Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          AEyZr96I8K2620d2tpNqkuYsHhp9pXDrLMn4bygzfFo=
Subject key identifier:   EB:B4:1C:EB:9B:E6:AF:52:F0:24:AD:B3:41:E0:30:2D:76:9C:1A:88
Certificate issuer:       /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial:       6776B6C0838A5F08E3DA99A64E2C48A985491D2A
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 04 Dec 2024 03:40:04 +0000
ROA not before:           Wed 04 Dec 2024 03:35:04 +0000
ROA not after:            Wed 03 Dec 2025 03:40:04 +0000
asID:                     264550
IP address blocks:        138.0.138.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:76:b6:c0:83:8a:5f:08:e3:da:99:a6:4e:2c:48:a9:85:49:1d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
        Validity
            Not Before: Dec  4 03:35:04 2024 GMT
            Not After : Dec  3 03:40:04 2025 GMT
        Subject: CN=EBB41CEB9BE6AF52F024ADB341E0302D769C1A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:a0:8d:5e:18:ac:d7:4b:5a:07:b1:69:2c:
                    51:7a:73:e3:4e:35:b0:1a:f5:12:97:b7:25:76:76:
                    bf:e9:b2:ed:6d:22:7a:7d:9b:a3:89:67:9a:e3:2e:
                    55:c7:e1:70:46:db:6a:9f:d2:cd:2f:5f:e9:c5:37:
                    38:67:46:98:55:11:52:fe:47:24:32:cc:4c:37:a7:
                    dc:1f:fe:20:41:81:df:86:3b:55:52:45:9e:de:df:
                    74:ac:40:e6:e6:45:4c:71:c2:44:a3:96:18:cc:2e:
                    85:1c:fa:c7:14:d7:38:bc:c5:2b:82:c8:ee:db:79:
                    1e:19:21:c5:51:b6:38:2c:a0:72:81:70:10:07:0c:
                    15:cd:83:f3:95:f5:ae:94:a2:3f:89:75:6c:55:cc:
                    d8:8c:b9:08:e9:11:da:58:d3:15:85:d9:24:c0:94:
                    b5:48:10:75:fc:2f:2f:49:36:46:0b:61:15:3e:8a:
                    e5:01:99:a3:b6:08:15:c7:9d:3f:15:c7:5e:a2:71:
                    cc:73:e1:cc:f3:76:10:6a:ee:42:b8:58:12:6d:ac:
                    15:16:a4:12:75:48:5c:85:61:16:b2:78:91:ff:f5:
                    23:15:fa:80:82:79:3b:9f:3c:c8:f6:c8:d9:f0:94:
                    15:77:dd:2f:c3:f2:c3:8d:63:62:de:8f:5d:24:8f:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:1C:EB:9B:E6:AF:52:F0:24:AD:B3:41:E0:30:2D:76:9C:1A:88
            X509v3 Authority Key Identifier:
                keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:57:d2:48:0a:7d:5b:42:08:77:68:6a:29:4e:17:ff:0e:90:
         60:7c:5e:c7:8e:fb:27:89:f7:60:ae:d9:ba:b6:c8:38:77:25:
         00:f9:4b:71:fa:d9:49:66:30:b9:5c:70:9f:94:79:b0:04:a9:
         ca:62:4a:44:d4:f6:14:0f:07:22:ca:04:e9:8f:b6:c2:78:d3:
         93:c1:18:a8:a3:5e:f8:80:ee:f9:3f:ff:c2:c7:28:46:40:31:
         05:a8:f0:36:88:55:0e:89:f1:e2:3f:c8:2f:b0:ce:cb:c4:a7:
         a5:e3:d2:e9:e0:bb:c1:34:1e:35:34:42:73:d6:20:98:e7:b0:
         9c:eb:ab:6d:f7:4e:5d:4e:b4:95:07:f0:82:8b:1d:47:d5:18:
         07:ef:2b:73:6a:f0:df:12:2e:9f:de:c6:23:30:ce:c3:3b:b0:
         cf:4b:2e:95:29:a1:bb:02:ed:5c:d5:f5:51:10:2b:df:4d:ac:
         40:58:97:e6:86:46:4a:dd:ce:1b:cc:09:6b:64:9a:04:8f:91:
         3d:28:ea:70:93:1d:77:3c:2b:93:ba:b4:15:dd:0d:a5:ea:da:
         99:f6:7f:c2:47:9d:88:e7:23:ac:01:f8:fb:a2:8a:a8:e6:a6:
         5f:61:77:c8:31:8f:09:3b:34:4e:ae:e8:fd:fa:02:82:b3:5a:
         5d:1f:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:33:11 2025 by rpki-client