Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa
File:                     3133312e3130302e33322e302f32322d3234203d3e203631373436.roa (raw, json)
Hash identifier:          0StbOz29tZNKD49OuZfPeU0HdZwZdza1gmXJpTYjleQ=
Subject key identifier:   94:E4:95:8C:B4:52:9B:D2:7B:DB:E4:1E:AF:CC:13:12:D8:EF:9F:E0
Certificate issuer:       /CN=B10A8598B44772B93158A2AC959BE76B0DF306DF
Certificate serial:       71D1784D410D7F5A3054CCBF223DCBA12D2D8558
Authority key identifier: B1:0A:85:98:B4:47:72:B9:31:58:A2:AC:95:9B:E7:6B:0D:F3:06:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa
Signing time:             Tue 26 Jul 2022 19:00:00 +0000
ROA not before:           Tue 26 Jul 2022 18:55:00 +0000
ROA not after:            Wed 26 Jul 2023 19:00:00 +0000
asID:                     61746
IP address blocks:        131.100.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d1:78:4d:41:0d:7f:5a:30:54:cc:bf:22:3d:cb:a1:2d:2d:85:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10A8598B44772B93158A2AC959BE76B0DF306DF
        Validity
            Not Before: Jul 26 18:55:00 2022 GMT
            Not After : Jul 26 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:7b:b4:5d:bc:9c:9a:61:b2:ce:7d:4c:01:
                    61:3e:7a:bf:6e:30:5b:6b:87:06:16:b5:63:01:f7:
                    e4:50:07:ca:cd:55:02:62:59:a2:87:fb:fa:18:08:
                    83:98:2c:55:86:35:d6:fd:f2:b3:0e:b8:2d:57:0d:
                    41:71:2d:00:39:1d:76:40:9e:9b:2c:c8:39:a1:8d:
                    14:91:ab:2a:67:e0:1d:78:72:07:d6:05:56:7b:dc:
                    0e:69:b8:de:e7:b7:93:a4:5e:21:cc:17:4e:6f:be:
                    eb:5a:4d:9d:88:9c:8d:07:8c:70:76:af:55:44:29:
                    3e:71:7f:6a:4d:39:e3:d6:be:86:65:3d:7a:9d:e3:
                    2f:93:f9:ca:bf:a1:1e:75:17:63:f3:3d:51:b7:02:
                    4c:e9:2c:8d:25:ee:9f:32:70:ca:21:8d:31:cc:b0:
                    f1:5d:fa:9e:01:3b:0d:a5:86:eb:cf:1a:5f:5c:4d:
                    2e:26:25:16:91:c7:41:5c:f4:5e:8a:29:28:bb:17:
                    fc:3c:f7:37:d3:51:41:10:31:06:9b:2b:ba:73:49:
                    b2:28:ab:6f:f0:2c:91:40:78:c1:8f:d1:7d:90:fb:
                    2a:d9:d1:29:5e:93:1a:8f:b3:8f:fb:1a:e0:e5:e5:
                    c4:a5:57:8b:23:82:af:c0:be:81:86:f1:51:93:5f:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:95:8C:B4:52:9B:D2:7B:DB:E4:1E:AF:CC:13:12:D8:EF:9F:E0
            X509v3 Authority Key Identifier:
                keyid:B1:0A:85:98:B4:47:72:B9:31:58:A2:AC:95:9B:E7:6B:0D:F3:06:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B10A8598B44772B93158A2AC959BE76B0DF306DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AP5EwRomHw8FXhG5cm8ed4yvb2eVepqqBVy7hayG6bG1/0/3133312e3130302e33322e302f32322d3234203d3e203631373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:5f:5c:b8:e1:c0:60:19:73:0c:81:2e:c5:30:6c:5b:8b:f3:
         18:98:d8:ee:90:ae:4c:e6:73:01:ec:f4:f9:09:04:b1:66:4f:
         83:73:9d:0e:85:23:d9:8c:2a:c7:b7:52:f5:e4:57:21:ac:92:
         16:73:7e:67:95:dd:1a:e9:2a:9e:25:84:9f:8a:18:e8:0f:30:
         6d:27:4f:c9:b1:fd:9b:0f:03:d9:e2:74:a3:7e:7d:64:1d:0d:
