c1:29:3c:1c:ea:38:84:
                    b3:5c:20:e5:ae:66:29:da:1c:f8:72:40:d6:c9:5f:
                    a3:67:5d:c5:fb:6d:35:38:9e:c6:fa:d8:56:c4:4e:
                    f8:3a:ba:42:19:76:9e:86:90:d3:3e:f9:64:7c:b7:
                    14:17:dc:82:53:c5:c8:25:8e:47:88:35:35:52:e6:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:A9:8A:B3:42:E8:56:BA:0A:5A:24:49:93:FA:53:DD:4C:FB:DE
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:c6:d3:09:d6:1e:87:c2:65:4c:98:a5:97:5c:1a:32:2b:
         13:60:51:d7:bc:49:22:7b:d5:34:b1:37:36:e5:ab:79:b3:f2:
         3e:3c:53:97:fd:a7:2d:15:d9:18:68:73:f4:b6:cf:5e:7a:e8:
         73:96:0c:48:c6:55:b3:9a:9b:1f:4d:1d:00:e4:c7:5c:98:78:
         d6:97:36:e3:90:60:d9:34:cb:be:86:06:91:f4:21:b2:47:c8:
         ec:b7:c2:10:3e:79:1b:86:82:09:d1:c9:f5:15:49:c3:04:d0:
         ad:26:42:69:aa:9b:55:49:78:f6:4f:96:4d:2e:4f:a9:31:6f:
         4e:28:72:41:66:e2:01:97:ed:9c:4c:9a:f1:33:43:bd:5c:c7:
         c1:7f:06:96:f1:1a:3f:a0:c7:2b:ce:82:5c:0c:46:b8:28:10:
         4c:c7:96:1d:3d:00:44:c5:88:1f:c5:8a:26:f3:9b:4c:44:02:
         5b:66:c3:39:b9:dd:54:9c:67:41:be:eb:a7:f2:8d:d5:5c:cb:
         be:0b:4f:ae:f5:d5:63:82:1a:57:a7:c4:9a:0d:bd:f0:b6:44:
         da:03:00:cc:d3:c8:30:4e:4c:45:2b:22:6a:5b:5e:e9:8d:08:
         47:8d:a2:cb:6b:5e:4b:6a:4f:83:fd:ea:89:49:89:b7:09:a6:
         b9:f3:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:46:00 2025 by rpki-client