Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e2031.roa
File:                     3133382e3138352e3233302e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier:          +IDcN/eNEckS7aahwNqRD2y66S66Pli4HUuj5U7GciY=
Subject key identifier:   5C:43:57:3B:1C:47:15:C8:D5:BE:A5:A7:BB:A2:BF:80:65:B3:D1:4D
Certificate issuer:       /CN=4EDD7C03982C823094F71366C91D29D176F1E0AF
Certificate serial:       0EDD47CAE31D64AEF4E9A3FF7F54C05C6C9C94D7
Authority key identifier: 4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e2031.roa
Signing time:             Sun 30 Jul 2023 03:45:51 +0000
ROA not before:           Sun 30 Jul 2023 03:40:51 +0000
ROA not after:            Sun 28 Jul 2024 03:45:51 +0000
asID:                     1
IP address blocks:        138.185.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dd:47:ca:e3:1d:64:ae:f4:e9:a3:ff:7f:54:c0:5c:6c:9c:94:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EDD7C03982C823094F71366C91D29D176F1E0AF
        Validity
            Not Before: Jul 30 03:40:51 2023 GMT
            Not After : Jul 28 03:45:51 2024 GMT
        Subject: CN=5C43573B1C4715C8D5BEA5A7BBA2BF8065B3D14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:98:2a:24:09:21:49:c6:1f:d9:17:10:05:
                    ba:90:9f:6c:7a:6f:1f:da:7a:58:3f:b2:91:c4:de:
                    9f:aa:05:44:6f:fd:35:4e:90:18:ac:98:60:5d:7d:
                    95:8a:40:76:81:9e:59:5a:e5:38:84:60:14:c2:90:
                    6a:c8:5d:4c:8f:e9:05:c9:ce:71:a3:3e:a7:32:08:
                    0d:20:0c:72:ac:52:48:1d:ff:df:ce:96:64:0a:31:
                    b0:85:f6:3c:25:c1:88:00:cd:82:84:74:ff:b9:57:
                    2d:98:1b:08:26:7c:e4:ff:72:12:eb:81:3d:f0:00:
                    06:6b:5b:06:b5:0d:61:87:a4:b9:58:4a:30:ab:0e:
                    12:fa:f7:46:30:b2:80:4a:03:3b:9b:4b:5c:98:0c:
                    54:d4:6c:6f:e2:f9:f6:8a:86:47:26:6e:0b:39:5b:
                    14:65:9e:0f:ab:80:86:c4:88:54:ff:2b:a8:54:20:
                    e2:c1:fc:5b:e3:9b:92:5a:62:0c:34:f9:4b:90:7a:
                    f4:b3:e6:98:d0:b6:68:6f:a9:00:4b:47:52:74:db:
                    98:38:72:98:8d:a0:d6:65:02:aa:69:81:48:8c:e1:
                    11:3e:c1:23:5c:73:2e:94:02:4b:22:57:53:da:e9:
                    fd:34:96:56:6e:82:02:b4:3e:24:1d:6b:ea:44:0f:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:57:3B:1C:47:15:C8:D5:BE:A5:A7:BB:A2:BF:80:65:B3:D1:4D
            X509v3 Authority Key Identifier:
                keyid:4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:94:91:5b:96:71:9f:9f:36:77:1d:73:f2:93:d2:6d:00:79:
