Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          lt2kuEiaRRw/TjbIcGcTN8HRpAXggooVwpZJk4XCMrA=
Subject key identifier:   52:BD:A8:82:0B:C0:82:10:A7:3A:C2:3E:1C:A8:CB:A1:57:E0:2E:25
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       2D3449B40EA6A3CFCB296B999E9EE6902B258DE8
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
Signing time:             Fri 06 Dec 2024 19:05:50 +0000
ROA not before:           Fri 06 Dec 2024 19:00:50 +0000
ROA not after:            Fri 05 Dec 2025 19:05:50 +0000
asID:                     264246
IP address blocks:        138.118.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:49:b4:0e:a6:a3:cf:cb:29:6b:99:9e:9e:e6:90:2b:25:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  6 19:00:50 2024 GMT
            Not After : Dec  5 19:05:50 2025 GMT
        Subject: CN=52BDA8820BC08210A73AC23E1CA8CBA157E02E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:7c:fe:85:ae:15:c9:85:58:cd:8c:20:54:
                    dd:c1:43:5c:b4:d6:1c:09:d3:32:c6:c0:a9:20:ca:
                    8c:72:25:95:3b:41:e3:bb:8a:f0:43:08:bb:ed:08:
                    0c:1b:5f:28:54:40:58:7f:41:99:de:30:d0:cc:53:
                    cf:b7:b2:97:95:3f:8c:e0:67:58:6b:7c:e0:ce:6f:
                    7a:b6:e4:f9:ce:9a:17:e4:b5:42:72:9e:c6:62:bf:
                    5b:e5:e2:e9:7c:ce:2d:ac:7d:bc:15:76:06:c0:86:
                    d3:53:f0:63:7c:a6:ae:5d:c5:c3:3c:99:28:d0:fe:
                    93:d1:a0:3b:e7:8a:85:bb:33:99:e2:78:2b:14:42:
                    f6:63:e0:79:ec:c0:54:5e:4f:f7:ac:49:7e:ba:fd:
                    9f:07:36:d7:4f:9e:40:c7:a8:09:3e:c9:34:c9:9d:
                    1c:55:40:88:fe:e7:90:df:92:51:da:44:a9:b0:d2:
                    ef:4e:c7:93:72:9e:cb:2c:20:67:b0:24:e2:26:31:
                    22:30:c5:87:da:22:b2:10:88:00:6d:5f:8c:5a:6b:
                    0b:5f:3a:ad:eb:8c:08:28:30:5e:9d:56:75:a5:9f:
                    9d:7e:5d:36:bd:b2:df:42:25:01:e0:94:a9:7e:ee:
                    a0:d9:d7:25:c2:8c:f6:cc:01:60:4d:4a:63:45:12:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:A8:82:0B:C0:82:10:A7:3A:C2:3E:1C:A8:CB:A1:57:E0:2E:25
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:53:c2:ed:8e:33:e0:88:bb:a4:79:84:f0:8a:e3:e9:ca:
         5f:d6:fe:cc:06:b9:80:1f:93:4a:04:26:2d:76:f4:21:9e:93:
         06:14:fc:b2:bf:a3:c8:ca:9c:4a:50:c8:4c:cc:31:ac:c5:fe:
         bd:b5:a4:f1:df:3a:4d:9a:8e:6e:05:3c:5a:42:b7:56:6a:5f:
         0c:ca:95:41:71:ea:ad:a6:93:ef:2f:d0:81:86:9f:6e:c6:cf:
         ce:82:e9:51:4e:fe:26:5f:93:c7:61:4f:a2:fe:66:f1:15:cd:
         c8:57:4e:1e:11:fb:f7:cf:32:c1:35:02:26:32:73:0e:c5:75:
         4a:05:19:41:bc:13:ba:f8:7e:9c:90:35:bc:0c:b8:03:1a:cf:
         a3:bb:6f:39:36:e7:01:14:23:60:59:4e:b3:4f:0c:dd:bb:4d:
         c0:b3:f1:d7:11:96:ce:b3:9c:f9:88:10:bb:00:2d:a4:71:ed:
         33:21:f8:4b:1b:35:79:1b:79:10:ad:a5:07:38:97:b5:74:c4:
         0a:12:d4:a8:db:a8:a8:3b:e0:f3:35:b4:f7:18:74:d9:44:a5:
         8b:74:26:44:d6:19:cb:44:42:8e:ee:0c:9e:f4:ea:5c:d8:8a:
         f4:51:04:9a:b9:e3:d1:55:e9:0b:58:13:8a:19:68:44:6a:31:
         c7:9b:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:56:09 2025 by rpki-client