Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3233203d3e20323632333734.roa
File:                     3133382e39392e3234342e302f32322d3233203d3e20323632333734.roa (raw, json)
Hash identifier:          +NB93SNtYWaX06YxS2uYgmVXBx2gO+lZjpq/AZ9bw04=
Subject key identifier:   D9:C4:6A:59:72:65:9E:13:F7:20:81:5C:7A:AA:17:A4:EF:C3:20:7C
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       212CD5F3045BFE2EC0F302399EE69E22AFD3DEBD
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3233203d3e20323632333734.roa
Signing time:             Fri 06 Jan 2023 11:45:35 +0000
ROA not before:           Fri 06 Jan 2023 11:40:35 +0000
ROA not after:            Fri 05 Jan 2024 11:45:35 +0000
asID:                     262374
IP address blocks:        138.99.244.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:d5:f3:04:5b:fe:2e:c0:f3:02:39:9e:e6:9e:22:af:d3:de:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Jan  6 11:40:35 2023 GMT
            Not After : Jan  5 11:45:35 2024 GMT
        Subject: CN=D9C46A5972659E13F720815C7AAA17A4EFC3207C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:e8:70:08:a0:99:11:34:20:dc:d6:ca:3c:
                    2e:9d:90:26:6f:98:95:c3:c4:bf:e2:47:b9:ed:12:
                    18:4e:7d:46:1d:f0:bd:53:a0:c9:ce:ae:5f:ff:eb:
                    da:58:b0:b5:bc:a8:48:11:05:0b:c3:f9:ab:e2:f9:
                    a0:17:a6:25:6e:1d:ab:04:6c:43:13:1d:02:db:ec:
                    7d:6f:d4:9d:ee:69:61:08:52:13:e6:57:4f:92:7c:
                    fa:a0:1d:73:19:82:46:58:c4:52:bb:d6:8e:e1:7f:
                    d5:df:4c:bc:fd:7e:c8:d1:c7:6b:29:c6:5f:77:f0:
                    d0:62:a7:86:7e:cd:5e:8f:d7:5a:8a:d0:fc:89:21:
                    46:c2:c0:e3:18:4c:ef:c8:b6:08:36:0b:34:5d:63:
                    88:73:bb:81:1e:d0:a0:55:61:49:6c:c2:a0:40:74:
                    ec:0d:e5:03:04:a6:a7:05:d2:74:d3:65:ab:25:35:
                    05:f8:3a:c2:86:8d:9a:af:23:4c:61:b0:80:37:18:
                    3c:dd:41:e3:2a:c7:32:f9:7c:32:84:79:41:0c:40:
                    fe:6a:01:c4:f1:56:18:3b:7a:23:4c:94:74:0c:1a:
                    44:58:ca:ad:0a:0e:be:2c:6b:ec:15:bf:09:43:9f:
                    fa:f8:17:26:49:24:42:75:2f:73:01:82:03:88:59:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:6A:59:72:65:9E:13:F7:20:81:5C:7A:AA:17:A4:EF:C3:20:7C
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3233203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:f5:4d:d8:0f:6f:88:1e:fb:eb:31:fd:2c:f3:51:53:29:
         a3:96:ad:93:fa:ac:26:9e:9f:51:e4:8e:f1:b1:51:30:77:aa:
         52:f8:db:53:12:b8:f9:41:ec:b0:60:86:9c:11:3b:52:8a:85:
         55:03:a6:7a:44:15:98:0b:67:cc:0e:7e:e1:ea:19:ac:b4:ec:
         56:9f:2e:cd:83:85:55:5e:e9:26:ed:8c:77:18:f3:2b:19:61:
         5f:44:b2:b4:0c:4a:b8:25:f3:24:4f:2a:28:e1:a7:d3:3d:f5:
         99:4a:b1:09:0b:3e:f2:8f:e9:93:7a:9c:d2:fd:1b:b1:22:0e:
         bd:67:06:cc:2f:bc:53:00:bd:c2:31:57:67:a4:85:85:f2:46:
         a2:da:6a:f9:0b:92:41:34:63:54:50:18:87:97:33:af:e6:6d:
         a1:02:f5:20:35:7e:3b:9b:ce:3f:db:46:27:14:bb:33:be:d8:
         49:33:5c:a6:e7:35:c5:3e:be:9d:91:48:43:89:ae:f9:f4:0c:
         03:de:ce:38:c7:1b:c3:f9:62:2d:06:e5:57:4d:f8:e5:a8:36:
         89:67:9c:8e:99:a8:2e:74:a2:19:34:15:58:83:2c:dd:18:b1:
         52:12:9d:6d:b1:9c:1a:04:fa:6a:6a:9a:bd:cb:8f:49:44:18:
         e6:d0:17:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUISzV8wRb/i7A8wI5nuaeIq/T3r0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQxODlGNEZENzczNTI4M0I0QjI3RjNDRjQ5RTlFMUE4
NDU2RDE4RjAeFw0yMzAxMDYxMTQwMzVaFw0yNDAxMDUxMTQ1MzVaMDMxMTAvBgNV
BAMTKEQ5QzQ2QTU5NzI2NTlFMTNGNzIwODE1QzdBQUExN0E0RUZDMzIwN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYOhwCKCZETQg3NbKPC6dkCZv
mJXDxL/iR7ntEhhOfUYd8L1ToMnOrl//69pYsLW8qEgRBQvD+avi+aAXpiVuHasE
bEMTHQLb7H1v1J3uaWEIUhPmV0+SfPqgHXMZgkZYxFK71o7hf9XfTLz9fsjRx2sp
xl938NBip4Z+zV6P11qK0PyJIUbCwOMYTO/Itgg2CzRdY4hzu4Ee0KBVYUlswqBA
dOwN5QMEpqcF0nTTZaslNQX4OsKGjZqvI0xhsIA3GDzdQeMqxzL5fDKEeUEMQP5q
AcTxVhg7eiNMlHQMGkRYyq0KDr4sa+wVvwlDn/r4FyZJJEJ1L3MBggOIWUtXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2cRqWXJlnhP3IIFceqoXpO/DIHwwHwYDVR0j
BBgwFoAU/RifT9dzUoO0sn889J6eGoRW0Y8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1
Sm4vMC9GRDE4OUY0RkQ3NzM1MjgzQjRCMjdGM0NGNDlFOUUxQTg0NTZEMThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZEMTg5RjRGRDc3MzUyODNC
NEIyN0YzQ0Y0OUU5RTFBODQ1NkQxOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzAv
MzEzMzM4MmUzOTM5MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKY/QwDQYJKoZIhvcNAQELBQADggEBAJGh9U3Y
D2+IHvvrMf0s81FTKaOWrZP6rCaen1HkjvGxUTB3qlL421MSuPlB7LBghpwRO1KK
hVUDpnpEFZgLZ8wOfuHqGay07FafLs2DhVVe6SbtjHcY8ysZYV9EsrQMSrgl8yRP
Kijhp9M99ZlKsQkLPvKP6ZN6nNL9G7EiDr1nBswvvFMAvcIxV2ekhYXyRqLaavkL
kkE0Y1RQGIeXM6/mbaEC9SA1fjubzj/bRicUuzO+2EkzXKbnNcU+vp2RSEOJrvn0
DAPezjjHG8P5Yi0G5VdN+OWoNolnnI6ZqC50ohk0FViDLN0YsVISnW2xnBoE+mpq
mr3Lj0lEGObQF0c=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:40 2025 by rpki-client