Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32342d3234203d3e20323633383738.roa
File:                     3133382e3230342e32322e302f32342d3234203d3e20323633383738.roa (raw, json)
Hash identifier:          AvOf9LIrcIDnZ6oeLDnDuyVhxHkyJGdozlqaNICHIEE=
Subject key identifier:   64:EF:DD:4A:F3:C5:E7:01:64:3E:81:29:E7:11:F3:9E:63:1C:65:6F
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       768A7263ADA7ADFAF121EC6131E7074297002809
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32342d3234203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:32:34 +0000
ROA not before:           Tue 16 Jan 2024 13:27:34 +0000
ROA not after:            Tue 14 Jan 2025 13:32:34 +0000
asID:                     263878
IP address blocks:        138.204.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:72:63:ad:a7:ad:fa:f1:21:ec:61:31:e7:07:42:97:00:28:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:27:34 2024 GMT
            Not After : Jan 14 13:32:34 2025 GMT
        Subject: CN=64EFDD4AF3C5E701643E8129E711F39E631C656F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:2a:a4:a9:3a:09:ab:59:56:f5:79:81:a8:
                    8b:ce:8c:03:16:f7:71:b8:4f:39:24:a0:68:4a:d6:
                    0f:ac:5a:8b:54:71:48:0a:6f:7a:68:5f:15:3d:ca:
                    df:98:31:d4:b4:b5:ee:7f:e2:68:fc:91:91:86:d6:
                    fc:09:16:6a:5b:a2:53:f1:c5:62:06:21:ae:6b:a4:
                    f7:65:4e:80:70:31:da:46:ea:3d:85:b8:24:0f:b7:
                    53:4b:a7:73:ca:16:69:f2:d6:12:7c:8f:56:87:9a:
                    7c:5e:1b:b1:f5:9d:af:43:27:61:40:d5:d7:56:01:
                    00:5f:a4:c6:2b:d5:44:ab:02:9f:ed:d3:8e:05:f3:
                    91:e0:c0:2f:e9:bc:d8:31:a5:ef:27:7b:c1:59:d8:
                    f7:1c:26:b0:9b:7e:de:a9:56:c6:dd:72:13:a7:50:
                    1c:ca:5a:7f:83:46:8d:82:ca:cf:4a:2b:20:7b:4b:
                    60:4c:b9:e3:18:71:f2:0b:b8:3b:9c:3c:27:ae:95:
                    e0:12:b7:8c:0a:de:03:3c:d9:e0:30:46:68:c7:e5:
                    c5:96:57:4d:2e:3d:0d:f7:3f:25:32:17:84:5b:86:
                    15:ae:ab:3b:1e:ea:a7:02:ee:8a:15:89:3f:8a:77:
                    75:bd:c0:95:03:a1:41:c0:26:53:7c:c3:f8:e7:24:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:DD:4A:F3:C5:E7:01:64:3E:81:29:E7:11:F3:9E:63:1C:65:6F
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32342d3234203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:b9:37:ab:57:4b:b5:d9:48:d0:a5:99:86:41:1c:a7:de:
         fb:be:f3:43:e9:97:15:ea:d8:fe:4c:8e:63:82:3f:3f:ba:4b:
         d8:eb:8f:b8:d6:0c:ba:f5:d1:57:72:f2:bf:4c:eb:27:7a:ed:
         2c:1f:40:8f:26:86:1b:94:8a:67:04:82:21:43:50:9c:f4:11:
         96:af:ef:0b:5b:a5:8d:74:e4:4b:f7:89:85:c6:06:a5:d1:51:
         b7:48:e0:27:f5:19:23:50:eb:59:52:bc:d6:7a:78:48:55:f1:
         ff:99:ff:3d:7d:6e:2b:bd:85:f0:d3:2a:6c:e6:a4:c4:38:00:
         f4:93:65:f3:40:be:a8:4f:9c:b2:ae:9c:cf:74:7f:db:1e:46:
         98:93:b0:6e:e6:ed:89:c9:ca:0b:f7:62:95:b7:6b:5d:cd:b5:
         d3:df:bd:be:93:4b:fd:80:49:b3:2a:7a:5d:83:df:d2:fc:f7:
         7e:7a:81:02:e6:ef:02:0e:9e:dc:1b:51:88:2c:4f:a6:14:c1:
         6b:79:2e:37:2d:f1:53:79:df:a4:0c:61:d1:20:c4:69:51:61:
         7e:97:1d:c2:85:c0:e7:43:40:d7:2c:1e:93:bf:3f:90:37:fc:
         07:df:64:b4:e9:f9:af:f6:8a:a2:3f:81:b2:27:56:ec:74:28:
         53:bf:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:11:32 2025 by rpki-client