Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133352e302f32342d3234203d3e20323633383838.roa
File:                     3133382e3230342e3133352e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          QKH28lq6rxCS8HFFWa/fJYUdfBpVizhSUS8aQPaJrV8=
Subject key identifier:   D7:8B:59:4C:56:7F:EF:6E:EB:C4:28:4F:0E:C1:E9:93:FF:B3:87:AE
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       1E895715DA3495D213B5BA81D2473F9679046CCB
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133352e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:01 +0000
ROA not before:           Tue 06 Sep 2022 14:55:01 +0000
ROA not after:            Tue 05 Sep 2023 15:00:01 +0000
asID:                     263888
IP address blocks:        138.204.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:89:57:15:da:34:95:d2:13:b5:ba:81:d2:47:3f:96:79:04:6c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:01 2022 GMT
            Not After : Sep  5 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:27:ba:9c:2a:65:5c:5d:85:69:45:dc:f4:
                    1f:96:49:39:ce:70:1a:49:fe:c7:52:d3:f9:96:77:
                    dd:91:e2:a2:58:06:4f:f7:4f:ac:ee:3f:06:ce:93:
                    81:36:dd:f9:97:6a:bf:b1:d8:71:67:85:7a:d2:f8:
                    65:c5:a5:e3:03:49:26:f6:69:99:11:5c:0a:b8:3c:
                    2e:2f:f5:cc:a8:a5:9c:9a:33:76:42:72:78:69:12:
                    69:58:85:37:b3:e6:db:80:92:1c:b0:cf:e2:97:38:
                    16:f5:cb:7f:cf:6e:b4:87:48:59:53:0b:c9:2c:30:
                    5a:9f:a0:85:6d:15:80:b0:3a:50:8c:fc:3e:b1:d7:
                    b4:63:f7:4a:6a:27:2d:5b:d9:e0:01:3b:2d:c6:58:
                    d4:85:99:7e:ab:02:a5:a5:07:39:f1:81:54:78:36:
                    a9:45:31:66:40:04:24:da:27:4f:90:cd:fa:8d:8e:
                    10:43:0e:c4:2c:19:1f:70:52:34:f9:0d:63:10:e7:
                    09:dc:c7:cd:f4:79:62:cd:93:ec:0d:f5:14:50:68:
                    89:a5:73:85:37:1f:70:70:0d:8d:db:61:da:ff:21:
                    75:ca:a7:67:19:1c:7c:70:11:89:8d:92:0e:2b:fe:
                    5c:14:f6:15:18:22:55:42:ad:39:ae:1c:bf:8b:6f:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:59:4C:56:7F:EF:6E:EB:C4:28:4F:0E:C1:E9:93:FF:B3:87:AE
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133352e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:73:36:03:1c:e8:d5:49:a5:0e:31:f5:c9:96:10:b7:e0:8d:
         b4:b6:3f:c8:07:2e:9d:07:f4:41:89:52:8d:08:a3:b1:4c:a6:
         68:34:2d:62:48:b7:9d:fd:e0:ec:7c:e4:f5:f0:a8:02:5f:44:
         0d:e1:96:01:da:ee:cf:99:ad:26:eb:00:ac:83:c8:34:ef:8b:
         cc:a3:ff:b8:56:33:f1:7e:5e:92:80:7a:83:94:af:2e:67:4a:
         e8:c3:bd:03:77:cc:48:b2:ee:84:44:88:07:fd:12:07:ad:68:
         f3:c8:fa:65:61:83:77:cc:21:02:b7:0f:92:3e:cb:23:38:54:
         f9:41:cc:34:bd:f9:0a:13:5a:e0:4f:e3:ba:c6:42:f3:2b:4f:
         42:9d:75:d2:78:a6:d5:16:b8:b2:09:5d:d9:9a:f0:d0:f8:30:
         4d:68:f4:3b:f6:30:89:d0:fa:1e:46:1a:c7:ca:a0:66:ee:6f:
         b7:32:e5:c8:8b:ed:2a:15:94:69:4d:87:7c:09:aa:6a:35:53:
         a4:b4:59:6a:83:29:cd:5c:19:1c:e0:e0:0d:0b:1e:28:03:a3:
         7a:4d:0e:92:2c:ec:02:89:bd:75:31:76:74:9a:66:2c:aa:02:
         bd:e4:43:1a:63:fc:c3:d1:66:6e:cf:18:fb:c2:46:01:65:c8:
         e2:10:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:17 2025 by rpki-client