Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          jHOWwUrMu2KOMH/YVT3GuHcp53pI3Q/lKuiMxnnmFQM=
Subject key identifier:   13:04:3C:70:00:6E:3A:D2:48:60:AE:F4:4E:A0:76:21:74:C2:A0:4F
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       21B4647BE8883A409EC1160439C05AB0733FD645
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:18 +0000
ROA not before:           Mon 23 Jan 2023 21:37:18 +0000
ROA not after:            Mon 22 Jan 2024 21:42:18 +0000
asID:                     271724
IP address blocks:        138.117.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b4:64:7b:e8:88:3a:40:9e:c1:16:04:39:c0:5a:b0:73:3f:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:18 2023 GMT
            Not After : Jan 22 21:42:18 2024 GMT
        Subject: CN=13043C70006E3AD24860AEF44EA0762174C2A04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:07:7d:08:e1:49:27:d9:5a:7d:3c:5a:84:
                    e4:72:d0:67:13:b9:67:35:e4:14:84:4d:37:f6:cf:
                    08:c8:97:f1:f8:cc:97:da:d0:19:1a:39:30:aa:ef:
                    6f:e1:48:28:29:81:92:0f:05:8f:8a:0a:82:c3:c8:
                    be:b4:bf:6e:00:c8:cb:10:31:35:00:a6:c2:78:41:
                    5f:24:e3:54:fa:95:b3:14:e5:25:c3:f1:cd:ec:a0:
                    51:d7:13:e2:23:2a:17:ee:dc:4f:a3:2d:0f:2c:56:
                    33:ae:39:14:b1:87:b5:7e:f6:90:c1:f2:f5:f4:60:
                    02:5c:ba:83:56:88:ea:b5:4e:2b:4a:77:e2:e6:10:
                    76:2f:f1:0f:63:86:63:31:aa:e5:29:28:80:3f:d5:
                    73:4c:52:8a:c4:90:94:b9:d5:57:89:e6:ec:ba:3f:
                    aa:e9:0a:ac:20:da:df:86:57:4b:26:51:79:70:16:
                    38:dd:aa:24:cc:c5:18:19:0d:58:b7:2e:63:41:cd:
                    8f:b7:d6:08:22:7a:58:35:69:1b:ce:a7:93:86:4c:
                    2f:05:7a:7a:4b:6d:f4:17:ca:bd:bc:c8:3d:d8:9c:
                    91:f2:66:a0:f2:1e:dd:c2:a5:46:47:04:69:d1:ef:
                    80:be:a0:42:cc:14:81:54:ce:5c:c5:fd:0a:2b:b1:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:3C:70:00:6E:3A:D2:48:60:AE:F4:4E:A0:76:21:74:C2:A0:4F
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:73:90:82:90:5d:b0:9a:fa:15:d7:5a:34:08:a8:e6:46:b2:
         97:aa:d5:30:24:b1:e6:e6:4d:64:49:74:a0:f2:02:ac:2e:02:
         3f:ca:e7:3c:f4:9b:ae:99:60:85:97:3d:23:ac:da:7a:93:20:
         0d:00:81:e2:a5:12:86:fb:f9:da:b6:68:d2:3f:4c:bd:ef:6b:
         34:9d:fb:58:75:53:62:e9:00:c2:05:3c:4d:95:e3:a5:d3:7d:
         1a:5f:2a:09:a7:8a:e2:88:73:8d:cc:2a:b1:a2:3f:2c:45:c0:
         26:62:e5:7f:4f:db:03:c4:ba:96:1b:8e:f8:16:2e:f8:a1:6d:
         79:06:f3:11:fe:89:74:5e:aa:21:02:f8:e6:c6:47:9e:fa:b5:
         ca:7e:98:da:14:b0:a1:99:77:b4:c5:5b:cf:ef:2f:33:67:3e:
         13:f7:9b:4b:b0:09:eb:78:cd:b0:d3:b5:af:5f:c5:cb:00:79:
         33:4e:cb:9e:94:4a:5e:ab:09:cf:ce:70:f5:8a:b6:dc:67:b9:
         85:bb:b4:15:ff:a3:04:ca:e3:f0:cb:d8:46:22:ce:2b:43:5d:
         bc:70:34:74:b3:0f:36:46:19:0c:44:11:82:8f:73:96:02:62:
         a1:28:92:3f:c4:1b:d7:28:f5:6c:b3:08:23:4a:08:e4:59:46:
         a1:1f:70:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIbRke+iIOkCewRYEOcBasHM/1kUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MzdDMUNGMDg5MUM2MEJCMzcxOEUwOUVFNTU4NkMw
RUJDMzU5NzAeFw0yMzAxMjMyMTM3MThaFw0yNDAxMjIyMTQyMThaMDMxMTAvBgNV
BAMTKDEzMDQzQzcwMDA2RTNBRDI0ODYwQUVGNDRFQTA3NjIxNzRDMkEwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGQd9COFJJ9lafTxahORy0GcT
uWc15BSETTf2zwjIl/H4zJfa0BkaOTCq72/hSCgpgZIPBY+KCoLDyL60v24AyMsQ
MTUApsJ4QV8k41T6lbMU5SXD8c3soFHXE+IjKhfu3E+jLQ8sVjOuORSxh7V+9pDB
8vX0YAJcuoNWiOq1TitKd+LmEHYv8Q9jhmMxquUpKIA/1XNMUorEkJS51VeJ5uy6
P6rpCqwg2t+GV0smUXlwFjjdqiTMxRgZDVi3LmNBzY+31ggielg1aRvOp5OGTC8F
enpLbfQXyr28yD3YnJHyZqDyHt3CpUZHBGnR74C+oELMFIFUzlzF/QorsdgTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEwQ8cABuOtJIYK70TqB2IXTCoE8wHwYDVR0j
BBgwFoAUQYN8HPCJHGC7NxjgnuVYbA68NZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVbUs3SlQ2b1RkRW5aRmhISzE4THBucEtZdUhNOHExR2hiVHJNSmI4
cGQvMS80MTgzN0MxQ0YwODkxQzYwQkIzNzE4RTA5RUU1NTg2QzBFQkMzNTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQxODM3QzFDRjA4OTFDNjBC
QjM3MThFMDlFRTU1ODZDMEVCQzM1OTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVW1LN0pUNm9UZEVuWkZoSEsxOExwbnBLWXVITThxMUdoYlRyTUpiOHBkLzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1fDANBgkqhkiG9w0BAQsFAAOCAQEAY3OQ
gpBdsJr6FddaNAio5kayl6rVMCSx5uZNZEl0oPICrC4CP8rnPPSbrplghZc9I6za
epMgDQCB4qUShvv52rZo0j9Mve9rNJ37WHVTYukAwgU8TZXjpdN9Gl8qCaeK4ohz
jcwqsaI/LEXAJmLlf0/bA8S6lhuO+BYu+KFteQbzEf6JdF6qIQL45sZHnvq1yn6Y
2hSwoZl3tMVbz+8vM2c+E/ebS7AJ63jNsNO1r1/FywB5M07LnpRKXqsJz85w9Yq2
3Ge5hbu0Ff+jBMrj8MvYRiLOK0NdvHA0dLMPNkYZDEQRgo9zlgJioSiSP8Qb1yj1
bLMII0oI5FlGoR9wqw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:08 2025 by rpki-client