         db:ba:6c:f5:39:f8:71:ba:e6:82:ea:d9:e6:a4:c4:1f:3a:f1:
         b8:75:e1:c2:cb:ca:a9:35:f2:07:9c:ad:81:7b:69:64:4f:39:
         1a:3b:df:cf:e1:f6:3b:5f:08:23:75:ea:ac:37:a0:1e:65:dc:
         df:66:bc:2b:b6:e1:cf:ac:af:3a:c6:d0:7c:90:94:94:e6:cc:
         87:b7:d0:3b:d8:db:88:c7:73:9b:14:18:28:d0:3c:86:22:db:
         02:e8:a8:95:e6:c5:6a:be:9e:d1:e8:b6:67:ed:7d:60:eb:cc:
         a3:b4:72:12:ea:b4:0c:5c:92:36:eb:51:d3:bf:f7:8c:ca:33:
         7f:a3:ef:5c:d2:ef:32:27:1b:d6:e1:83:c0:0b:6f:52:be:ee:
         08:96:7f:b8:13:ee:73:f0:38:36:af:a9:b5:6e:d2:0b:53:e4:
         95:5a:d3:d8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUcdF4TUENf1owVMy/Ij3LoS0thVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwQTg1OThCNDQ3NzJCOTMxNThBMkFDOTU5QkU3NkIw
REYzMDZERjAeFw0yMjA3MjYxODU1MDBaFw0yMzA3MjYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTI3MjdCQjQ1REJDOUM5QTYx
QjJDRTdENEMwMTYxM0U3QUJGNkUzMDVCNkI4NzA2MTZCNTYzMDFGN0U0NTAwN0NB
Q0Q1NTAyNjI1OUEyODdGQkZBMTgwODgzOTgyQzU1ODYzNUQ2RkRGMkIzMEVCODJE
NTcwRDQxNzEyRDAwMzkxRDc2NDA5RTlCMkNDODM5QTE4RDE0OTFBQjJBNjdFMDFE
Nzg3MjA3RDYwNTU2N0JEQzBFNjlCOERFRTdCNzkzQTQ1RTIxQ0MxNzRFNkZCRUVC
NUE0RDlEODg5QzhEMDc4QzcwNzZBRjU1NDQyOTNFNzE3RjZBNEQzOUUzRDZCRTg2
NjUzRDdBOURFMzJGOTNGOUNBQkZBMTFFNzUxNzYzRjMzRDUxQjcwMjRDRTkyQzhE
MjVFRTlGMzI3MENBMjE4RDMxQ0NCMEYxNURGQTlFMDEzQjBEQTU4NkVCQ0YxQTVG
NUM0RDJFMjYyNTE2OTFDNzQxNUNGNDVFOEEyOTI4QkIxN0ZDM0NGNzM3RDM1MTQx
MTAzMTA2OUIyQkJBNzM0OUIyMjhBQjZGRjAyQzkxNDA3OEMxOEZEMTdEOTBGQjJB
RDlEMTI5NUU5MzFBOEZCMzhGRkIxQUUwRTVFNUM0QTU1NzhCMjM4MkFGQzBCRTgx
ODZGMTUxOTM1RjAxMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4nJ7tF28nJphss59TAFhPnq/bjBba4cGFrVjAffkUAfKzVUCYlmi
h/v6GAiDmCxVhjXW/fKzDrgtVw1BcS0AOR12QJ6bLMg5oY0UkasqZ+AdeHIH1gVW
e9wOabje57eTpF4hzBdOb77rWk2diJyNB4xwdq9VRCk+cX9qTTnj1r6GZT16neMv
k/nKv6EedRdj8z1RtwJM6SyNJe6fMnDKIY0xzLDxXfqeATsNpYbrzxpfXE0uJiUW
kcdBXPReiikouxf8PPc301FBEDEGmyu6c0myKKtv8CyRQHjBj9F9kPsq2dEpXpMa
j7OP+xrg5eXEpVeLI4KvwL6BhvFRk18BKQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJTklYy0UpvSe9vkHq/MExLY75/gMB8GA1UdIwQYMBaAFLEKhZi0R3K5MViirJWb
52sN8wbfMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FQNUV3Um9tSHc4Rlho
RzVjbThlZDR5dmIyZVZlcHFxQlZ5N2hheUc2YkcxLzAvQjEwQTg1OThCNDQ3NzJC
OTMxNThBMkFDOTU5QkU3NkIwREYzMDZERi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CMTBBODU5OEI0NDc3MkI5MzE1OEEyQUM5NTlCRTc2QjBERjMw
NkRGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BUDVFd1JvbUh3OEZYaEc1Y204
ZWQ0eXZiMmVWZXBxcUJWeTdoYXlHNmJHMS8wLzMxMzMzMTJlMzEzMDMwMmUzMzMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3MzQzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNk
IDANBgkqhkiG9w0BAQsFAAOCAQEAvV9cuOHAYBlzDIEuxTBsW4vzGJjY7pCuTOZz
Aez0+QkEsWZPg3OdDoUj2Ywqx7dS9eRXIaySFnN+Z5XdGukqniWEn4oY6A8wbSdP
ybH9mw8D2eJ0o359ZB0N27ps9Tn4cbrmgurZ5qTEHzrxuHXhwsvKqTXyB5ytgXtp
ZE85Gjvfz+H2O18II3XqrDegHmXc32a8K7bhz6yvOsbQfJCUlObMh7fQO9jbiMdz
mxQYKNA8hiLbAuiolebFar6e0ei2Z+19YOvMo7RyEuq0DFySNutR07/3jMozf6Pv
XNLvMicb1uGDwAtvUr7uCJZ/uBPuc/A4Nq+ptW7SC1PklVrT2A==
-----END CERTIFICATE-----
Generated at Wed Jun 18 14:14:42 2025 by rpki-client