Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e203238323230.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          ory+tvCpQo5V9RoxKCWn8lEl3JbcRtel93f7Th5dHic=
Subject key identifier:   A6:81:80:FE:62:9E:E7:F7:A1:E2:7D:D3:E7:7E:BA:8F:B3:B8:28:37
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       2D1EDFBB70F29D2FFA6DD9E6B9AF2ABF2D141FEE
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:56:00 +0000
ROA not before:           Thu 06 Oct 2022 17:51:00 +0000
ROA not after:            Thu 05 Oct 2023 17:56:00 +0000
asID:                     28220
IP address blocks:        138.117.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1e:df:bb:70:f2:9d:2f:fa:6d:d9:e6:b9:af:2a:bf:2d:14:1f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:51:00 2022 GMT
            Not After : Oct  5 17:56:00 2023 GMT
        Subject: CN=A68180FE629EE7F7A1E27DD3E77EBA8FB3B82837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:b2:f7:68:cb:83:fe:27:98:fb:4f:73:1c:
                    2d:bc:9d:6b:25:58:b4:9d:c9:2c:7f:ce:1d:22:86:
                    39:de:ea:d5:89:b1:d1:10:09:8c:08:42:2b:ec:37:
                    db:e8:7f:c5:9a:0a:52:c9:65:b0:4f:79:91:6a:38:
                    8f:d2:66:a9:fb:50:4e:0d:01:39:bf:f4:dc:2b:11:
                    b4:61:69:77:51:25:cc:e2:57:28:2d:d3:8e:03:63:
                    51:da:22:99:f2:92:6c:0d:33:9f:f0:a3:92:9c:d8:
                    ff:72:81:0e:f8:51:83:6b:ca:eb:01:f1:86:65:8f:
                    10:9d:0e:bb:b3:26:d0:6a:e4:c1:ee:18:72:2f:49:
                    8a:3c:ce:32:22:e5:d5:03:8a:4b:c4:25:79:f1:71:
                    00:d6:47:14:38:1a:62:e0:33:35:c8:c8:bf:78:c3:
                    65:56:8c:dd:28:b6:73:04:7a:75:86:17:a0:e9:1d:
                    05:1c:68:0c:e1:ab:ba:da:af:31:d8:29:bb:bc:94:
                    e3:0d:45:d1:f5:35:cc:a9:96:0a:f5:3f:ca:4e:a7:
                    19:0c:dd:85:40:a1:c5:e8:e9:51:2e:c5:2a:9c:f3:
                    cb:0e:28:ff:6c:86:6f:62:bc:db:3b:32:f6:fa:95:
                    5b:0d:2c:a4:12:13:3c:d3:06:ea:b1:b2:30:77:56:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:80:FE:62:9E:E7:F7:A1:E2:7D:D3:E7:7E:BA:8F:B3:B8:28:37
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3133382e3131372e3132342e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:19:80:09:c0:bf:12:2b:93:a8:6a:4d:bd:38:3e:ca:7e:a1:
         93:ff:c3:8b:19:21:d4:9f:73:59:ca:ed:c1:b3:ff:16:25:c9:
         63:48:62:bc:69:3f:8e:05:50:45:1d:e5:aa:1f:68:32:18:c9:
         ef:b2:2f:78:90:07:01:54:71:9a:69:e0:1c:f5:39:90:e8:95:
         63:fb:c6:fa:31:d0:83:ed:cb:2a:6f:13:81:38:bd:2a:42:76:
         ac:cf:8b:e6:c7:86:bb:20:8d:52:1b:f8:16:2c:39:62:56:c3:
         36:1e:58:70:2c:4a:f1:9b:af:79:f4:b2:7e:7e:dc:8e:e6:4f:
         5a:b5:0f:27:58:42:ad:d3:61:bc:71:43:15:e1:72:c5:f8:49:
         fb:9e:02:83:25:fb:04:3a:70:08:1b:42:48:37:80:5d:77:9a:
         08:46:81:55:4b:c1:81:f2:83:00:8f:ca:c9:fd:ca:ec:14:1e:
         4a:28:17:67:45:9d:4f:43:78:8e:42:32:4c:53:5d:79:b0:4e:
         0e:53:12:ad:79:18:48:fa:93:c3:83:84:96:0f:41:7f:2a:e5:
         3f:fa:42:4c:08:da:43:b1:80:bd:f8:14:8c:69:f0:b9:e7:df:
         1f:74:35:47:0e:48:2e:01:38:82:04:a1:bb:e8:ea:a2:12:eb:
         a9:e6:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:51 2025 by rpki-client