Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          HL3Jer0ytfdDET8sJ517qp3sTGOjvo2t+GR1sZL1dqQ=
Subject key identifier:   D5:B9:3B:51:CE:BA:77:0D:2D:DE:EC:6D:E3:95:F8:D9:BF:55:1C:0A
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       1B6F36E2CF6BF40643873A71F6B5059D40E4E43C
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
Signing time:             Fri 06 Dec 2024 19:05:55 +0000
ROA not before:           Fri 06 Dec 2024 19:00:55 +0000
ROA not after:            Fri 05 Dec 2025 19:05:55 +0000
asID:                     264246
IP address blocks:        138.118.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6f:36:e2:cf:6b:f4:06:43:87:3a:71:f6:b5:05:9d:40:e4:e4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  6 19:00:55 2024 GMT
            Not After : Dec  5 19:05:55 2025 GMT
        Subject: CN=D5B93B51CEBA770D2DDEEC6DE395F8D9BF551C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:69:e8:3f:7b:6d:92:80:e1:9e:f7:d6:a7:
                    c5:a2:e4:77:fb:7f:ef:63:36:e0:74:6c:f4:ae:e0:
                    4b:d7:e7:08:eb:d6:c4:21:4a:ef:ef:e9:16:0f:2c:
                    db:f1:54:c1:a0:bf:5e:50:e9:f1:27:f1:9c:a9:7d:
                    35:1a:dd:b9:00:07:f3:50:89:a5:64:dc:8c:9e:1b:
                    64:f1:41:ea:b9:56:ea:eb:16:fb:c1:12:16:a7:e0:
                    c9:2e:5c:48:34:fc:e2:cb:3c:bc:9c:d0:8e:04:32:
                    18:14:1b:90:7b:d2:94:ac:c2:3f:9d:75:00:c3:18:
                    c6:a8:5d:1a:50:e0:de:ce:fc:ef:e9:be:67:d8:08:
                    b0:45:15:93:b5:d6:20:5d:a8:dd:67:e4:90:e5:4a:
                    3b:35:c0:d3:f5:b9:fd:08:9b:d6:70:32:db:4c:67:
                    ab:81:87:31:88:29:37:81:2c:e6:8e:05:30:21:12:
                    3f:bf:aa:96:cd:08:f9:72:7d:de:aa:b6:7c:bb:2d:
                    1f:55:6d:dc:3f:1b:31:c4:50:41:e1:40:6b:8c:19:
                    9a:5b:28:48:11:1c:38:83:c3:6d:50:9d:01:1a:47:
                    24:13:54:f8:79:b4:22:4b:cc:d4:66:4b:53:41:30:
                    e5:1a:a6:2d:86:38:91:3e:8e:a5:32:ba:ff:41:c6:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:3B:51:CE:BA:77:0D:2D:DE:EC:6D:E3:95:F8:D9:BF:55:1C:0A
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:a0:77:e6:62:d2:6d:40:c2:06:6f:ba:df:58:6c:29:03:
         51:52:8a:a5:e1:19:9c:ae:23:69:6e:0b:a5:6c:5d:71:eb:bd:
         24:c1:58:1c:78:ea:d8:59:54:66:85:99:b7:39:9f:72:47:51:
         28:18:60:a4:cf:05:83:a2:22:03:f9:89:d8:3a:3b:a0:71:40:
         46:cb:85:05:0c:43:db:28:60:41:ef:26:2d:d1:28:3d:91:df:
         ba:28:0a:54:f8:b6:ce:23:a1:a0:50:e0:47:08:2a:eb:b5:ee:
         e5:db:2d:49:13:f2:b8:03:33:8c:82:a1:85:02:2a:5d:93:c9:
         09:cb:a9:7e:d8:40:11:1d:13:0c:cd:fc:88:b5:45:12:08:bf:
         fb:c5:d5:1d:85:4d:62:e7:db:a5:6a:16:36:60:b8:7e:d4:d6:
         8a:00:8f:a6:95:45:db:90:30:18:8c:2a:4d:b2:26:37:ea:37:
         54:07:d3:22:cc:7e:fd:99:fa:1f:e5:59:d6:a4:bc:0d:0c:e3:
         ab:36:fa:01:3f:40:90:e7:b8:0c:72:8d:6a:0f:50:23:f1:cd:
         e7:38:6d:55:4f:a1:1d:1f:7e:1e:05:e9:46:5d:cd:d7:82:f7:
         c2:1e:d7:d7:2d:0b:e2:bd:a1:68:c2:61:16:83:a7:66:fa:ca:
         46:61:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:56:12 2025 by rpki-client