Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32342d3234203d3e20323634313537.roa
File:                     3133382e39392e37362e302f32342d3234203d3e20323634313537.roa (raw, json)
Hash identifier:          3P2zc0pNpSsNv+WCbkNyNO//cjtrHvYCfCQlbPDxY54=
Subject key identifier:   81:BA:6B:BD:E9:69:08:ED:69:54:93:60:22:1B:34:86:C3:11:38:C8
Certificate issuer:       /CN=91003805A8007527288047A01E0D382C2CC2A216
Certificate serial:       0F9BFA9E89C127B6DB672FCB3144139012E6B3CC
Authority key identifier: 91:00:38:05:A8:00:75:27:28:80:47:A0:1E:0D:38:2C:2C:C2:A2:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91003805A8007527288047A01E0D382C2CC2A216.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32342d3234203d3e20323634313537.roa
Signing time:             Fri 22 Jul 2022 14:05:37 +0000
ROA not before:           Fri 22 Jul 2022 14:00:37 +0000
ROA not after:            Fri 21 Jul 2023 14:05:37 +0000
asID:                     264157
IP address blocks:        138.99.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9b:fa:9e:89:c1:27:b6:db:67:2f:cb:31:44:13:90:12:e6:b3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91003805A8007527288047A01E0D382C2CC2A216
        Validity
            Not Before: Jul 22 14:00:37 2022 GMT
            Not After : Jul 21 14:05:37 2023 GMT
        Subject: CN=81BA6BBDE96908ED69549360221B3486C31138C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:1d:c4:6b:af:4c:3d:0d:54:70:6c:e0:ce:
                    c0:8e:5b:84:7c:3a:ea:c6:0c:68:67:88:bb:6f:af:
                    25:1e:b2:2b:97:da:ba:ef:aa:a6:94:31:e9:d4:1b:
                    2a:b1:f1:c3:33:3c:76:02:6d:31:c2:d5:21:e1:88:
                    c0:53:9d:85:af:53:ee:bc:06:ae:5d:c1:e4:8c:69:
                    75:54:23:c6:10:b2:7e:6c:5c:bc:98:d7:33:0b:2a:
                    0c:1d:34:0e:4d:6d:f0:47:fb:74:28:d3:d7:8f:4d:
                    94:05:ed:2d:14:2d:ea:be:cc:ff:58:b8:14:9a:81:
                    9f:da:cc:e4:db:1a:b5:73:93:f0:b7:14:7b:cd:c1:
                    96:e0:ea:c5:ac:1b:c0:56:82:b2:e3:86:0c:1b:00:
                    49:c3:1e:47:51:81:4e:a5:af:16:41:6b:75:94:dd:
                    d4:44:9b:0e:0f:9d:74:6d:1c:a0:00:3c:5f:19:6a:
                    dc:5b:27:e6:3d:dd:7a:73:8e:24:d4:8f:b7:39:03:
                    8c:b9:b7:57:0c:c6:7b:d1:81:5e:dc:70:fc:c6:e3:
                    a5:30:a9:1f:d5:ca:c7:55:3a:dd:5a:c7:8d:bd:31:
                    b3:f3:a2:3a:ad:41:2f:0f:d7:9d:bb:cd:1a:4f:1c:
                    0e:8b:1f:da:4b:b4:75:c7:3a:a8:c2:33:ef:ad:d5:
                    dc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BA:6B:BD:E9:69:08:ED:69:54:93:60:22:1B:34:86:C3:11:38:C8
            X509v3 Authority Key Identifier:
                keyid:91:00:38:05:A8:00:75:27:28:80:47:A0:1E:0D:38:2C:2C:C2:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/91003805A8007527288047A01E0D382C2CC2A216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91003805A8007527288047A01E0D382C2CC2A216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/0/3133382e39392e37362e302f32342d3234203d3e20323634313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:e9:7f:ef:28:3d:75:af:4c:5e:06:6a:d1:c6:e0:a4:71:
         df:d8:f5:1e:95:b3:32:9f:20:31:ce:b4:72:c5:81:d5:41:75:
         ea:9c:c9:46:4c:7f:af:98:62:a1:88:7a:cc:3e:56:4d:8c:b9:
         97:70:7b:9c:6f:48:89:0c:0b:0c:ff:08:9c:62:dd:4d:4c:56:
         38:7a:8c:70:31:10:65:59:73:93:8e:76:9d:c2:ae:1e:3f:07:
         d9:f3:f5:62:d6:45:bd:05:a5:c6:f9:2f:f6:d8:66:0c:bf:cc:
         3f:ea:57:39:a5:01:73:8a:82:9d:90:d0:ad:65:aa:08:33:cc:
         df:6c:69:3e:55:d0:42:2e:86:08:ba:79:2b:a8:39:3e:99:18:
         8a:6f:e8:b7:e8:03:ff:f3:92:f2:f9:19:d6:e3:69:ec:6a:58:
         01:18:f2:1d:f7:23:88:5b:18:e2:43:92:b8:60:d4:ed:e8:18:
         e6:97:1d:f3:33:1a:fc:fa:f1:01:85:6e:b7:9e:75:9f:83:c0:
         5c:4d:5a:1e:6e:c6:42:f8:96:a6:a4:62:ca:4d:a0:2b:5e:a8:
         be:4e:7d:85:ae:d3:bf:38:90:42:b6:d1:7c:b4:3d:ba:44:8b:
         fa:15:a5:a5:64:c3:ab:d5:c4:91:f4:c5:ef:50:ca:92:06:c1:
         81:75:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:21:01 2025 by rpki-client