Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
File:                     3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (raw, json)
Hash identifier:          IG5rUjTfHiuEtuC5ZhjwY4anOF1T4j93An4m8upLn9g=
Subject key identifier:   84:62:B6:CF:E4:AB:27:B2:A3:32:A0:FB:6A:32:7D:F9:0A:7E:AE:D6
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       2C1352AAB7CD884D36C8FF81282881FDA3E59056
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     264152
IP address blocks:        138.94.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:13:52:aa:b7:cd:88:4d:36:c8:ff:81:28:28:81:fd:a3:e5:90:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject: CN=3082010A0282010100BA81600EA3920399CDF81EE7F3B78754EC201FC664A7F72FDBA2CD89EEBA83F02596FCFEF1E720F78EBAFD184134BDF18BB971081EC8FD4AD23208CDC1F95BDFA24180D6C63FD5E85BAC70B4E9C311149A6822CD12BAA1F20ED7023B0A73AE1491DA363591BD2E5D39FDE6197FD66113DEF71335F7B4FC3F504B70EB985FD885C1A57A6EA4B95941453168BCE09578E200018728DDBAA015A47229FD2F019661FEE117575C7E9A83D695EF8C8B8753802A15145C8D67B2AF791F015E48ADEF1BE883E456585902DB0CC9156E636296547B26A2BBB55C119BBD6A9E841ABBF211B3D99C9BD77C3C7E2A54662B795C67D2C8F7F349F402E14B6B5C6A8E820189450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:60:0e:a3:92:03:99:cd:f8:1e:e7:f3:b7:
                    87:54:ec:20:1f:c6:64:a7:f7:2f:db:a2:cd:89:ee:
                    ba:83:f0:25:96:fc:fe:f1:e7:20:f7:8e:ba:fd:18:
                    41:34:bd:f1:8b:b9:71:08:1e:c8:fd:4a:d2:32:08:
                    cd:c1:f9:5b:df:a2:41:80:d6:c6:3f:d5:e8:5b:ac:
                    70:b4:e9:c3:11:14:9a:68:22:cd:12:ba:a1:f2:0e:
                    d7:02:3b:0a:73:ae:14:91:da:36:35:91:bd:2e:5d:
                    39:fd:e6:19:7f:d6:61:13:de:f7:13:35:f7:b4:fc:
                    3f:50:4b:70:eb:98:5f:d8:85:c1:a5:7a:6e:a4:b9:
                    59:41:45:31:68:bc:e0:95:78:e2:00:01:87:28:dd:
                    ba:a0:15:a4:72:29:fd:2f:01:96:61:fe:e1:17:57:
                    5c:7e:9a:83:d6:95:ef:8c:8b:87:53:80:2a:15:14:
                    5c:8d:67:b2:af:79:1f:01:5e:48:ad:ef:1b:e8:83:
                    e4:56:58:59:02:db:0c:c9:15:6e:63:62:96:54:7b:
                    26:a2:bb:b5:5c:11:9b:bd:6a:9e:84:1a:bb:f2:11:
                    b3:d9:9c:9b:d7:7c:3c:7e:2a:54:66:2b:79:5c:67:
                    d2:c8:f7:f3:49:f4:02:e1:4b:6b:5c:6a:8e:82:01:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:B6:CF:E4:AB:27:B2:A3:32:A0:FB:6A:32:7D:F9:0A:7E:AE:D6
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:7e:22:fc:77:99:bb:d7:f9:fd:e1:10:63:f5:c6:c0:29:
         71:64:58:6c:0c:aa:8a:26:0a:a0:43:cc:47:ce:25:42:5c:3f:
         71:84:54:14:2f:78:61:87:76:e2:fe:14:b8:71:88:a5:63:b0:
         d9:42:03:5d:74:5f:e3:df:31:fb:ac:d6:b2:d5:f2:de:34:3c:
         ad:fd:53:51:2f:08:25:9d:15:14:34:b9:fb:50:15:5a:30:43:
         26:d8:d9:36:c1:b8:36:58:ca:75:f4:b4:53:c3:cb:f4:74:65:
         71:e8:33:c6:56:6c:12:78:9c:04:1d:d0:59:93:48:19:ab:fb:
