Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35382e302f32332d3233203d3e20323634323436.roa
File:                     3133382e3131382e35382e302f32332d3233203d3e20323634323436.roa (raw, json)
Hash identifier:          TaM3E2vqOSoLJnMKsm37Bb0woV/ybRdnC0boUP7gBNM=
Subject key identifier:   98:7F:B7:96:39:EB:A8:33:E3:24:D1:C1:D9:52:51:61:21:EA:CE:0F
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       61B9922E5B02D8C12CA6736C47826890131A83FA
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35382e302f32332d3233203d3e20323634323436.roa
Signing time:             Fri 06 Dec 2024 19:05:59 +0000
ROA not before:           Fri 06 Dec 2024 19:00:59 +0000
ROA not after:            Fri 05 Dec 2025 19:05:59 +0000
asID:                     264246
IP address blocks:        138.118.58.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:92:2e:5b:02:d8:c1:2c:a6:73:6c:47:82:68:90:13:1a:83:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  6 19:00:59 2024 GMT
            Not After : Dec  5 19:05:59 2025 GMT
        Subject: CN=987FB79639EBA833E324D1C1D952516121EACE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:26:51:4b:fa:d1:7d:3d:bc:85:d2:d1:23:
                    46:13:d6:c8:6e:82:11:04:ef:8e:eb:5f:ee:99:58:
                    9d:87:6f:00:00:11:f7:f9:66:3d:67:07:81:0f:a1:
                    83:ae:83:48:f0:9d:2d:95:61:19:96:31:f1:cf:a2:
                    fb:38:96:9b:6e:a3:51:e3:e9:e6:1b:25:44:a9:be:
                    84:cb:34:05:41:b9:ef:6d:f6:d4:a3:f1:84:ea:f4:
                    6c:5e:6c:fd:6d:e0:5a:d6:8c:1a:a8:23:03:f4:5c:
                    b5:dc:8f:a0:c1:15:25:3f:32:2e:0e:fe:2d:38:60:
                    c1:23:df:75:9b:41:96:21:13:30:18:9b:65:1f:1e:
                    17:17:b6:f1:22:90:99:bc:76:19:63:4c:15:50:d8:
                    e6:1a:aa:d6:2e:a4:24:50:f1:6c:98:f2:7b:4c:83:
                    86:fd:c1:4f:f5:e1:44:cd:97:e7:4c:9c:00:9f:e8:
                    46:0a:0a:98:0e:01:0d:16:66:51:de:16:41:a8:fa:
                    1b:4f:61:58:96:22:ab:c8:ab:0b:ee:2e:ff:5b:e5:
                    b8:07:89:35:33:ce:e9:79:1a:e8:e7:38:f2:36:a8:
                    82:a1:8e:32:b6:30:23:81:c2:9a:1a:a0:b4:18:eb:
                    c7:52:1f:32:23:8d:77:b5:2a:57:ee:41:ef:89:43:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:B7:96:39:EB:A8:33:E3:24:D1:C1:D9:52:51:61:21:EA:CE:0F
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35382e302f32332d3233203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:30:a0:f7:2e:3f:f7:a3:29:4a:27:65:82:0c:3c:d2:95:
         4d:07:47:71:19:7e:60:b2:6f:18:d6:db:63:5a:83:3a:2d:53:
         b2:ef:29:8c:f4:05:21:3e:57:0c:e1:2e:ea:cf:17:bc:28:6e:
         44:62:ff:9c:9c:d4:ae:ec:2a:5f:6f:1b:de:c9:6d:fe:54:a4:
         d3:bc:7d:59:9a:b0:ab:32:39:91:d1:e1:1f:a6:8c:8a:88:91:
         06:97:5c:c4:58:3a:33:dc:13:7d:58:21:2e:ee:8e:f9:ca:4a:
         c3:41:c2:3d:c5:a0:63:62:76:02:fe:68:6d:8b:c6:e8:ab:6e:
         ce:51:07:ae:00:51:3a:4f:0f:78:dd:ea:2c:93:ec:43:ba:a2:
         c3:7f:82:2f:c3:4c:a7:b4:7a:fc:80:cb:ac:a2:25:49:2c:4f:
         90:8b:17:1f:b1:95:b0:91:09:77:a4:d3:91:8d:5f:c1:9a:86:
         83:1f:5e:27:98:b5:06:c3:4c:9b:da:59:56:06:eb:4a:57:8c:
         86:15:cc:3d:5d:e4:bc:3b:29:f6:b5:38:30:27:e8:48:ad:72:
         23:db:d6:07:e8:b4:c1:13:3c:9e:08:f2:69:94:ed:ae:19:f9:
         f9:76:e3:f4:0d:59:50:2c:db:d5:0f:49:45:3a:66:65:6f:f2:
         21:76:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:53:32 2025 by rpki-client