Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          zoAgcahE9iOrf7wr8Xx6flLg/bl7NGSuS2Yg2LqLhSM=
Subject key identifier:   57:4D:5F:E0:7F:47:F1:66:62:A6:A9:FA:0B:C7:3A:33:07:4D:79:2C
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       64AD00A0866217E759D920828EED7E33AB5AF9CD
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa
Signing time:             Thu 08 Feb 2024 22:57:41 +0000
ROA not before:           Thu 08 Feb 2024 22:52:41 +0000
ROA not after:            Thu 06 Feb 2025 22:57:41 +0000
asID:                     264126
IP address blocks:        138.59.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ad:00:a0:86:62:17:e7:59:d9:20:82:8e:ed:7e:33:ab:5a:f9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Feb  8 22:52:41 2024 GMT
            Not After : Feb  6 22:57:41 2025 GMT
        Subject: CN=574D5FE07F47F16662A6A9FA0BC73A33074D792C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:7b:c8:cc:5d:04:97:49:a5:a0:72:2f:53:
                    9f:47:c2:84:3c:fc:45:33:df:11:fe:90:04:92:70:
                    bd:4f:1e:1c:66:bd:60:ee:b5:84:38:4e:4b:c9:7a:
                    14:26:ee:f1:6f:7f:e4:b1:44:56:b4:8b:78:75:6d:
                    ca:1d:67:43:4a:be:b0:e5:81:8c:d4:38:7c:03:41:
                    fd:cb:f5:54:65:d3:6c:79:0c:e5:27:04:92:57:d9:
                    87:e1:77:91:a1:53:99:59:97:75:14:29:1a:d3:bc:
                    4b:ef:41:96:ae:24:79:a0:43:b1:ea:cb:5b:c4:1a:
                    28:74:73:9a:e5:aa:e1:0c:13:67:f5:52:e4:86:71:
                    71:b6:bd:55:91:0f:83:5e:29:b5:57:55:d0:dc:45:
                    81:21:9d:1f:36:f6:ca:76:44:47:fb:ca:06:c3:ca:
                    44:24:b8:d1:ef:b0:d3:c3:a3:59:bf:be:bd:24:03:
                    1a:0a:18:25:5f:b8:3e:67:cd:97:11:40:db:b5:8c:
                    4c:e3:d6:e5:bf:ca:a5:be:10:ac:5a:c6:7b:8b:c8:
                    6b:f2:27:43:22:45:7b:b1:80:3f:91:3f:22:ac:51:
                    6e:6b:82:94:2f:27:84:49:00:84:2a:ac:45:32:70:
                    ab:5a:f1:51:91:34:5a:e4:c7:34:fe:0c:da:38:6b:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:5F:E0:7F:47:F1:66:62:A6:A9:FA:0B:C7:3A:33:07:4D:79:2C
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:7f:8f:59:1d:2b:e8:6c:34:e7:80:b7:6e:9d:8d:56:94:
         37:7d:79:38:8a:57:bf:cd:1f:88:66:0c:f2:d4:c7:96:fc:61:
         1a:4a:68:0c:4c:33:14:fc:c3:e4:5a:57:45:1c:bc:d4:12:95:
         01:3a:b7:21:c8:78:db:d0:f3:58:cc:0b:13:c3:2c:ea:5a:37:
         b1:ee:b6:2c:6e:d8:ba:3d:35:97:62:bc:e1:17:8f:a1:3c:03:
         b3:20:60:0c:40:80:e2:87:12:8f:18:b7:3d:a4:25:ec:a3:41:
         fb:f4:e1:88:78:c7:01:7b:68:0e:29:fb:29:49:e1:51:e1:09:
         a2:c6:18:51:6a:50:96:9e:ed:30:35:ef:b8:9e:01:35:80:38:
         bc:5b:67:24:70:b6:d7:88:bd:37:fd:f4:fc:f7:0a:46:fb:49:
         f1:9a:d0:38:d4:57:08:77:fc:48:46:41:68:9e:5c:68:76:92:
         5b:3a:da:e3:ef:10:c5:39:fc:38:7d:83:19:e9:2e:0d:79:f5:
         d3:90:1a:ea:ef:38:1a:43:4b:a7:a9:62:65:da:a5:4b:7c:dd:
         ca:9d:85:31:7d:bf:76:74:bd:81:46:53:ea:80:1f:8d:3b:dd:
         8e:53:b2:6d:14:f7:66:10:20:1e:69:0a:56:fb:10:f6:7c:9c:
         a7:c9:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:26 2025 by rpki-client