Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          hxXL4/SkyhPBlMPJretHDsZ/9uGB/HUFzVLJBuFLTvo=
Subject key identifier:   33:01:D0:89:16:1B:2C:AC:EE:6C:A8:19:A1:B5:CB:4B:99:D1:DD:68
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       284C9FC0BDA05DFFD2B0C8D87115E89D93821394
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:25 +0000
ROA not before:           Thu 06 Mar 2025 07:55:25 +0000
ROA not after:            Thu 05 Mar 2026 08:00:25 +0000
asID:                     263263
IP address blocks:        138.122.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4c:9f:c0:bd:a0:5d:ff:d2:b0:c8:d8:71:15:e8:9d:93:82:13:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:25 2025 GMT
            Not After : Mar  5 08:00:25 2026 GMT
        Subject: CN=3301D089161B2CACEE6CA819A1B5CB4B99D1DD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:f0:ff:c3:7a:8a:b8:b6:29:26:50:6e:45:
                    e3:d6:67:ef:28:68:ca:3b:06:3a:e4:2b:06:99:1f:
                    4d:bc:29:a7:65:59:64:ee:90:0e:07:b4:ca:fe:fe:
                    59:ce:dc:42:07:e4:37:a3:5f:64:74:fc:5e:9a:bb:
                    0a:b9:be:4c:14:46:68:44:51:03:e2:7f:fa:a3:08:
                    59:92:41:ce:b5:d5:1d:f5:47:96:cf:1a:d8:0e:b8:
                    89:87:be:90:c7:e0:94:0d:80:3f:b1:a4:5f:c6:48:
                    33:e4:33:b7:bf:e2:43:bb:c6:90:2c:3c:02:7f:2e:
                    9e:6c:73:0d:6b:d5:f4:c3:43:bf:a9:71:4c:a3:67:
                    e0:e7:cd:ac:f1:59:fe:f6:87:48:e0:26:93:f0:b0:
                    bd:59:25:79:f3:5f:8a:d1:22:b5:c8:f9:f8:de:0c:
                    2f:64:04:48:b8:b0:5c:ff:ef:f1:0c:4f:0e:93:aa:
                    28:9f:0a:1e:4a:1e:e9:44:90:95:62:06:62:8c:67:
                    3d:5c:20:4b:42:4f:80:f6:51:c0:5d:56:e9:92:4f:
                    dc:77:a2:6e:28:88:3a:2a:51:cc:84:8e:dd:e8:cd:
                    b4:0e:28:b3:1d:ba:07:70:87:e0:2a:59:05:31:1a:
                    62:c2:6d:1d:eb:03:5b:04:55:62:ad:f8:a5:b0:9d:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:D0:89:16:1B:2C:AC:EE:6C:A8:19:A1:B5:CB:4B:99:D1:DD:68
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:cb:92:62:9b:cc:41:74:c8:61:50:1a:b7:4f:fe:92:4c:
         ed:8d:30:7d:24:c2:b0:4a:43:92:e2:63:ca:67:84:8d:93:38:
         08:a5:09:56:09:8b:62:bd:08:c5:67:fc:c6:f0:73:82:6e:4e:
         9f:a7:b2:b9:cf:9c:17:4e:39:d1:52:eb:ed:14:f7:2c:49:3a:
         92:ea:2b:fa:83:92:7d:74:7a:c1:c6:0e:2e:69:02:ed:da:c7:
         d2:09:74:b5:7d:ba:09:f4:85:24:b8:3c:6c:2a:01:e4:bc:9d:
         48:c1:c3:31:df:28:2c:a4:b0:19:9b:85:2e:6e:57:13:9b:eb:
         8c:11:28:41:b7:ca:ab:f4:a8:13:88:78:e6:d0:38:15:6c:6a:
         a4:08:b5:45:46:85:94:40:62:68:27:1e:e4:15:4b:9d:b0:68:
         16:63:d4:72:f2:1f:35:06:03:6b:5b:7f:25:e0:a8:0b:3b:92:
         01:58:ee:67:55:bb:54:2b:10:e1:c5:4a:26:c3:62:fa:86:00:
         d0:0e:96:1a:59:aa:a8:04:57:88:6a:ed:ff:6d:c3:7e:e8:04:
         a8:fd:2b:06:9e:2e:5b:17:e3:c0:cc:9c:cd:e4:9b:ef:55:e8:
         ad:24:ac:35:bf:21:d5:df:70:db:45:fa:77:aa:dd:4b:81:49:
         fc:aa:a6:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKEyfwL2gXf/SsMjYcRXonZOCE5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UyRDFCQzhCMjY3MzVFOTA2OEU4ODMzMzIwQTlGREVC
MDRFNjlDRDAeFw0yNTAzMDYwNzU1MjVaFw0yNjAzMDUwODAwMjVaMDMxMTAvBgNV
BAMTKDMzMDFEMDg5MTYxQjJDQUNFRTZDQTgxOUExQjVDQjRCOTlEMURENjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8A/D/w3qKuLYpJlBuRePWZ+8o
aMo7BjrkKwaZH028KadlWWTukA4HtMr+/lnO3EIH5DejX2R0/F6auwq5vkwURmhE
UQPif/qjCFmSQc611R31R5bPGtgOuImHvpDH4JQNgD+xpF/GSDPkM7e/4kO7xpAs
PAJ/Lp5scw1r1fTDQ7+pcUyjZ+DnzazxWf72h0jgJpPwsL1ZJXnzX4rRIrXI+fje
DC9kBEi4sFz/7/EMTw6TqiifCh5KHulEkJViBmKMZz1cIEtCT4D2UcBdVumST9x3
om4oiDoqUcyEjt3ozbQOKLMdugdwh+AqWQUxGmLCbR3rA1sEVWKt+KWwnRmxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMwHQiRYbLKzubKgZobXLS5nR3WgwHwYDVR0j
BBgwFoAUzi0byLJnNekGjogzMgqf3rBOac0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMS9DRTJEMUJDOEIyNjczNUU5MDY4RTg4MzMzMjBBOUZERUIwNEU2OUNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMkQxQkM4QjI2NzM1RTkw
NjhFODgzMzMyMEE5RkRFQjA0RTY5Q0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzEv
MzEzMzM4MmUzMTMyMzIyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKekgwDQYJKoZIhvcNAQELBQADggEBAFuey5Ji
m8xBdMhhUBq3T/6STO2NMH0kwrBKQ5LiY8pnhI2TOAilCVYJi2K9CMVn/Mbwc4Ju
Tp+nsrnPnBdOOdFS6+0U9yxJOpLqK/qDkn10esHGDi5pAu3ax9IJdLV9ugn0hSS4
PGwqAeS8nUjBwzHfKCyksBmbhS5uVxOb64wRKEG3yqv0qBOIeObQOBVsaqQItUVG
hZRAYmgnHuQVS52waBZj1HLyHzUGA2tbfyXgqAs7kgFY7mdVu1QrEOHFSibDYvqG
ANAOlhpZqqgEV4hq7f9tw37oBKj9KwaeLlsX48DMnM3km+9V6K0krDW/IdXfcNtF
+neq3UuBSfyqpvY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:06:57 2025 by rpki-client