Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          EC/YkJOJ1Rbo/yiBkTL/8VhDK+Sfr3LtddWE+zZcq3g=
Subject key identifier:   5C:88:4B:89:BD:D3:27:09:00:FD:7D:F9:11:40:9D:3A:28:D3:71:D1
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       78DD5F77A4E03CD478D9366AEF3C071D3C0369ED
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:37 +0000
ROA not before:           Wed 05 Mar 2025 19:27:37 +0000
ROA not after:            Wed 04 Mar 2026 19:32:37 +0000
asID:                     263989
IP address blocks:        138.255.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dd:5f:77:a4:e0:3c:d4:78:d9:36:6a:ef:3c:07:1d:3c:03:69:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:37 2025 GMT
            Not After : Mar  4 19:32:37 2026 GMT
        Subject: CN=5C884B89BDD3270900FD7DF911409D3A28D371D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:d7:ae:1b:c3:46:8d:2a:ac:f4:2d:4d:6d:
                    19:b8:b4:7f:7f:88:79:3b:87:ed:09:b6:64:1a:4e:
                    de:78:34:43:fc:df:e6:4e:c2:c9:d8:dc:81:88:49:
                    fe:a2:1c:78:4f:ee:c5:96:82:2f:c7:ba:1b:07:89:
                    75:af:c0:37:a8:6a:43:66:02:f9:54:49:e3:a0:cd:
                    74:15:77:37:22:14:94:22:6c:6a:61:55:f5:6f:91:
                    e9:ce:0e:49:bf:92:4d:86:e5:17:62:e1:9c:30:b3:
                    31:e3:59:47:aa:ab:27:a2:a0:bc:4d:e9:12:13:9d:
                    68:7b:27:73:0b:55:f1:cc:97:64:66:e3:80:e0:7b:
                    3a:48:32:2d:0d:64:7f:27:fe:c8:cd:9e:13:ce:0d:
                    c4:d0:5e:28:42:e6:9c:ab:37:3d:52:c9:c6:81:2c:
                    9f:6c:bb:6c:82:af:c7:fa:a0:e3:64:7f:9a:cd:b3:
                    fc:e6:a9:1e:28:51:f4:a7:07:dd:ab:65:9c:1a:83:
                    c2:cb:e5:08:56:c8:6f:02:7c:b2:87:ed:cd:e0:2d:
                    f7:09:b1:cf:de:9f:e4:2c:71:99:09:b8:15:13:38:
                    b9:6f:fc:c2:c0:3a:92:dd:38:3b:9f:8f:5f:90:e4:
                    20:06:91:02:b6:8e:1e:21:c8:93:0e:e7:0c:49:72:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:4B:89:BD:D3:27:09:00:FD:7D:F9:11:40:9D:3A:28:D3:71:D1
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:2c:65:08:01:89:bd:72:64:87:ad:cf:df:fe:d5:34:c3:
         30:77:b8:1e:96:2a:f0:e8:a4:04:32:f7:aa:8e:0d:23:85:ce:
         ab:79:5e:b0:2c:6c:40:9e:8f:7b:71:4d:f1:48:41:48:c2:a1:
         4e:54:1e:3f:1d:e0:6e:77:23:57:bb:85:2f:77:28:8a:4d:dc:
         37:b2:45:ad:ef:fa:26:72:fe:48:df:97:ef:b5:fb:0f:60:1e:
         9f:47:dc:b6:ff:7d:d8:da:06:f2:3f:bc:02:08:96:3a:97:ad:
         9e:5e:41:0c:7a:06:71:a4:43:44:e8:1f:57:6e:ff:b1:75:0e:
         47:92:54:e0:95:e9:c9:6f:e4:f0:7e:7c:f2:54:04:ab:1b:48:
         cc:9e:47:00:3e:82:da:83:6d:ac:cb:aa:d1:da:fd:6c:cb:f9:
         b2:6e:9a:9c:e8:d8:94:23:25:98:a1:79:12:44:27:f5:b6:96:
         a0:5d:50:ed:d5:f2:1a:d7:8b:be:10:08:4f:38:9f:07:0b:e1:
         cd:0c:17:7a:4f:17:91:ff:8e:98:46:19:db:16:37:0e:90:1e:
         25:1e:45:1e:47:20:0a:9f:11:6d:a8:89:f9:52:b8:1f:12:d2:
         ed:fc:01:5e:a5:24:29:38:d0:7e:0f:c3:6a:61:f7:d0:83:e4:
         6e:e5:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:51 2025 by rpki-client