Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
File:                     3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier:          DPfgq5lFqYxXL0ioBsNx0iIzgjGWZW0wM6mxcC3R3+M=
Subject key identifier:   95:65:76:41:E8:EB:73:3C:AD:6B:29:BB:87:EE:64:2B:46:1B:1B:0E
Certificate issuer:       /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial:       093D9EA001B2D11D54A9173B83A79C28EF8FA816
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
Signing time:             Mon 12 Jun 2023 20:53:46 +0000
ROA not before:           Mon 12 Jun 2023 20:48:46 +0000
ROA not after:            Mon 10 Jun 2024 20:53:46 +0000
asID:                     263961
IP address blocks:        138.255.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:9e:a0:01:b2:d1:1d:54:a9:17:3b:83:a7:9c:28:ef:8f:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
        Validity
            Not Before: Jun 12 20:48:46 2023 GMT
            Not After : Jun 10 20:53:46 2024 GMT
        Subject: CN=95657641E8EB733CAD6B29BB87EE642B461B1B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:c6:ac:03:40:a6:32:28:96:a1:50:50:d1:
                    03:70:9e:70:0d:73:8a:ef:4a:18:b0:bb:9a:2b:9d:
                    a8:83:73:b1:78:b0:20:be:92:cf:68:63:0f:25:26:
                    5b:87:79:df:91:09:09:61:fa:5f:58:77:6d:52:ef:
                    12:5d:15:f4:d9:47:d6:ff:f3:28:e8:32:e8:7d:7e:
                    d8:47:c7:b3:f0:7f:18:1f:3e:4d:e3:d9:ac:ad:c2:
                    17:6f:81:25:64:1a:c7:0f:ce:dd:15:94:12:51:3f:
                    06:fd:ab:06:98:38:61:8f:b3:71:f3:5b:5b:a8:8d:
                    e7:a9:38:12:4f:eb:96:d9:ff:34:2b:54:42:e2:59:
                    d1:31:53:41:ef:20:6a:91:16:30:93:77:ff:b8:7b:
                    59:2c:69:39:8a:9f:85:d0:ee:5e:97:94:84:fd:37:
                    77:a9:14:40:4d:b0:97:fd:49:26:6a:92:d2:62:9a:
                    ca:b0:fb:ea:89:c0:3b:8a:9d:0f:fe:1c:80:40:cc:
                    fb:f6:b1:8d:23:c0:9a:2d:62:4c:20:a6:fb:26:a6:
                    14:2c:df:a5:df:64:17:3a:90:0d:14:3d:5f:cc:bc:
                    a7:af:75:f0:73:98:23:9f:75:9d:33:d8:5b:fe:56:
                    f4:58:78:f4:48:f8:7d:a8:e7:49:44:0f:0f:63:79:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:76:41:E8:EB:73:3C:AD:6B:29:BB:87:EE:64:2B:46:1B:1B:0E
            X509v3 Authority Key Identifier:
                keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:3b:6f:79:8f:8c:b8:01:b7:d3:01:5d:c1:cf:ff:93:7c:
         c6:f5:93:26:b5:93:a0:d4:64:e8:38:72:09:f9:36:95:c5:3a:
         6e:12:f1:04:e6:f9:78:65:43:a4:47:63:55:b3:af:dc:36:d8:
         59:43:bb:b6:37:b8:24:d4:07:ee:8a:4b:11:22:8a:fb:c6:d1:
         44:2f:3b:36:50:6b:2f:50:59:de:66:ef:80:fc:6a:e3:ad:2e:
         af:09:0c:cb:b5:b1:f8:fe:98:21:d9:ec:da:57:14:8f:8d:ec:
         bd:03:2f:72:ce:45:19:29:bb:0b:9c:5c:fe:b1:9d:2f:ac:28:
         43:f2:ab:64:88:24:7b:d8:43:57:21:1b:f5:ac:0d:87:93:93:
         4d:cb:cb:3a:3d:59:1d:8c:94:03:58:5c:7d:b7:fe:cb:5a:ec:
         30:df:b4:2f:0c:41:f3:78:87:a9:b4:47:ca:3d:15:3b:86:53:
         43:51:6e:d9:1f:86:26:bb:92:bf:ad:6d:1b:47:97:88:2d:ed:
         cc:31:b8:b9:f5:db:d8:55:24:0f:63:f9:9a:6a:35:b1:26:59:
         56:ab:b6:4b:50:1a:5d:20:7c:5e:43:f1:4e:b1:11:c9:c8:1f:
         b9:08:2e:6b:04:15:4e:7d:44:44:37:d8:7d:b9:57:71:0f:d1:
         ee:46:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:47:34 2025 by rpki-client