Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/3133382e3231392e3135322e302f32322d3234203d3e203533313335.roa
File:                     3133382e3231392e3135322e302f32322d3234203d3e203533313335.roa (raw, json)
Hash identifier:          kQN4gAPkkOYL0JMXMdBl+zGj1w4GA9tts47Ph+34vAQ=
Subject key identifier:   5D:95:FF:5E:CE:E6:B5:D3:4B:67:70:51:BF:88:38:CB:F7:C6:47:1C
Certificate issuer:       /CN=79061C2B526054D2168C0FEDE234A36980C7D6BC
Certificate serial:       4B09FEA98485E01C45C9C2CD0BF8520CB0E239D8
Authority key identifier: 79:06:1C:2B:52:60:54:D2:16:8C:0F:ED:E2:34:A3:69:80:C7:D6:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/3133382e3231392e3135322e302f32322d3234203d3e203533313335.roa
Signing time:             Mon 19 Sep 2022 19:02:39 +0000
ROA not before:           Mon 19 Sep 2022 18:57:39 +0000
ROA not after:            Mon 18 Sep 2023 19:02:39 +0000
asID:                     53135
IP address blocks:        138.219.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:09:fe:a9:84:85:e0:1c:45:c9:c2:cd:0b:f8:52:0c:b0:e2:39:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79061C2B526054D2168C0FEDE234A36980C7D6BC
        Validity
            Not Before: Sep 19 18:57:39 2022 GMT
            Not After : Sep 18 19:02:39 2023 GMT
        Subject: CN=5D95FF5ECEE6B5D34B677051BF8838CBF7C6471C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:37:f4:68:5e:b8:94:aa:98:94:12:06:af:
                    82:f5:a1:26:fc:c1:f3:0d:62:f7:a2:e6:ab:d3:86:
                    e1:dd:7f:77:90:08:54:92:f4:ab:82:2e:54:65:c5:
                    0b:52:de:45:22:5a:21:ee:1a:a8:b9:a8:75:f2:77:
                    af:a5:ab:6d:69:57:2b:d9:74:37:1e:be:55:88:87:
                    7a:a3:b6:c0:54:49:35:2f:bb:1e:fe:11:d5:8c:61:
                    30:88:da:3d:ce:0e:59:72:05:d5:15:f8:c1:11:10:
                    22:78:7b:28:6c:3c:b9:49:1d:a3:6c:4e:4e:d5:6a:
                    69:bd:92:c7:d7:09:c6:50:34:0f:fc:2f:99:c4:d3:
                    10:58:96:13:dc:f3:cd:20:dd:bf:ff:43:6b:b6:d3:
                    90:c3:52:00:5e:c7:cd:5d:0b:61:fd:00:48:59:18:
                    ef:68:d7:0f:3a:c0:47:91:a4:75:75:2f:c7:10:c9:
                    4f:88:4a:ff:2b:31:c8:ff:59:bb:24:91:f3:03:a8:
                    d7:da:ee:d6:bc:80:92:b3:e1:05:1b:be:92:c8:3a:
                    52:b6:17:fe:59:c4:bd:b3:a2:dd:8b:bd:7a:2e:56:
                    16:ed:cd:83:86:c1:c3:88:bb:05:14:77:50:da:09:
                    ef:ff:57:4f:d8:02:2e:a3:11:97:c2:2e:af:ab:67:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:95:FF:5E:CE:E6:B5:D3:4B:67:70:51:BF:88:38:CB:F7:C6:47:1C
            X509v3 Authority Key Identifier:
                keyid:79:06:1C:2B:52:60:54:D2:16:8C:0F:ED:E2:34:A3:69:80:C7:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/3133382e3231392e3135322e302f32322d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:db:94:a1:50:f4:d4:ee:33:a8:6d:e1:dd:d1:8d:e1:af:
         7c:1f:df:d6:a4:ca:70:55:64:82:57:b1:81:c3:64:53:c7:7a:
         2f:96:89:3b:cb:0e:a9:00:b1:03:99:0c:1a:7e:47:d0:5c:80:
         9a:38:ff:70:85:52:4d:bb:76:53:67:b7:41:2f:42:bd:66:78:
         0e:35:85:ac:a4:41:24:04:5d:f0:bb:98:48:44:6f:74:20:da:
         a1:a6:f3:29:bd:1e:67:6a:5d:25:ac:98:42:68:58:93:1d:86:
         86:3b:70:0e:e3:e8:5c:52:45:37:2c:83:5e:5d:4b:6d:2a:46:
         3e:21:56:72:ef:7e:1e:1b:d9:93:b0:a2:8d:c1:cd:11:48:b7:
         a1:4d:e8:e6:f5:86:87:06:85:a0:fa:94:95:ea:10:50:6c:5e:
         31:36:a0:c6:05:98:df:de:f1:37:97:cf:74:cb:46:c3:29:c8:
         cd:0c:1b:53:05:21:5e:e6:f4:a7:b4:8a:7b:70:e0:4e:28:53:
         9f:f9:61:2e:5f:05:83:7a:92:55:1e:4c:ff:5f:cb:66:72:cd:
         0e:fa:e1:df:37:f2:24:6f:1e:e0:49:45:d9:8c:20:21:46:05:
         e2:7f:e7:72:d3:ff:e0:66:88:05:11:f5:46:9e:83:b5:b9:b5:
         c8:a5:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:19:07 2025 by rpki-client