         ba:d2:5d:ee:35:86:66:c9:a7:dc:5f:0b:fb:b0:b6:63:07:22:
         3a:4e:c3:11:3f:6a:ad:d2:b8:e3:35:72:d8:21:4c:25:c1:81:
         b8:52:09:dd:85:15:77:e0:a4:f2:04:0b:c1:04:ef:fa:da:dd:
         de:18:10:0b:9f:87:ab:f0:00:cd:b6:84:55:02:3a:3f:14:3c:
         e5:51:fa:00:db:e6:ac:47:8d:98:85:b8:c6:c2:f3:ac:ca:9a:
         6b:3e:fb:4b:14:c2:cd:1c:9a:0f:44:2d:d5:9b:6e:c7:d7:ab:
         60:9c:fa:2a:77:1c:f5:91:bd:a3:73:00:84:01:c6:6d:98:b7:
         a4:0d:83:32:48:ce:44:65:6a:ac:21:04:3f:20:0e:2d:d9:75:
         32:32:58:24:53:95:8e:fb:0d:7d:5d:b4:06:fd:58:02:f5:d2:
         2f:7a:c0:b7:79:fd:a7:4d:3c:98:64:cf:89:8e:21:0c:44:bc:
         e4:92:a8:d3:8f:5e:44:36:0e:1d:7d:51:38:0e:af:25:04:5f:
         79:6e:ed:1c:d0:d6:c8:29:3f:59:f2:f6:19:32:ac:1e:d9:e0:
         e7:6b:83:b5:59:8d:4f:8c:ba:3f:e2:c8:66:76:0e:ed:2c:4d:
         43:ae:6a:2e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUDt1HyuMdZK706aP/f1TAXGyclNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVERDdDMDM5ODJDODIzMDk0RjcxMzY2QzkxRDI5RDE3
NkYxRTBBRjAeFw0yMzA3MzAwMzQwNTFaFw0yNDA3MjgwMzQ1NTFaMDMxMTAvBgNV
BAMTKDVDNDM1NzNCMUM0NzE1QzhENUJFQTVBN0JCQTJCRjgwNjVCM0QxNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOJgqJAkhScYf2RcQBbqQn2x6
bx/aelg/spHE3p+qBURv/TVOkBismGBdfZWKQHaBnlla5TiEYBTCkGrIXUyP6QXJ
znGjPqcyCA0gDHKsUkgd/9/OlmQKMbCF9jwlwYgAzYKEdP+5Vy2YGwgmfOT/chLr
gT3wAAZrWwa1DWGHpLlYSjCrDhL690YwsoBKAzubS1yYDFTUbG/i+faKhkcmbgs5
WxRlng+rgIbEiFT/K6hUIOLB/Fvjm5JaYgw0+UuQevSz5pjQtmhvqQBLR1J025g4
cpiNoNZlAqppgUiM4RE+wSNccy6UAksiV1Pa6f00llZuggK0PiQda+pEDzcfAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUXENXOxxHFcjVvqWnu6K/gGWz0U0wHwYDVR0j
BBgwFoAUTt18A5gsgjCU9xNmyR0p0Xbx4K8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhWWTQySzdZVVM2NDlGTlozREp2R0pXV2JCSjN2MTYyd1NuOUp0N1F5
TksvMC80RUREN0MwMzk4MkM4MjMwOTRGNzEzNjZDOTFEMjlEMTc2RjFFMEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRFREQ3QzAzOTgyQzgyMzA5
NEY3MTM2NkM5MUQyOUQxNzZGMUUwQUYuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIVlk0Mks3WVVTNjQ5Rk5aM0RKdkdKV1diQkozdjE2MndTbjlKdDdReU5LLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAirnmMA0GCSqGSIb3DQEBCwUAA4IBAQB1lJFblnGfnzZ3HXPy
k9JtAHm60l3uNYZmyafcXwv7sLZjByI6TsMRP2qt0rjjNXLYIUwlwYG4UgndhRV3
4KTyBAvBBO/62t3eGBALn4er8ADNtoRVAjo/FDzlUfoA2+asR42YhbjGwvOsyppr
PvtLFMLNHJoPRC3Vm27H16tgnPoqdxz1kb2jcwCEAcZtmLekDYMySM5EZWqsIQQ/
IA4t2XUyMlgkU5WO+w19XbQG/VgC9dIvesC3ef2nTTyYZM+JjiEMRLzkkqjTj15E
Ng4dfVE4Dq8lBF95bu0c0NbIKT9Z8vYZMqwe2eDna4O1WY1PjLo/4shmdg7tLE1D
rmou
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:00 2025 by rpki-client