Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3133382e3138362e38302e302f32322d3234203d3e20323632363232.roa
File:                     3133382e3138362e38302e302f32322d3234203d3e20323632363232.roa (raw, json)
Hash identifier:          EM6KS+vuevkYYHeF2ZDJw5UcSDfnVI/jQNW0Z379mPA=
Subject key identifier:   ED:7D:3D:69:15:9F:C5:25:58:AD:B4:BE:B3:EB:E8:5E:5A:9B:C7:BB
Certificate issuer:       /CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
Certificate serial:       3414F98B1A7BB56FA33BCD6FCF10A66655FA8DFA
Authority key identifier: 2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3133382e3138362e38302e302f32322d3234203d3e20323632363232.roa
Signing time:             Mon 28 Apr 2025 17:25:00 +0000
ROA not before:           Mon 28 Apr 2025 17:20:00 +0000
ROA not after:            Mon 27 Apr 2026 17:25:00 +0000
asID:                     262622
IP address blocks:        138.186.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:f9:8b:1a:7b:b5:6f:a3:3b:cd:6f:cf:10:a6:66:55:fa:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF0CF727D2573B3CCB71103C2E44D1F67817E6D
        Validity
            Not Before: Apr 28 17:20:00 2025 GMT
            Not After : Apr 27 17:25:00 2026 GMT
        Subject: CN=ED7D3D69159FC52558ADB4BEB3EBE85E5A9BC7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:28:31:cd:6d:1b:f8:7a:37:93:39:e6:92:
                    de:44:cc:10:fe:6f:b6:45:14:57:30:41:ed:28:28:
                    dd:9c:f3:dd:41:87:f2:a8:1a:17:bb:9e:09:d6:d4:
                    6c:65:fe:3a:66:39:84:e8:f0:2e:c5:5a:e3:c0:a3:
                    52:12:07:c8:08:19:61:a4:eb:4b:8a:ee:e3:2d:d7:
                    2b:88:d0:77:40:67:2c:36:fd:95:ea:40:57:a7:37:
                    85:8a:a0:7c:5b:65:87:5a:b8:98:a1:f2:c5:f1:1a:
                    b0:9b:1a:84:58:2a:98:a6:5b:d0:a5:23:61:73:05:
                    48:fe:a5:d8:7f:d5:47:b3:ca:ac:f1:5d:b4:2a:20:
                    de:d3:3d:15:13:81:39:b5:5f:1f:77:b0:99:7c:dd:
                    fc:c1:15:91:3f:21:00:80:8c:f0:f5:e0:4c:87:b8:
                    d9:6e:ac:b7:99:51:a5:57:83:45:2c:e1:3f:37:41:
                    80:43:9b:f0:ae:3e:97:27:05:b6:0b:2b:61:ad:0e:
                    08:89:08:62:5c:74:6b:f4:de:fb:34:f6:05:17:4c:
                    7c:88:97:b8:69:7a:bd:e7:95:6e:88:cd:60:60:c3:
                    f6:cf:55:db:88:b6:5a:ca:40:f6:c5:d6:69:3a:10:
                    24:e8:60:a7:2e:ce:b8:04:c2:83:2f:f6:90:f0:95:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:3D:69:15:9F:C5:25:58:AD:B4:BE:B3:EB:E8:5E:5A:9B:C7:BB
            X509v3 Authority Key Identifier:
                keyid:2E:F0:CF:72:7D:25:73:B3:CC:B7:11:03:C2:E4:4D:1F:67:81:7E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF0CF727D2573B3CCB71103C2E44D1F67817E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jywLoMEKaHRibXvWvEMXk95bn3GMkFG78D48Qx8UoBG/0/3133382e3138362e38302e302f32322d3234203d3e20323632363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:96:ad:0f:a7:5e:d9:f0:79:c0:9b:5c:86:02:94:9e:ec:fc:
         d9:31:39:a6:db:ac:1d:b4:34:2c:ec:b6:65:5c:6f:78:e6:f4:
         63:1f:60:c1:34:f0:88:bf:0e:61:93:59:93:cc:58:46:6a:74:
         51:fa:14:5c:f2:d2:98:6d:86:0b:72:37:0a:9d:73:26:ef:51:
         53:e6:80:77:ea:d9:14:6b:9d:c5:e0:f2:84:c9:d9:27:5a:8c:
         46:69:e1:28:b4:48:04:22:1b:6c:11:0e:cb:86:68:aa:b4:07:
         bb:f6:59:8f:cf:69:d3:8f:6f:d9:44:bd:d3:72:b4:da:c0:d9:
         5b:38:e4:21:cd:c2:a9:37:fb:6d:b7:7b:87:8b:12:1e:ad:01:
         ba:15:fc:33:56:cb:30:89:40:11:7b:30:04:3e:18:65:e3:70:
         7f:e2:be:f0:56:85:1f:aa:92:3e:7c:64:b0:e2:04:cf:df:20:
         c5:b6:c2:8f:2a:12:c0:fb:64:d6:5a:44:e1:ec:4a:aa:65:aa:
         7e:4a:f6:f7:bc:e7:d4:bb:f8:b8:7e:79:7a:b6:85:28:c5:2c:
         66:56:28:a0:35:24:90:15:66:60:b0:50:40:f9:9d:2c:ab:13:
         b5:c2:31:c7:43:68:5c:38:5e:8e:36:71:df:42:60:88:ff:c7:
         71:70:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:21:41 2025 by rpki-client