Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33312e302f32342d3234203d3e20323634313030.roa
File:                     3133382e39342e33312e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          uaSYVG3MRKhDVJRtt1sfsDIvWwYzuFNkPfZGGLblpG8=
Subject key identifier:   C4:3D:8D:CA:9C:58:1A:B9:24:6A:35:B5:9C:D5:98:6C:41:15:69:62
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       0E270D232A103E3EE39C6626D9A10EA400D26F69
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33312e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:05 +0000
ROA not before:           Mon 02 Dec 2024 12:03:05 +0000
ROA not after:            Mon 01 Dec 2025 12:08:05 +0000
asID:                     264100
IP address blocks:        138.94.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:0d:23:2a:10:3e:3e:e3:9c:66:26:d9:a1:0e:a4:00:d2:6f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:05 2024 GMT
            Not After : Dec  1 12:08:05 2025 GMT
        Subject: CN=C43D8DCA9C581AB9246A35B59CD5986C41156962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:f7:e8:5b:a5:91:69:54:11:74:af:8b:a3:
                    51:51:bb:86:67:bd:95:70:e5:c9:a5:8b:d5:31:c3:
                    a4:64:10:9e:07:de:9a:61:a5:0b:05:c8:a2:78:d1:
                    f4:35:07:f5:21:fb:85:6b:81:d4:4e:d1:41:17:80:
                    71:41:3a:b9:cc:f2:4b:d7:5a:72:e5:71:63:0e:ec:
                    5c:4d:c7:6f:0e:6b:96:94:20:45:5b:82:13:a3:e4:
                    32:e5:7e:c2:b4:5b:c3:d0:73:e0:46:b1:50:45:2e:
                    ec:5a:f7:f8:10:e3:a0:89:40:8a:e2:87:69:c3:99:
                    a7:9d:6b:26:36:bd:4c:ba:86:21:2a:5c:1d:5f:b1:
                    17:e0:32:5a:f8:b0:fb:49:1c:9a:e4:cc:c1:ef:25:
                    c9:7d:f5:16:96:a2:3c:03:f3:88:4b:dc:bf:43:33:
                    3c:97:6d:f2:5c:e1:fb:81:e8:ed:79:72:31:5c:7d:
                    54:c7:68:71:98:1f:34:ff:f6:3d:a3:a7:17:9e:7e:
                    8e:4a:b7:0d:ad:34:f7:ae:47:cf:f3:03:07:c5:71:
                    1a:ee:fc:c4:14:0e:0e:96:a8:a8:7c:aa:55:df:7d:
                    1a:cb:e5:26:43:ef:07:a3:a8:9f:9b:ae:3b:e1:05:
                    22:79:4b:bc:08:a7:65:55:d0:00:29:19:6b:5f:9b:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3D:8D:CA:9C:58:1A:B9:24:6A:35:B5:9C:D5:98:6C:41:15:69:62
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33312e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:2c:ed:8f:db:54:a8:06:be:6f:2d:90:0f:0d:58:88:01:
         95:f7:54:8b:41:ef:e9:17:91:a0:05:b0:91:20:71:cd:54:d7:
         90:1a:5e:d4:ed:c0:20:ac:21:58:5b:3f:50:fa:7a:ef:65:a5:
         c3:44:b3:0e:67:3c:e9:d3:95:fb:f0:9c:67:e4:8c:31:60:f5:
         31:14:d0:5b:3a:cf:f3:96:eb:a3:af:a2:1a:8c:9d:0c:de:cc:
         08:a9:e3:3d:5d:df:aa:34:f7:93:db:13:35:af:7c:20:c4:60:
         f8:61:b8:4a:c2:72:de:20:66:42:df:fb:e1:4b:ce:32:0d:2a:
         08:27:eb:32:3b:8d:35:e9:68:a7:4a:9b:c0:39:bf:96:11:c9:
         93:aa:a5:5e:1f:80:eb:da:d0:dd:0a:2e:a2:4f:83:0c:ef:3f:
         1a:ed:39:5e:45:e7:0e:0f:99:e1:97:fc:c0:df:28:c5:77:fd:
         34:08:08:0d:4c:66:dc:f0:19:5b:55:e9:9b:de:bb:42:c3:ec:
         41:c3:5e:a5:63:35:e4:6d:7a:c9:c5:11:17:e5:09:36:81:8e:
         a2:36:1c:5e:6d:4e:26:fc:8f:19:6f:57:f3:b4:a4:7f:6d:e8:
         1f:0c:54:ce:5c:82:e5:46:59:11:8e:78:cb:36:55:c6:c6:75:
         b6:c5:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:21 2025 by rpki-client