Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa
File:                     3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa (raw, json)
Hash identifier:          9yLgKYNdWSV+JHwj7igk3cH0a7uTDxyLTtNwyedSlVE=
Subject key identifier:   BB:23:9B:8A:10:5A:BC:60:19:38:A0:F8:E3:25:2A:1E:5B:F5:63:41
Certificate issuer:       /CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Certificate serial:       0B17B7DF8576E9EC4A5B0A9538F03C258190AB3A
Authority key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa
Signing time:             Fri 17 Jan 2025 11:42:27 +0000
ROA not before:           Fri 17 Jan 2025 11:37:27 +0000
ROA not after:            Fri 16 Jan 2026 11:42:27 +0000
asID:                     264232
IP address blocks:        138.117.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:b7:df:85:76:e9:ec:4a:5b:0a:95:38:f0:3c:25:81:90:ab:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
        Validity
            Not Before: Jan 17 11:37:27 2025 GMT
            Not After : Jan 16 11:42:27 2026 GMT
        Subject: CN=BB239B8A105ABC601938A0F8E3252A1E5BF56341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:32:89:fe:4c:6d:1d:f9:95:ba:c6:2e:c5:
                    34:84:4d:ab:67:01:b5:43:de:46:5d:4b:1a:16:1c:
                    a0:52:83:e3:18:f6:73:f4:11:61:96:c9:32:97:d1:
                    8d:67:64:d5:6e:7a:a5:05:df:81:fc:11:a5:a6:b9:
                    54:24:ce:5a:1d:57:9c:c6:88:50:97:0a:d1:67:cf:
                    e7:36:3f:56:c0:e2:37:df:e8:25:51:80:18:c5:70:
                    f5:2b:28:f3:a1:c9:23:4b:db:05:73:17:8f:47:69:
                    8d:f9:78:d6:1f:71:25:86:49:55:18:a4:74:49:1e:
                    c5:ef:36:68:8b:5a:33:93:5c:2b:66:5b:56:d2:df:
                    22:64:b6:5f:69:9a:c6:6a:3b:d7:32:5f:19:2f:79:
                    f3:65:55:b4:70:51:e2:6d:f1:37:27:c1:fd:16:e0:
                    a5:86:67:21:e2:86:27:43:c8:67:97:8a:47:8c:5f:
                    09:f9:08:83:8f:dc:4b:d9:ff:9d:9e:fc:35:0c:22:
                    12:3a:a9:47:1b:2b:b4:97:b0:2e:16:13:c4:2e:7b:
                    df:cf:1a:56:57:00:72:dd:32:b6:0f:c9:3b:62:8e:
                    e4:6e:77:41:a2:d6:02:59:d3:c9:93:bf:3a:6e:47:
                    ce:14:44:bd:dc:50:71:6a:16:98:3e:ca:b8:9e:ab:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:9B:8A:10:5A:BC:60:19:38:A0:F8:E3:25:2A:1E:5B:F5:63:41
            X509v3 Authority Key Identifier:
                keyid:75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/3133382e3131372e39342e302f32342d3234203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:0a:bf:cd:59:08:5a:7e:92:b7:b7:a8:4e:89:14:56:33:
