Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          2RTYiHHxmbd0DbekkxR5TLf6lXvNBe/3E/8J/VaO3M8=
Subject key identifier:   27:DB:DD:22:FA:FD:D2:CA:A8:AF:BB:D8:C0:74:40:5D:F6:19:85:36
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       1A41AA87D078F001AF7A5D7FD60FBA02B679249C
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:00 +0000
ROA not before:           Wed 05 Mar 2025 23:55:00 +0000
ROA not after:            Thu 05 Mar 2026 00:00:00 +0000
asID:                     52653
IP address blocks:        138.122.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:41:aa:87:d0:78:f0:01:af:7a:5d:7f:d6:0f:ba:02:b6:79:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:00 2025 GMT
            Not After : Mar  5 00:00:00 2026 GMT
        Subject: CN=27DBDD22FAFDD2CAA8AFBBD8C074405DF6198536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:8a:bf:4f:b7:07:f3:0e:93:e8:bf:83:b5:
                    62:3d:a6:bd:75:37:e7:90:c0:45:d4:4e:d0:d1:8f:
                    f5:2a:fa:31:0a:c3:72:1f:e5:47:43:7a:11:8d:19:
                    fd:3c:e1:26:2d:39:16:3d:71:2a:46:1c:be:2a:42:
                    d8:d3:80:a6:a4:dd:2b:e1:35:ab:f9:1c:fc:a0:cc:
                    d6:74:f5:c6:ae:2f:45:1d:5a:b6:b8:a4:7a:c3:44:
                    90:f0:47:a5:89:43:9c:c8:29:78:ed:ba:17:0d:b0:
                    3b:2b:d9:da:36:ee:61:68:c8:8c:31:e4:6a:7a:16:
                    cb:7b:a7:63:c7:02:eb:a2:c3:26:b6:33:7f:44:dd:
                    ae:33:3b:5e:92:fe:47:ea:99:37:6f:f4:81:aa:50:
                    fd:6b:ff:47:7a:ea:cb:e9:cd:5a:84:7a:81:2d:03:
                    c7:85:d7:c5:e7:37:48:22:d3:5a:82:8a:31:e7:bb:
                    2d:f1:de:a9:8c:6c:d2:74:cd:d9:37:b3:aa:ee:28:
                    bb:51:48:24:eb:e0:21:b5:8a:2b:d4:b7:e0:d6:37:
                    ab:46:61:1b:46:27:8f:16:5b:39:73:c5:8d:7d:26:
                    d9:7d:34:86:08:59:f8:82:ce:dc:96:e6:91:5a:fa:
                    39:2a:8b:d3:25:e3:a9:c5:34:a9:f6:de:9d:59:f5:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:DD:22:FA:FD:D2:CA:A8:AF:BB:D8:C0:74:40:5D:F6:19:85:36
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:bc:85:1d:bb:6f:43:aa:78:9c:6f:69:28:07:4d:22:ee:
         23:5e:25:37:65:f5:6e:7b:0e:cb:cd:3e:a9:78:08:c0:20:76:
         d1:29:9b:8a:70:ee:a8:6e:43:34:be:2b:b0:24:0b:ba:d3:c5:
         f5:ef:84:c4:0f:c3:77:1d:5c:a8:f6:cc:85:a3:cd:71:82:5b:
         fd:40:82:59:69:2a:21:43:86:ca:0e:0a:1e:64:6a:ac:5c:ff:
         a4:ec:cc:63:b3:a6:ff:51:87:05:fe:21:7e:96:7c:55:5f:dd:
         6d:5a:5a:a7:44:cc:77:52:0d:11:51:44:f0:a7:c8:c9:ff:0a:
         d4:3f:81:83:dc:43:cf:3d:91:97:d4:7d:13:70:b8:6a:d5:5e:
         fd:14:a4:9b:16:51:17:df:b0:7e:76:f3:97:bf:74:11:43:3d:
         72:b9:cc:b5:d1:de:c5:0c:33:5e:76:39:5d:c8:71:95:00:53:
         19:9d:a4:95:f0:08:00:8f:6b:20:e9:36:1d:2b:ad:ca:97:3b:
         4f:73:0e:b7:7f:28:44:68:91:30:f5:7f:9e:c9:d9:13:bc:89:
         62:99:78:26:8e:e6:cb:bb:65:ad:0b:01:1f:dc:16:d5:37:7b:
         a3:de:f3:cf:0d:b7:10:d6:37:61:83:93:6b:f3:61:66:a9:8a:
         98:69:2e:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGkGqh9B48AGvel1/1g+6ArZ5JJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDBaFw0yNjAzMDUwMDAwMDBaMDMxMTAvBgNV
BAMTKDI3REJERDIyRkFGREQyQ0FBOEFGQkJEOEMwNzQ0MDVERjYxOTg1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpIq/T7cH8w6T6L+DtWI9pr11
N+eQwEXUTtDRj/Uq+jEKw3If5UdDehGNGf084SYtORY9cSpGHL4qQtjTgKak3Svh
Nav5HPygzNZ09cauL0UdWra4pHrDRJDwR6WJQ5zIKXjtuhcNsDsr2do27mFoyIwx
5Gp6Fst7p2PHAuuiwya2M39E3a4zO16S/kfqmTdv9IGqUP1r/0d66svpzVqEeoEt
A8eF18XnN0gi01qCijHnuy3x3qmMbNJ0zdk3s6ruKLtRSCTr4CG1iivUt+DWN6tG
YRtGJ48WWzlzxY19Jtl9NIYIWfiCztyW5pFa+jkqi9Ml46nFNKn23p1Z9bODAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ9vdIvr90sqor7vYwHRAXfYZhTYwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzMzM4MmUzMTMyMzIyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKerYwDQYJKoZIhvcNAQELBQADggEBACb4vIUd
u29Dqnicb2koB00i7iNeJTdl9W57DsvNPql4CMAgdtEpm4pw7qhuQzS+K7AkC7rT
xfXvhMQPw3cdXKj2zIWjzXGCW/1AgllpKiFDhsoOCh5kaqxc/6TszGOzpv9RhwX+
IX6WfFVf3W1aWqdEzHdSDRFRRPCnyMn/CtQ/gYPcQ889kZfUfRNwuGrVXv0UpJsW
URffsH5285e/dBFDPXK5zLXR3sUMM152OV3IcZUAUxmdpJXwCACPayDpNh0rrcqX
O09zDrd/KERokTD1f57J2RO8iWKZeCaO5su7Za0LAR/cFtU3e6Pe888NtxDWN2GD
k2vzYWapiphpLug=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:09:59 2025 by rpki-client