Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
File:                     3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          jzVUfZOSZn80z/zoSsjwcSP5xNIOe6Iiy3s4j8kAP9c=
Subject key identifier:   E3:B9:A1:BF:FF:6A:1C:D2:D8:E9:5B:EF:9B:84:73:19:66:32:7D:DC
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       65ABF2D00B3C4BBD8FE0DAFD972CCD2625F511EE
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 06 Mar 2025 07:45:46 +0000
ROA not before:           Thu 06 Mar 2025 07:40:46 +0000
ROA not after:            Thu 05 Mar 2026 07:45:46 +0000
asID:                     262645
IP address blocks:        138.97.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ab:f2:d0:0b:3c:4b:bd:8f:e0:da:fd:97:2c:cd:26:25:f5:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Mar  6 07:40:46 2025 GMT
            Not After : Mar  5 07:45:46 2026 GMT
        Subject: CN=E3B9A1BFFF6A1CD2D8E95BEF9B84731966327DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:12:7d:17:d7:ad:56:ef:5c:10:24:be:df:
                    48:9d:ed:e0:d4:e4:4a:be:bf:f7:57:5a:e4:99:ef:
                    0b:5d:ca:f6:f8:ca:4b:a2:aa:31:fc:cd:05:a7:0f:
                    5b:7e:ed:9c:a7:cb:c6:83:82:7f:26:9e:0e:21:79:
                    04:ac:ec:30:b6:5d:bc:7f:71:38:02:9e:9a:7e:3f:
                    3e:6a:d7:02:8f:41:39:40:ee:66:5d:71:1d:89:7e:
                    98:f4:2a:52:70:9c:d1:b9:23:b0:be:8c:ef:70:3b:
                    4c:ee:7b:c3:fc:7b:d0:e7:f9:fc:52:01:80:18:8c:
                    f5:b9:cf:0e:98:71:c9:ef:b1:87:b8:b1:1c:04:f0:
                    28:2f:73:01:62:04:e0:4b:85:dd:1e:2a:12:85:49:
                    63:e6:93:49:e5:3d:dd:42:f8:0c:6d:0a:4b:23:46:
                    ec:b7:fa:5e:4c:fc:5f:d4:6e:d8:ba:04:57:ba:e5:
                    08:9c:65:8c:fa:dd:6b:ff:23:67:6d:6a:52:d5:ce:
                    39:8e:a3:1c:ae:34:74:ce:40:95:95:65:c8:d6:26:
                    71:17:35:fb:a0:7c:46:e3:b6:fd:46:05:f3:27:fa:
                    f4:76:8a:80:3c:b9:4c:2f:7a:8c:f8:14:2d:0f:7a:
                    57:22:84:5e:29:48:5d:26:a9:78:27:66:30:7d:2c:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:A1:BF:FF:6A:1C:D2:D8:E9:5B:EF:9B:84:73:19:66:32:7D:DC
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:24:fd:79:dc:ea:69:55:dc:41:fa:29:dc:45:c2:ca:11:
         77:5b:c2:22:97:c2:31:f7:02:2e:b3:1e:44:ab:45:58:c9:3d:
         50:3b:c0:15:9d:f2:18:b5:b8:5e:93:ce:86:8d:f5:8d:10:76:
         ce:32:f7:a1:6d:b0:07:35:b9:d2:84:13:53:6a:dd:6a:b6:9e:
         e4:a6:aa:4c:3d:92:dd:61:3e:37:d3:db:0f:a5:85:80:3f:c6:
         e4:33:4a:9d:64:4d:da:fb:f3:bd:2a:ec:cd:d6:16:d1:28:98:
         13:22:0a:7f:7f:cd:c1:d2:fe:97:aa:57:3a:f5:29:52:38:42:
         67:ef:fe:49:ec:98:3c:dc:07:be:91:71:a6:aa:19:67:0f:a3:
         9a:c9:90:c3:1d:77:0d:0d:0c:18:8d:06:11:bf:53:29:dc:ab:
         0b:db:82:ca:0e:40:e8:a5:06:1e:67:c8:2b:9c:6c:c8:3a:1a:
         91:08:e0:0f:de:59:47:bd:1a:ae:8f:99:2e:fc:c1:02:9f:0b:
         89:cf:8d:4d:e0:3f:42:c7:d6:8e:50:4a:9f:e6:6b:ea:f4:55:
         33:1f:21:69:9e:10:96:88:5e:b4:a6:e1:4e:6a:9b:82:32:57:
         34:0b:a4:b8:d3:64:cb:24:eb:6f:6d:1c:31:97:f4:4e:13:de:
         14:36:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:57 2025 by rpki-client