         b8:19:a4:19:bc:74:6b:f0:e5:b7:58:6e:df:cc:c3:e3:10:6a:
         fb:9f:ab:1c:0d:55:e2:ac:b2:1d:21:95:1b:dc:c6:26:8f:a3:
         43:c0:db:51:30:ec:da:a6:86:d2:67:aa:bf:03:63:aa:c5:ed:
         ba:d8:67:1b:f8:d7:51:7b:19:22:23:79:9a:90:59:04:33:ec:
         9a:8f:c6:fe:1f:c1:5b:0e:a5:cf:0d:54:a0:f8:fe:46:29:ab:
         40:c2:de:77:c6:89:3f:ff:5a:8f:95:b5:e2:aa:fc:43:c4:f0:
         31:11:d2:61:c6:2e:13:5f:3c:a4:79:c8:88:84:69:2e:0f:dc:
         dd:7f:1b:0c:bf:ad:03:d0:1b:60:dc:86:b7:c6:ba:2d:2b:bb:
         f0:cb:ec:b7:9a:50:10:b9:c9:72:22:45:10:71:26:5b:12:e3:
         e2:cb:56:c0:fd:a9:a4:06:f0:d8:22:e6:d4:c8:4b:a1:bb:ff:
         07:5e:18:72:33:95:3f:5e:36:25:03:c9:fd:ff:73:d2:e6:31:
         28:85:95:93:bc:e6:d0:0c:70:1d:8b:79:da:4d:2c:6f:45:38:
         b4:3b:f2:5e:8a:de:e6:18:76:bc:53:48:91:f6:a6:fa:3b:a1:
         e5:37:7a:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCxe334V26exKWwqVOPA8JYGQqzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVERjlDMUZBMTI3MUFFMjJGOEQ0M0M0NkM5MzQ0RTkz
OUI1Q0ZCOTAeFw0yNTAxMTcxMTM3MjdaFw0yNjAxMTYxMTQyMjdaMDMxMTAvBgNV
BAMTKEJCMjM5QjhBMTA1QUJDNjAxOTM4QTBGOEUzMjUyQTFFNUJGNTYzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMizKJ/kxtHfmVusYuxTSETatn
AbVD3kZdSxoWHKBSg+MY9nP0EWGWyTKX0Y1nZNVueqUF34H8EaWmuVQkzlodV5zG
iFCXCtFnz+c2P1bA4jff6CVRgBjFcPUrKPOhySNL2wVzF49HaY35eNYfcSWGSVUY
pHRJHsXvNmiLWjOTXCtmW1bS3yJktl9pmsZqO9cyXxkvefNlVbRwUeJt8Tcnwf0W
4KWGZyHihidDyGeXikeMXwn5CIOP3EvZ/52e/DUMIhI6qUcbK7SXsC4WE8Que9/P
GlZXAHLdMrYPyTtijuRud0Gi1gJZ08mTvzpuR84URL3cUHFqFpg+yrieq/1NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuyObihBavGAZOKD44yUqHlv1Y0EwHwYDVR0j
BBgwFoAUdd+cH6EnGuIvjUPEbJNE6Tm1z7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmdBUXlYbUFFR1FXUzdDd01iQkw2Mng4ZzZuQmNtbVBtb1B2TldBUUNv
dmUvMC83NURGOUMxRkExMjcxQUUyMkY4RDQzQzQ2QzkzNDRFOTM5QjVDRkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1REY5QzFGQTEyNzFBRTIy
RjhENDNDNDZDOTM0NEU5MzlCNUNGQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnQVF5WG1BRUdRV1M3Q3dNYkJMNjJ4OGc2bkJjbW1QbW9Qdk5XQVFDb3ZlLzAv
MzEzMzM4MmUzMTMxMzcyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdV4wDQYJKoZIhvcNAQELBQADggEBAIT9Cr/N
WQhafpK3t6hOiRRWM7gZpBm8dGvw5bdYbt/Mw+MQavufqxwNVeKssh0hlRvcxiaP
o0PA21Ew7NqmhtJnqr8DY6rF7brYZxv411F7GSIjeZqQWQQz7JqPxv4fwVsOpc8N
VKD4/kYpq0DC3nfGiT//Wo+VteKq/EPE8DER0mHGLhNfPKR5yIiEaS4P3N1/Gwy/
rQPQG2DchrfGui0ru/DL7LeaUBC5yXIiRRBxJlsS4+LLVsD9qaQG8Ngi5tTIS6G7
/wdeGHIzlT9eNiUDyf3/c9LmMSiFlZO85tAMcB2LedpNLG9FOLQ78l6K3uYYdrxT
SJH2pvo7oeU3enU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:37 2025 by rpki-client