         b7:96:71:23:7b:d9:a0:32:26:74:46:a2:64:fe:42:8f:70:24:
         86:70:bb:80:96:4d:6a:c2:f5:80:28:85:1e:94:dc:19:8d:39:
         f1:0e:96:19:e4:8a:0b:4b:88:19:13:22:05:c0:22:ea:12:d3:
         d6:f6:03:ad:6e:7a:c9:0c:10:4f:61:1e:6f:65:cc:44:92:e2:
         02:2f:fb:44:d4:36:10:1a:78:1b:bb:b5:0a:77:02:26:ef:4f:
         21:51:5e:68:69:af:d3:d4:5d:0c:56:54:01:98:a7:af:cd:f5:
         90:0b:93:7e:25:9c:3f:73:ff:9e:18:70:0a:a0:7b:7e:56:1f:
         b2:bc:f2:0a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULBNSqrfNiE02yP+BKCiB/aPlkFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhBNkEwN0NDQkU3NDI1MzBGMzhFRURENDU1QUM1OTQ4
MEZEQTExMDAeFw0yNTAzMDUxODU1MTBaFw0yNjAzMDQxOTAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE4MTYwMEVBMzkyMDM5OUNE
RjgxRUU3RjNCNzg3NTRFQzIwMUZDNjY0QTdGNzJGREJBMkNEODlFRUJBODNGMDI1
OTZGQ0ZFRjFFNzIwRjc4RUJBRkQxODQxMzRCREYxOEJCOTcxMDgxRUM4RkQ0QUQy
MzIwOENEQzFGOTVCREZBMjQxODBENkM2M0ZENUU4NUJBQzcwQjRFOUMzMTExNDlB
NjgyMkNEMTJCQUExRjIwRUQ3MDIzQjBBNzNBRTE0OTFEQTM2MzU5MUJEMkU1RDM5
RkRFNjE5N0ZENjYxMTNERUY3MTMzNUY3QjRGQzNGNTA0QjcwRUI5ODVGRDg4NUMx
QTU3QTZFQTRCOTU5NDE0NTMxNjhCQ0UwOTU3OEUyMDAwMTg3MjhEREJBQTAxNUE0
NzIyOUZEMkYwMTk2NjFGRUUxMTc1NzVDN0U5QTgzRDY5NUVGOEM4Qjg3NTM4MDJB
MTUxNDVDOEQ2N0IyQUY3OTFGMDE1RTQ4QURFRjFCRTg4M0U0NTY1ODU5MDJEQjBD
QzkxNTZFNjM2Mjk2NTQ3QjI2QTJCQkI1NUMxMTlCQkQ2QTlFODQxQUJCRjIxMUIz
RDk5QzlCRDc3QzNDN0UyQTU0NjYyQjc5NUM2N0QyQzhGN0YzNDlGNDAyRTE0QjZC
NUM2QThFODIwMTg5NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuoFgDqOSA5nN+B7n87eHVOwgH8Zkp/cv26LNie66g/Allvz+8ecg
9466/RhBNL3xi7lxCB7I/UrSMgjNwflb36JBgNbGP9XoW6xwtOnDERSaaCLNErqh
8g7XAjsKc64Ukdo2NZG9Ll05/eYZf9ZhE973EzX3tPw/UEtw65hf2IXBpXpupLlZ
QUUxaLzglXjiAAGHKN26oBWkcin9LwGWYf7hF1dcfpqD1pXvjIuHU4AqFRRcjWey
r3kfAV5Ire8b6IPkVlhZAtsMyRVuY2KWVHsmoru1XBGbvWqehBq78hGz2Zyb13w8
fipUZit5XGfSyPfzSfQC4UtrXGqOggGJRQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIRits/kqyeyozKg+2oyffkKfq7WMB8GA1UdIwQYMBaAFPimoHzL50JTDzju3UVa
xZSA/aEQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJiM1hQVkI3SlJNcUEx
WkJMckdHYnprVXRHU1g0ZkNCcjI4ZHJnU0dNN1h2LzEvRjhBNkEwN0NDQkU3NDI1
MzBGMzhFRURENDU1QUM1OTQ4MEZEQTExMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GOEE2QTA3Q0NCRTc0MjUzMEYzOEVFREQ0NTVBQzU5NDgwRkRB
MTEwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yYjNYUFZCN0pSTXFBMVpCTHJH
R2J6a1V0R1NYNGZDQnIyOGRyZ1NHTTdYdi8xLzMxMzMzODJlMzkzNDJlMzgzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDMxMzUzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAope
WDANBgkqhkiG9w0BAQsFAAOCAQEArRZ+Ivx3mbvX+f3hEGP1xsApcWRYbAyqiiYK
oEPMR84lQlw/cYRUFC94YYd24v4UuHGIpWOw2UIDXXRf498x+6zWstXy3jQ8rf1T
US8IJZ0VFDS5+1AVWjBDJtjZNsG4NljKdfS0U8PL9HRlcegzxlZsEnicBB3QWZNI
Gav7t5ZxI3vZoDImdEaiZP5Cj3AkhnC7gJZNasL1gCiFHpTcGY058Q6WGeSKC0uI
GRMiBcAi6hLT1vYDrW56yQwQT2Eeb2XMRJLiAi/7RNQ2EBp4G7u1CncCJu9PIVFe
aGmv09RdDFZUAZinr831kAuTfiWcP3P/nhhwCqB7flYfsrzyCg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:48 2025 by rpki-client