Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa
File:                     3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa (raw, json)
Hash identifier:          8gsnGk8+IpprGEceWKCi8aB4XiIR+3wRyia0r3iTkN0=
Subject key identifier:   F9:DA:55:86:84:1E:D8:0D:4C:54:5C:4B:E7:04:72:DF:F3:AF:8D:B2
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       20920B671722725B0EB189E3EE8ECC9E0054FFD9
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa
Signing time:             Tue 03 Jun 2025 13:00:44 +0000
ROA not before:           Tue 03 Jun 2025 12:55:44 +0000
ROA not after:            Tue 02 Jun 2026 13:00:44 +0000
asID:                     264320
IP address blocks:        138.122.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:0b:67:17:22:72:5b:0e:b1:89:e3:ee:8e:cc:9e:00:54:ff:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Jun  3 12:55:44 2025 GMT
            Not After : Jun  2 13:00:44 2026 GMT
        Subject: CN=F9DA5586841ED80D4C545C4BE70472DFF3AF8DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:5c:66:19:0c:3c:07:ec:13:90:05:d0:e5:
                    e1:ea:92:a0:ad:c0:fa:ad:8a:2a:e6:7b:e1:1d:1d:
                    45:32:e9:0e:29:b8:d9:63:63:27:99:7f:4b:e8:f9:
                    f1:ff:31:01:60:1d:d7:f1:09:f4:3a:69:14:d0:f9:
                    9a:f4:db:41:e8:1c:ac:3f:10:24:15:c2:68:68:92:
                    41:9e:33:3b:cd:34:de:ba:98:de:73:8d:27:50:a0:
                    71:a5:01:8c:86:c8:44:9c:88:e8:6e:25:29:20:38:
                    92:b5:1b:6a:a8:9b:1c:90:f0:3d:b0:c2:3d:3a:34:
                    8d:24:26:7f:18:7e:55:98:14:67:0f:c4:5f:b4:65:
                    dc:9a:ec:70:8c:4c:f6:ae:ab:58:5c:72:fe:4b:8f:
                    4c:45:06:4d:b7:78:26:44:a9:ba:24:6f:7f:85:c2:
                    bc:2f:68:be:b9:7a:08:30:1a:ce:c9:08:fe:f8:cf:
                    77:dc:44:74:ef:5f:b7:6f:95:60:84:f7:34:ca:a9:
                    5f:91:4d:eb:23:bd:35:f2:88:75:40:b7:0f:16:3d:
                    88:ac:db:26:34:be:5c:d6:11:74:bc:4b:9b:8d:18:
                    f3:81:95:46:d8:dd:8e:23:30:89:9a:5b:ed:98:c9:
                    bf:51:bf:1b:f3:1d:7e:06:31:3a:52:1f:78:73:83:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:55:86:84:1E:D8:0D:4C:54:5C:4B:E7:04:72:DF:F3:AF:8D:B2
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:b3:42:c1:1d:21:a2:47:d0:ce:5f:19:09:31:ca:21:60:
         69:0e:56:33:5f:21:b5:e3:a9:c9:f5:fe:ec:f1:57:19:c2:2c:
         29:0f:73:38:62:88:5d:03:98:f2:06:96:76:eb:3d:30:f4:6d:
         d0:ea:75:7f:59:3b:b1:63:1e:66:10:c7:ea:d3:0a:bc:78:bf:
         32:2f:6b:d4:b1:98:56:88:8a:07:02:5c:77:9b:65:13:6a:46:
         60:36:5a:e1:41:76:70:bf:7f:a3:13:dc:cc:aa:50:6c:d8:13:
         f8:b1:78:05:0e:ba:77:26:2f:29:80:87:c2:e0:d1:1e:29:66:
         70:30:9c:9a:07:e7:b9:ab:40:bb:58:bf:ad:6d:36:b2:26:9a:
         e0:04:ac:10:9c:3b:c7:d7:d0:5b:0d:5d:55:dd:50:80:49:0e:
         88:fb:6f:03:48:d2:63:15:75:76:5a:5b:b3:1b:c3:63:68:7a:
         c6:b2:87:6f:7a:f5:23:28:ee:1e:b8:90:4f:a9:54:fd:a3:fa:
         5d:df:8c:d8:3c:03:37:75:0f:7c:5d:ac:33:14:47:71:d0:b0:
         8d:66:f2:5b:0c:f4:7f:a0:25:d9:7b:96:1f:2b:d4:36:d1:b4:
         b9:64:01:b5:17:4e:cb:4e:21:0f:75:3e:16:64:d2:a7:c8:e7:
         d3:34:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:05 2025 by rpki-client