Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32342d3234203d3e20323632333737.roa
File:                     3133382e3131372e3231362e302f32342d3234203d3e20323632333737.roa (raw, json)
Hash identifier:          C5eUbD+sTv8rAevNEYDIJ/hxGOGGgAnx6R0ahXhrVX8=
Subject key identifier:   9E:3C:0C:19:E9:39:08:1A:24:04:2D:9E:07:1A:B3:7C:E4:3B:51:EF
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       6F099FA3B6EB94AA71C8617C497AE9E5D5EA6E94
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32342d3234203d3e20323632333737.roa
Signing time:             Sat 03 Jun 2023 18:02:19 +0000
ROA not before:           Sat 03 Jun 2023 17:57:19 +0000
ROA not after:            Sat 01 Jun 2024 18:02:19 +0000
asID:                     262377
IP address blocks:        138.117.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:9f:a3:b6:eb:94:aa:71:c8:61:7c:49:7a:e9:e5:d5:ea:6e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  3 17:57:19 2023 GMT
            Not After : Jun  1 18:02:19 2024 GMT
        Subject: CN=9E3C0C19E939081A24042D9E071AB37CE43B51EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:4d:18:ac:b0:bf:12:7b:91:ab:fa:dd:eb:
                    d7:3e:b9:48:7f:be:1b:a3:58:8e:ca:0e:15:38:0c:
                    b7:d3:e3:3c:7a:b7:11:da:15:45:1a:7b:5e:db:41:
                    b0:ef:05:07:99:36:6c:c0:01:20:c2:84:ea:83:a9:
                    f3:1a:cc:d3:e6:fe:87:65:0e:23:1b:e1:d3:27:f0:
                    b5:ba:c8:1a:c9:16:5c:60:4e:34:7a:fe:08:b0:2d:
                    3b:a6:c1:bd:a5:4c:ca:0f:26:41:74:5c:b4:58:25:
                    8a:d1:7b:0e:a6:a4:1d:5f:d5:f9:29:af:04:df:79:
                    fa:14:c0:13:d7:84:5f:27:00:10:96:6f:f8:e3:1d:
                    79:c2:24:7a:21:eb:24:46:f0:09:07:d9:11:9a:01:
                    9d:dc:10:2d:2a:b6:83:bd:6e:08:63:c0:8a:6c:2b:
                    d5:ba:8c:e2:51:e8:58:05:dd:48:94:ea:6f:e2:4a:
                    72:b4:e0:7a:01:af:99:2e:62:99:9f:e0:d6:e8:62:
                    3f:e8:26:0a:e2:1d:77:5e:b4:f5:35:13:79:37:0d:
                    72:47:88:a6:1d:a3:ba:4a:7b:bd:fc:78:1d:fa:49:
                    24:b0:60:51:61:92:6b:e3:f6:10:9f:04:eb:85:20:
                    b6:71:0e:25:cb:81:59:7f:11:2e:56:f6:f6:7a:a0:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3C:0C:19:E9:39:08:1A:24:04:2D:9E:07:1A:B3:7C:E4:3B:51:EF
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32342d3234203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:f8:00:dc:27:85:47:97:84:ad:91:f0:4d:77:7d:07:a5:
         a2:d9:e4:8c:80:c3:aa:3d:ce:93:6e:0c:b4:e6:54:f9:88:20:
         6d:81:d9:3d:e8:6e:e2:59:ba:bc:c6:1a:13:60:9f:d7:d2:0d:
         a7:18:c9:9d:27:9f:ad:25:6c:af:19:c1:7d:26:6a:e3:c3:1f:
         7f:b8:83:54:50:01:07:12:50:b2:85:3e:5c:13:ee:0e:0b:72:
         ec:23:91:a4:34:a2:d4:d7:2e:8c:87:f5:4d:b6:1d:2e:79:ae:
         0e:a2:04:d4:b7:24:96:ba:c2:47:59:cb:90:b4:14:61:19:4c:
         4f:73:3a:96:ad:bc:5c:65:66:f0:53:46:2b:56:d1:3d:01:77:
         e1:4e:8b:17:89:4a:80:19:b0:2e:81:cf:f5:d2:43:f0:ba:9e:
         85:ee:90:82:4f:ca:61:56:07:82:44:b0:3b:72:16:c2:2e:da:
         3c:c3:87:db:04:b2:51:4d:7d:6f:89:13:f0:91:d4:22:59:f3:
         7a:d4:de:12:9d:1b:c0:7e:4b:05:e6:3c:1a:85:28:90:b5:85:
         f7:a9:43:7c:02:ea:bf:85:70:20:ed:24:eb:8d:9d:bd:07:f2:
         24:c2:ad:90:24:bd:08:a8:27:6c:ff:2c:01:98:4d:2f:03:44:
         de:c3:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:14:36 2025 by rpki-client