Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134332e302f32342d3234203d3e20323633393033.roa
File:                     3133382e3230342e3134332e302f32342d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          HRf5+PxKMK6j00qpZjrgM7peJ08frY+yyl7IVtB0yIo=
Subject key identifier:   59:47:04:C0:38:8B:FF:C4:80:CB:91:26:2B:36:2B:BA:C1:4D:41:B7
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       314FD5DDEFBD7AE25F300738ABD1BED307F70131
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134332e302f32342d3234203d3e20323633393033.roa
Signing time:             Fri 23 Dec 2022 16:40:30 +0000
ROA not before:           Fri 23 Dec 2022 16:35:30 +0000
ROA not after:            Fri 22 Dec 2023 16:40:30 +0000
asID:                     263903
IP address blocks:        138.204.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:d5:dd:ef:bd:7a:e2:5f:30:07:38:ab:d1:be:d3:07:f7:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Dec 23 16:35:30 2022 GMT
            Not After : Dec 22 16:40:30 2023 GMT
        Subject: CN=594704C0388BFFC480CB91262B362BBAC14D41B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:27:ec:d4:60:d8:8f:c1:45:ee:95:5e:e8:
                    e8:fd:c9:7d:b1:ee:cb:df:0b:2f:f4:6c:5c:4b:6f:
                    a1:93:97:13:6f:d4:5f:0c:fb:1d:c1:e3:0f:f0:87:
                    2d:27:32:8a:06:5a:37:19:42:de:72:bf:19:f6:d7:
                    02:a2:c5:f8:8f:a9:98:a0:3b:25:b3:70:21:fe:2f:
                    3d:d2:77:f0:6f:af:ea:70:34:18:6e:41:fc:1e:92:
                    56:37:ea:18:69:26:e5:c7:ea:8e:d2:d4:52:1a:82:
                    bf:3b:49:3c:a8:fb:06:c4:5a:9d:61:6f:df:de:2a:
                    1b:8d:84:1b:84:69:28:20:96:4f:83:66:91:bb:af:
                    3f:60:a5:ed:9f:08:f9:96:a1:9e:55:4e:bb:54:c6:
                    e5:d5:19:df:85:4b:6b:ee:74:f6:a9:44:92:a8:b0:
                    7a:7e:08:ec:a2:1e:62:bf:52:99:80:ed:33:68:95:
                    41:90:ee:cb:0f:32:be:f7:25:af:9d:79:e1:69:b9:
                    c7:4c:d7:b0:d2:4c:2c:94:ac:40:5f:c1:b9:d2:77:
                    de:06:fd:6e:53:91:0b:14:aa:bb:c0:5f:17:1b:0e:
                    20:45:de:bd:fd:09:10:e4:75:0e:d6:6f:73:cf:2b:
                    63:b6:a0:dd:ce:07:1d:46:2f:9e:a0:4f:39:3f:63:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:04:C0:38:8B:FF:C4:80:CB:91:26:2B:36:2B:BA:C1:4D:41:B7
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134332e302f32342d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:73:e3:4f:64:0c:2e:59:dd:51:ff:1e:22:9a:62:ab:b8:
         79:b6:04:ab:9e:61:74:c2:11:ce:c2:52:24:41:ac:54:8b:89:
         ba:d2:9b:16:78:84:f0:a2:d2:80:9f:96:0f:02:c3:25:ee:c8:
         a7:2a:56:a3:ea:65:03:ee:35:cc:20:d8:9f:38:25:3e:9b:d6:
         6d:45:aa:4a:89:8f:35:3c:5c:76:39:b3:a2:d2:97:56:90:70:
         50:3d:03:c3:e3:87:20:76:3d:92:59:9d:4a:fa:97:ed:2c:69:
         53:be:00:b0:11:7f:1c:d0:2c:44:96:28:e2:24:49:66:e6:86:
         7b:cc:70:3d:92:60:63:1b:d4:97:ff:0a:6d:30:c4:5e:7d:61:
         a8:a4:e1:b5:3c:27:98:30:76:7e:94:61:3c:01:b7:68:44:46:
         2c:ce:4f:4a:86:0e:55:19:97:44:47:43:4b:30:c7:42:d7:ce:
         4c:80:43:32:ac:bf:37:51:63:da:bc:f7:e1:85:c5:3d:f0:13:
         9c:a1:fa:c7:21:53:1c:e1:70:47:62:eb:3a:79:0f:85:72:e2:
         25:96:43:a3:c1:bd:2f:db:9e:13:87:99:e6:82:41:bf:99:c9:
         54:b1:ee:8e:ce:68:86:02:b8:11:35:2e:c4:e5:13:b9:35:45:
         50:4b:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:02 2025 by rpki-client