Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139362e302f32342d3234203d3e20323634333031.roa
File:                     3133382e3132312e3139362e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier:          QPvf+WeeZu4u/Tnst4ROwax5mZ7bHxapz3onNKx264k=
Subject key identifier:   59:72:90:56:1B:3A:45:13:39:7B:C9:79:0F:04:5E:9A:B7:66:33:67
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       2D7FA7BFE6F3DFB140B03C45FE2D9077DE104A3E
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139362e302f32342d3234203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:09:41 +0000
ROA not before:           Sat 08 Apr 2023 03:04:41 +0000
ROA not after:            Sat 06 Apr 2024 03:09:41 +0000
asID:                     264301
IP address blocks:        138.121.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7f:a7:bf:e6:f3:df:b1:40:b0:3c:45:fe:2d:90:77:de:10:4a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:04:41 2023 GMT
            Not After : Apr  6 03:09:41 2024 GMT
        Subject: CN=597290561B3A4513397BC9790F045E9AB7663367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:b2:21:8c:10:5f:aa:68:43:f7:30:cb:42:
                    36:90:61:07:be:8c:de:f0:f2:a0:fe:d1:d2:de:f8:
                    eb:aa:33:70:c9:78:f5:8e:92:0c:93:82:16:a6:59:
                    5a:3e:fc:fb:07:93:91:a3:07:f9:b7:93:4d:af:83:
                    de:9f:b8:d2:d1:2c:87:41:93:49:8c:af:53:8f:48:
                    e9:63:8e:87:a7:7d:38:4f:f3:86:3a:c6:11:37:39:
                    2d:4a:ec:55:6d:58:1e:30:d7:0d:a1:22:d4:e0:82:
                    da:76:ed:10:2e:de:10:eb:f5:eb:37:4b:2f:47:0f:
                    21:73:27:70:b3:43:e5:fc:a1:77:a6:4e:93:a3:a1:
                    6b:4d:5c:c2:05:91:2d:fd:dd:0d:ab:9b:32:61:bd:
                    38:b7:9e:38:1f:17:55:4a:d8:8e:c2:72:4c:83:8d:
                    e1:80:8f:99:ea:4c:77:b8:54:f5:7e:50:1a:ec:bc:
                    58:82:df:b8:76:a8:12:a2:42:0a:3c:a8:0c:18:d8:
                    c0:d8:6e:b0:b0:69:2f:fa:ed:49:16:62:60:80:2a:
                    ab:6e:53:1d:48:37:e2:dc:01:02:25:bb:da:23:f7:
                    f0:0f:91:a4:c1:1e:ae:10:76:e3:21:d4:33:4f:65:
                    be:62:5c:3a:ac:63:b3:3e:25:fd:71:d5:10:64:28:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:72:90:56:1B:3A:45:13:39:7B:C9:79:0F:04:5E:9A:B7:66:33:67
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139362e302f32342d3234203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:42:d6:5b:78:9c:28:3e:5d:07:cf:e1:fe:64:9e:8e:6c:c6:
         6f:94:5f:1d:6a:c0:f4:92:9f:58:61:de:a2:e1:a7:61:b1:fb:
         b1:96:ad:4a:c6:02:75:97:c5:75:ff:66:53:25:76:ad:24:25:
         71:7a:c2:3a:a6:67:3d:c7:1a:0a:35:fe:b4:43:f5:be:81:e4:
         ed:64:c3:20:67:a5:01:9f:31:66:88:7d:0c:af:8c:10:21:51:
         59:58:1d:b3:2e:08:ea:f0:be:e0:bf:0e:dd:46:df:b5:5b:3e:
         9b:08:18:1f:f3:4b:42:83:78:9d:28:0b:7c:35:3f:6d:b3:c1:
         8f:34:f1:85:af:ef:fd:07:e0:82:e1:1f:56:35:7c:0c:c9:17:
         17:0c:1a:ca:44:d7:b2:7c:e7:5c:54:4f:15:4e:93:7d:a7:9e:
         9c:59:9f:17:8d:b4:da:20:d0:b1:02:7e:ab:b7:a3:d9:c8:bc:
         7a:89:ba:b8:6f:50:a4:17:47:15:00:4b:fd:51:f6:d0:18:13:
         59:59:14:46:ae:cf:24:7e:08:ee:a1:16:ed:52:1d:ac:9c:64:
         26:67:e1:35:20:a7:d0:c0:51:57:c3:65:ab:9c:29:07:7a:3d:
         90:f8:87:43:55:d6:1a:c0:99:29:ef:54:dc:6c:52:5c:5a:04:
         84:f2:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:13:16 2025 by rpki-client