Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          d3n1cxXovdnXO3O6gQnbfc+DXyC0q/zd3uyHFYudt50=
Subject key identifier:   6D:96:B5:45:CF:71:D7:F0:6C:3E:02:EE:03:E2:21:53:4F:B3:17:5A
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       18004AA0E036A699968097AC007EC5DF80442088
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time:             Thu 06 Oct 2022 17:40:03 +0000
ROA not before:           Thu 06 Oct 2022 17:35:03 +0000
ROA not after:            Thu 05 Oct 2023 17:40:03 +0000
asID:                     271724
IP address blocks:        138.117.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:4a:a0:e0:36:a6:99:96:80:97:ac:00:7e:c5:df:80:44:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:35:03 2022 GMT
            Not After : Oct  5 17:40:03 2023 GMT
        Subject: CN=6D96B545CF71D7F06C3E02EE03E221534FB3175A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:70:b3:67:14:ee:5b:e3:d9:1e:4e:47:d2:
                    d4:8b:f6:12:43:dd:7c:a4:1b:3d:93:71:28:33:46:
                    d4:7f:8d:b3:09:af:53:e3:3b:ec:fb:54:7b:06:42:
                    0d:46:76:30:d9:33:8d:69:95:0a:a9:66:a4:3d:97:
                    24:ed:f2:fc:c3:bb:1b:75:ac:63:ea:32:c6:86:c6:
                    cb:24:6a:e6:16:9a:c5:f8:b7:fb:82:c7:e0:e5:94:
                    61:ad:d7:08:53:fe:62:c7:a0:2a:d9:a0:02:51:15:
                    b1:66:b4:ee:81:82:14:27:f6:59:ba:4a:aa:1c:f7:
                    f6:1a:72:00:ed:37:59:a0:6b:99:c4:12:47:b5:e1:
                    5f:9c:d2:00:64:06:62:d0:eb:95:08:e9:1e:2d:c7:
                    90:9c:be:b0:f2:d6:82:03:20:00:7f:15:35:3c:9f:
                    68:09:4b:e0:92:da:60:81:df:02:ca:33:ca:8c:f2:
                    a2:20:b3:1c:82:39:db:32:9a:9b:59:de:47:6b:2e:
                    2c:e6:b0:54:0d:9e:6e:97:81:89:35:85:64:0e:80:
                    a4:6f:21:97:c9:75:09:b0:7f:f7:4c:bb:9f:71:39:
                    62:2c:e7:62:d6:d9:f2:0f:ba:d9:23:db:00:c6:b3:
                    91:e9:35:e6:04:cd:0a:ec:e0:36:40:8d:8c:5d:8f:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:B5:45:CF:71:D7:F0:6C:3E:02:EE:03:E2:21:53:4F:B3:17:5A
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:29:67:7f:b0:cb:7e:ac:30:f3:c1:d8:aa:fa:bf:9b:1a:00:
         f2:89:d9:ef:b4:eb:7e:05:09:63:75:f5:e4:24:85:40:63:10:
         62:5d:79:66:ff:ea:54:33:b1:9a:73:84:d2:22:d2:a7:d5:86:
         d9:99:b1:2b:96:5b:ff:9a:dd:fd:f1:74:04:92:b1:f7:69:9e:
         64:62:c0:4a:d2:f9:dd:99:2b:bf:9d:b0:c5:2b:80:53:d5:0f:
         a6:c8:f5:44:2a:e3:16:ff:b3:3f:1f:d5:d6:36:e5:45:96:33:
         5a:cc:47:0d:08:b6:40:a0:9a:bd:58:b2:eb:50:f6:55:af:3e:
         6f:02:89:33:0b:bc:68:ba:c1:1c:b1:45:bb:d1:e1:89:45:7c:
         aa:1c:23:be:03:22:e9:61:34:36:8b:38:5c:a2:1f:03:e7:0d:
         17:f1:26:81:da:98:c6:bb:cd:82:c0:40:9e:25:91:9c:74:57:
         f2:d8:36:2b:8e:17:c5:66:b4:54:7a:55:a7:bf:40:cf:2f:2a:
         c7:3e:b7:07:31:1a:a6:0f:d3:4a:5b:88:3c:84:6b:b3:04:cc:
         ee:ad:46:2c:7e:6f:8d:99:6e:47:ca:a9:7f:ef:8e:32:af:a9:
         b1:05:35:ae:52:51:97:0c:fa:a2:f8:3e:4e:d2:c0:38:d7:62:
         6c:36:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:57:49 2025 by rpki-client