Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (raw, json)
Hash identifier:          QQ++u4WV/nPIut+0zMbaiP/UDUM6ZT+D9HRopCNNuGM=
Subject key identifier:   D7:4D:89:7B:62:36:15:4B:EB:94:37:99:A5:73:18:6D:1A:4F:3F:5F
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       47B7395AF23CB107AAF43A962F6DF50FEB7D1523
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:42 +0000
ROA not before:           Fri 23 Jun 2023 19:01:42 +0000
ROA not after:            Fri 21 Jun 2024 19:06:42 +0000
asID:                     264589
IP address blocks:        138.36.240.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:39:5a:f2:3c:b1:07:aa:f4:3a:96:2f:6d:f5:0f:eb:7d:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:42 2023 GMT
            Not After : Jun 21 19:06:42 2024 GMT
        Subject: CN=D74D897B6236154BEB943799A573186D1A4F3F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:04:42:bb:b7:10:68:89:5d:a1:d6:78:ca:
                    c2:18:10:c4:7b:76:53:e3:8f:b3:7b:a9:37:8b:fb:
                    97:81:58:d1:37:56:9b:f7:53:ab:b7:86:0a:3e:b4:
                    73:83:5f:a2:de:d6:ed:bf:54:1a:bf:67:ad:d5:38:
                    f7:c9:9c:1b:cf:c7:4e:3c:bc:4d:b3:44:55:a4:c5:
                    f4:e8:aa:35:e8:7f:27:b3:1d:59:a0:1a:95:1a:a7:
                    39:4a:93:33:8d:ce:2e:f9:eb:6c:80:a1:81:e7:61:
                    48:a6:c2:01:a3:dc:8a:95:a4:97:af:62:69:7d:86:
                    8a:bd:fc:76:c6:f1:21:b4:ec:d7:3e:62:83:2b:1d:
                    21:d7:c3:82:63:3b:85:49:5a:66:c1:9d:f7:93:72:
                    50:e2:13:32:0a:2d:2f:d9:89:1e:a0:82:3d:cb:e7:
                    77:ec:81:c6:89:64:5f:25:14:7e:de:95:9f:39:44:
                    bb:a7:4d:45:da:45:b1:8f:69:c5:97:9c:c1:dd:f1:
                    73:0c:ac:d6:50:bb:db:f1:8b:a0:92:e1:31:9c:a1:
                    a2:d0:6e:21:ac:ac:e5:0c:20:9e:e7:81:d5:86:1e:
                    8a:c6:b3:15:2c:93:cd:6d:93:2c:46:74:5c:11:54:
                    57:0c:fa:aa:76:34:43:c9:8d:b5:f8:4a:60:c0:82:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4D:89:7B:62:36:15:4B:EB:94:37:99:A5:73:18:6D:1A:4F:3F:5F
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:8a:fb:f6:b0:ae:38:9c:43:2e:8d:20:fa:27:0e:e1:65:
         be:a2:26:94:a3:6e:0b:86:2c:d3:06:33:67:ec:9c:57:fd:12:
         f7:6e:b6:d5:28:b0:9e:03:ab:17:58:fb:ac:af:77:c8:06:7f:
         8b:c7:aa:4d:5f:40:6d:5c:20:04:cf:34:15:d3:ca:65:bc:73:
         4d:96:96:85:5d:0f:b5:b6:7d:59:97:b0:5d:18:95:61:0e:fb:
         2a:b7:12:b0:ce:73:4f:cb:79:97:68:61:ed:e8:21:b1:28:71:
         5a:58:28:3b:cb:99:99:ff:eb:5e:67:b6:ae:1b:21:ad:62:95:
         a0:77:85:71:67:94:73:56:e5:da:84:d1:34:a9:29:fb:b3:a8:
         75:64:27:4b:85:ad:f6:b3:03:7f:4e:a0:22:07:4d:8e:46:58:
         74:dd:79:6a:37:9f:a7:8b:d2:ca:8e:2e:18:f8:44:fd:a8:70:
         23:a7:1c:63:73:24:4d:00:52:e7:8f:05:e0:84:6f:a7:16:18:
         85:e6:9a:85:3d:5b:31:47:cc:dd:dd:00:8f:e5:d8:75:f9:ef:
         f2:2f:2d:f6:df:92:b7:0b:53:8f:12:e3:cb:7a:0c:55:a4:fa:
         d0:19:89:90:78:45:83:34:c6:63:7f:a3:92:72:dd:d2:28:f9:
         81:38:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:02 2025 by rpki-client