Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3133382e3132312e3233322e302f32322d3234203d3e203533303435.roa
File:                     3133382e3132312e3233322e302f32322d3234203d3e203533303435.roa (raw, json)
Hash identifier:          sswlvde7MmEz/6+1H+vi2qq2ZIHmELtL+oV+jvn9Bl0=
Subject key identifier:   BF:73:36:4F:C3:94:A5:61:F7:C1:9A:27:4A:A3:5A:3F:4E:14:E7:20
Certificate issuer:       /CN=9F75D3A5C07BE241B010DE5927D5169CCCA4E848
Certificate serial:       23F360CE419A01F64A469E1C46CF3CC7D6B87248
Authority key identifier: 9F:75:D3:A5:C0:7B:E2:41:B0:10:DE:59:27:D5:16:9C:CC:A4:E8:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3133382e3132312e3233322e302f32322d3234203d3e203533303435.roa
Signing time:             Mon 15 May 2023 14:31:06 +0000
ROA not before:           Mon 15 May 2023 14:26:06 +0000
ROA not after:            Mon 13 May 2024 14:31:06 +0000
asID:                     53045
IP address blocks:        138.121.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:60:ce:41:9a:01:f6:4a:46:9e:1c:46:cf:3c:c7:d6:b8:72:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F75D3A5C07BE241B010DE5927D5169CCCA4E848
        Validity
            Not Before: May 15 14:26:06 2023 GMT
            Not After : May 13 14:31:06 2024 GMT
        Subject: CN=BF73364FC394A561F7C19A274AA35A3F4E14E720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:9b:2a:05:a4:22:ce:f8:ac:70:ff:1a:2b:
                    c4:42:09:aa:f4:b9:d6:5d:0d:0b:4e:60:51:a1:01:
                    91:d9:69:62:97:64:7e:39:18:cd:02:4d:4b:b0:8b:
                    db:b3:c3:13:54:b4:df:e1:c2:6e:b9:7a:0f:72:1e:
                    42:05:09:d8:79:98:37:ff:18:f9:33:c8:50:92:9f:
                    b8:c3:f9:21:ca:f7:72:f1:2c:00:7f:98:5b:c9:10:
                    fd:4e:03:02:3e:d8:2d:dd:71:c3:9b:e7:1a:b0:10:
                    d2:d0:08:26:8c:d6:61:c2:88:50:12:7e:7f:c4:6a:
                    51:a8:3a:3e:5c:b3:e4:10:fe:82:8a:6e:7f:a3:a7:
                    a8:a7:07:f2:f9:04:4c:7a:83:c0:c6:e4:52:c6:98:
                    ee:5d:ce:d4:9c:98:c6:6c:99:68:43:0b:52:95:d1:
                    01:87:bb:46:26:dc:e1:69:ee:06:56:d1:65:37:c2:
                    f3:c5:44:06:3b:d5:a2:5e:93:27:ef:a2:42:22:56:
                    9d:68:ce:8c:e5:2b:8a:74:28:a9:19:62:a1:fd:fd:
                    d5:9a:7b:b1:e6:af:54:7e:54:c0:c3:8e:97:37:ed:
                    56:28:fc:8a:36:7a:f7:39:b5:d8:c8:f7:f4:d9:39:
                    7c:a8:55:f7:23:3b:ad:70:d6:7e:e2:d2:cb:5f:46:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:73:36:4F:C3:94:A5:61:F7:C1:9A:27:4A:A3:5A:3F:4E:14:E7:20
            X509v3 Authority Key Identifier:
                keyid:9F:75:D3:A5:C0:7B:E2:41:B0:10:DE:59:27:D5:16:9C:CC:A4:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F75D3A5C07BE241B010DE5927D5169CCCA4E848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/3133382e3132312e3233322e302f32322d3234203d3e203533303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:c3:ba:8c:b9:9f:03:c4:85:56:76:f2:30:dc:dc:b7:3d:
         df:e1:7f:dd:5f:ec:3f:15:11:2b:6a:bf:6b:3b:d9:6e:aa:52:
         d1:e9:c3:f4:ba:37:9c:ea:6b:3b:2c:41:c3:33:8d:7c:c9:ce:
         a7:08:01:3f:58:bf:a7:6b:01:fd:db:c5:d3:74:1d:72:6e:4b:
         07:69:ad:46:91:e0:2f:4f:f4:ec:83:09:2c:bc:bc:b4:97:a2:
         0a:d8:3c:2b:cb:d1:8f:80:92:f7:92:cc:e4:ff:73:8f:dc:43:
         f2:d8:f8:9b:17:76:f8:ae:53:d9:60:dd:32:8a:de:7a:d7:d0:
         8a:28:17:74:a3:78:4d:a0:c1:6c:51:c6:71:4c:59:f6:49:82:
         4a:61:22:ae:01:04:a5:9a:89:f4:57:a8:ce:a5:db:a2:43:f6:
         38:03:cb:19:d8:61:92:af:69:ba:51:1d:2e:a8:bb:3b:bc:f1:
         6e:fc:6a:26:e8:39:2c:c6:d6:6f:45:61:10:90:df:de:ca:e5:
         90:48:c4:c9:2b:7d:49:f6:d8:85:88:da:b5:f0:ac:a5:26:1d:
         09:59:c4:6d:aa:e8:25:79:73:2e:d8:aa:52:55:5c:57:f8:73:
         bd:16:67:34:d6:9b:d7:3d:27:fd:45:0c:ef:94:a3:fc:dc:4b:
         71:f6:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:47:33 2025 by rpki-client