Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32332d3233203d3e20323634323332.roa
File:                     3133382e3131372e39342e302f32332d3233203d3e20323634323332.roa (raw, json)
Hash identifier:          5qysIjfJEaxM+CTnp51tYAFs1+obyUltXvaeS5Hdys4=
Subject key identifier:   0D:29:6E:F2:F9:10:85:5D:07:FE:D3:AD:D4:67:D3:80:E6:BA:32:16
Certificate issuer:       /CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Certificate serial:       450865061B39E6741BDAD1C3EA54519E4F8F5D91
Authority key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32332d3233203d3e20323634323332.roa
Signing time:             Fri 17 Jan 2025 11:42:29 +0000
ROA not before:           Fri 17 Jan 2025 11:37:29 +0000
ROA not after:            Fri 16 Jan 2026 11:42:29 +0000
asID:                     264232
IP address blocks:        138.117.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:65:06:1b:39:e6:74:1b:da:d1:c3:ea:54:51:9e:4f:8f:5d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
        Validity
            Not Before: Jan 17 11:37:29 2025 GMT
            Not After : Jan 16 11:42:29 2026 GMT
        Subject: CN=0D296EF2F910855D07FED3ADD467D380E6BA3216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:23:1d:bb:c5:11:c0:18:3f:0a:f0:0b:ca:
                    c0:89:2b:75:f5:08:b3:a9:2f:32:84:ed:97:33:fe:
                    a5:3a:66:33:7c:2c:34:67:75:c0:49:b1:45:87:95:
                    76:0d:17:69:58:96:8c:0b:af:2b:ed:2f:98:ea:ec:
                    23:99:eb:ef:3f:61:99:9b:35:46:76:81:16:8c:bb:
                    c3:49:89:66:ca:14:61:66:e0:4c:7a:76:8f:1c:04:
                    22:0b:98:a8:98:db:82:b2:dc:a3:a9:9c:f2:39:90:
                    e8:c5:20:40:f1:15:a0:a2:8c:89:63:d5:14:99:9b:
                    e7:e4:0f:a4:2b:06:5e:14:91:e4:5a:a9:81:b9:4a:
                    cd:ff:42:32:a2:a8:25:7b:64:5a:a7:79:46:ff:54:
                    d7:8e:de:42:80:f1:be:4d:24:12:47:25:4d:77:f5:
                    19:63:9f:09:cb:37:84:bc:34:62:1f:e5:a5:d4:b9:
                    7c:b1:3a:ea:ec:00:83:f9:f1:85:a3:e1:e3:5e:6c:
                    77:2b:8a:31:eb:9d:56:21:df:52:e2:cd:df:f6:f2:
                    d1:b6:f9:73:43:7c:d4:d7:84:ee:6f:48:55:72:51:
                    21:94:d5:bf:f3:cb:41:2c:ce:d3:54:4f:a4:3a:b7:
                    82:d3:04:03:62:4d:e1:a2:7f:a8:64:62:4d:f2:0e:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:6E:F2:F9:10:85:5D:07:FE:D3:AD:D4:67:D3:80:E6:BA:32:16
            X509v3 Authority Key Identifier:
                keyid:75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32332d3233203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:8a:86:2d:6a:ee:4f:a2:f2:0f:d4:53:a5:51:a8:00:5b:
         5b:6e:aa:1d:bd:e5:43:c0:c9:08:3c:1e:a7:74:ba:eb:f3:0f:
         ba:57:45:e4:42:02:1d:90:a8:f4:65:41:1c:4c:53:fc:d9:9a:
         3d:cf:bd:1c:96:6a:5e:76:67:27:9a:b2:74:85:23:19:ea:bc:
         51:b9:7a:0d:b5:c2:fa:24:cc:2d:d7:96:e7:9a:24:b7:f1:31:
         39:a2:1d:2e:6a:d5:64:38:4b:81:ce:a8:48:43:8c:dd:dc:2b:
         a2:2f:d9:45:87:42:0d:88:c7:03:9a:be:9e:61:51:5c:36:aa:
         72:f8:ea:12:0e:4d:dc:0f:d0:d2:95:10:ee:6b:df:68:ec:f1:
         28:d8:7c:00:1b:8d:37:8b:e5:e6:7e:87:cd:28:f2:e0:31:d9:
         41:0f:0c:63:27:ed:49:b8:78:6b:9b:fb:6d:81:6b:07:25:dd:
         c8:57:00:a0:e1:32:85:c5:05:80:77:61:34:96:f3:23:7e:95:
         d9:a1:c7:f6:5a:09:05:19:1f:a2:29:c7:7b:6e:cc:1d:e8:78:
         78:11:57:6d:37:b2:8a:63:a6:17:a7:9b:c0:24:4a:f8:14:0c:
         bd:1d:53:86:8b:37:dd:f3:20:9f:69:d6:3a:cc:10:8e:8c:50:
         35:26:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:22 2025 by rpki-client