Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234362e302f32342d3234203d3e20323632333734.roa
File:                     3133382e39392e3234362e302f32342d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          gkoz+cMNJjGG7qTN865UokOnTuXqjsawrmLV2H9GqI4=
Subject key identifier:   0F:72:9E:74:89:F0:67:85:1A:09:29:00:C0:F5:37:D5:63:E8:17:3E
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       2F50089905EB6A6ACD0CDDDCEF7BC0F2513EB22C
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234362e302f32342d3234203d3e20323632333734.roa
Signing time:             Fri 06 Jan 2023 11:44:26 +0000
ROA not before:           Fri 06 Jan 2023 11:39:26 +0000
ROA not after:            Fri 05 Jan 2024 11:44:26 +0000
asID:                     262374
IP address blocks:        138.99.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:08:99:05:eb:6a:6a:cd:0c:dd:dc:ef:7b:c0:f2:51:3e:b2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Jan  6 11:39:26 2023 GMT
            Not After : Jan  5 11:44:26 2024 GMT
        Subject: CN=0F729E7489F067851A092900C0F537D563E8173E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7a:27:06:9e:ff:27:4a:49:f1:bb:63:9c:96:
                    5c:ef:48:9e:e7:fa:e9:0e:f6:30:dd:5c:c6:1c:06:
                    57:72:f7:90:33:f5:fe:33:3a:bf:54:ee:06:96:c7:
                    11:7b:6c:8a:49:2a:da:4a:55:37:20:4e:14:95:58:
                    c2:96:49:32:96:fc:61:0a:53:4a:a1:ac:91:ff:5b:
                    5a:4c:19:eb:3a:06:a5:21:1b:24:96:fd:d1:0c:ab:
                    d0:f6:9a:c5:d0:f4:5c:2f:c9:af:ad:20:3c:81:01:
                    0c:ca:96:5a:e8:f9:dd:ec:6b:bf:e7:4b:7a:b7:e4:
                    3a:40:3f:15:7a:69:5c:a4:8b:c8:14:e2:96:87:82:
                    ca:d1:95:ee:b2:78:53:69:ba:bc:ea:12:9b:eb:75:
                    73:a7:e9:12:5e:43:50:aa:d8:9a:f8:d4:bf:94:64:
                    89:ec:7b:2c:b3:f4:ef:1a:45:67:28:87:7e:86:80:
                    02:92:3f:19:42:b1:9a:76:d1:b8:22:25:92:30:57:
                    d8:2e:52:23:50:ca:db:61:3f:93:85:25:03:ba:c9:
                    3a:90:18:6b:c8:12:24:08:c6:6c:27:6f:6e:15:b4:
                    3f:6d:eb:86:bd:4c:76:af:a9:0e:56:4d:13:a6:42:
                    e1:1e:71:12:5a:1f:61:94:41:5a:8b:0d:7a:67:2c:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:72:9E:74:89:F0:67:85:1A:09:29:00:C0:F5:37:D5:63:E8:17:3E
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234362e302f32342d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:90:84:e2:b6:1d:30:45:4e:fe:62:e3:66:3b:f2:18:5b:
         86:38:5f:d5:1f:7c:99:05:53:de:2c:8f:86:c3:29:80:34:e4:
         13:f7:c3:a3:4c:78:7e:d4:67:b0:9b:34:4b:d8:99:1c:f3:96:
         e8:f5:49:f0:16:b7:80:43:be:ab:0f:52:b3:0c:a0:08:bf:32:
         00:6d:d4:6e:9c:d4:9e:74:bd:b5:67:76:ce:6a:31:03:1b:6d:
         ea:97:7e:26:04:1b:ba:cd:92:08:84:4a:e7:ee:a0:90:bd:7c:
         71:27:3c:74:35:95:be:f9:a1:79:5f:db:cb:b9:3f:72:aa:56:
         eb:3f:4f:60:8a:a8:57:da:ed:a1:c8:c3:ab:e9:9c:02:d9:34:
         43:23:cc:1f:5a:3b:ae:0f:ab:ee:77:9c:3e:79:4e:26:06:7e:
         da:1a:11:4d:8e:9f:58:94:bd:4d:87:1a:8a:df:7a:05:61:d9:
         6f:ff:48:ac:e1:a7:cb:78:93:b8:c2:53:1b:e3:dd:1e:b1:0b:
         e6:e3:6a:14:64:9f:51:fa:ce:65:ad:f2:f7:6b:0b:6d:4a:e6:
         c7:60:62:08:05:c9:37:3a:16:7d:71:44:3f:fa:6c:24:57:25:
         37:ac:93:a5:0a:d5:5e:e9:7d:9b:9a:db:85:bc:6b:93:71:25:
         bf:2e:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:49:08 2025 by rpki-client