Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232352e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232352e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          WaVAjWaIz/uIeRBA4Pk2PnUMiIRJJXoBXS2ip04k65E=
Subject key identifier:   D2:BC:21:47:06:87:89:AD:2C:AF:DF:B1:E7:68:62:A5:6F:F0:73:8C
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       66AC9D3DBF98665DC8B25A41FFAF5C9885A4B93E
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232352e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:18 +0000
ROA not before:           Wed 20 Mar 2024 18:52:18 +0000
ROA not after:            Wed 19 Mar 2025 18:57:18 +0000
asID:                     263989
IP address blocks:        138.255.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ac:9d:3d:bf:98:66:5d:c8:b2:5a:41:ff:af:5c:98:85:a4:b9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:18 2024 GMT
            Not After : Mar 19 18:57:18 2025 GMT
        Subject: CN=D2BC2147068789AD2CAFDFB1E76862A56FF0738C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:03:c1:2a:bd:a5:e3:7a:8e:10:9d:c0:c1:
                    3e:20:e7:c5:09:49:b6:b1:cd:11:46:20:63:cb:87:
                    ea:15:20:83:fe:89:1a:0c:c6:9c:56:ee:8d:d4:59:
                    47:6a:24:24:21:a4:17:e2:21:fc:cb:c7:00:5d:11:
                    36:94:6a:89:61:76:68:50:b1:49:29:d5:8d:c8:c5:
                    bf:52:a6:bf:fb:3f:d5:e1:bc:ee:e1:fa:09:8e:cc:
                    a6:0c:8b:2e:57:91:9e:a3:2c:2a:be:42:88:7a:16:
                    bd:4e:c9:b4:d7:c3:db:3d:68:2c:2b:02:d1:8b:bd:
                    88:93:d3:6f:a5:4d:41:ec:db:15:e7:b8:e7:e5:e1:
                    cc:5e:40:e2:88:fe:46:ce:61:6e:32:c7:df:ef:f8:
                    4d:50:b2:f1:e8:63:27:dc:79:89:e8:f6:7f:05:d5:
                    41:37:85:c3:62:3a:55:16:eb:ac:f5:b7:82:dd:f3:
                    96:2b:a5:92:29:31:e0:b6:f8:d6:79:df:ab:ec:d1:
                    86:a8:b9:73:97:d8:50:4b:31:f4:2f:18:b5:34:c2:
                    a1:db:e2:cf:60:06:e0:20:c8:78:23:01:c3:c1:0d:
                    c3:76:f8:9f:14:ab:96:b5:3f:5b:28:83:66:ed:ad:
                    f3:10:aa:9e:c7:74:9a:90:2b:19:b5:29:43:a6:21:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BC:21:47:06:87:89:AD:2C:AF:DF:B1:E7:68:62:A5:6F:F0:73:8C
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232352e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:cc:e2:2d:5e:2c:5d:eb:45:3c:bf:ae:6e:ce:45:f6:e8:d7:
         21:58:e3:e6:2c:44:34:d7:cf:50:18:45:53:08:4b:44:a2:99:
         33:42:72:59:63:01:4a:e1:b6:f6:fd:cf:00:3a:07:1d:25:f4:
         4a:93:d6:2f:9d:93:b6:37:4c:0e:e9:2a:09:ec:1b:e9:0a:1f:
         cb:d8:01:f9:ba:0d:82:1f:8d:2e:8a:2a:29:9c:07:d1:26:ba:
         81:a5:82:d3:f0:54:b3:ea:30:c0:45:8f:ae:40:3f:e2:12:63:
         b2:0d:1e:27:0a:34:0b:ab:41:24:19:65:af:26:52:7f:49:bc:
         ef:13:28:2c:1a:5b:55:a7:01:a9:2b:82:e8:d2:d9:c7:0a:c6:
         79:18:e5:80:ed:5a:0b:dc:84:f8:35:c3:58:c2:52:5e:21:6e:
         19:f5:01:a3:1e:e6:7a:49:ed:5d:8d:6a:a1:5a:8a:5f:a6:84:
         6e:2c:0a:ee:77:73:36:b1:72:80:fc:0a:7d:40:f5:62:dc:c6:
         59:78:2f:ba:3e:e3:04:13:21:3b:a1:2b:26:2d:1c:ce:85:b1:
         ba:ad:f7:04:99:9f:9b:81:d9:05:c9:d3:76:ef:c6:94:7d:cf:
         8a:33:d0:4f:7d:23:1d:04:8b:0e:6c:74:a7:eb:b2:82:eb:cc:
         b2:33:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:55 2025 by rpki-client