Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa
File:                     3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa (raw, json)
Hash identifier:          8Uqq75l7jbLuWBL72LYM4jYdeTkbNRLYnhgsLJWkNng=
Subject key identifier:   36:E0:84:E2:13:F1:5D:1F:B8:0B:12:06:AE:08:29:51:DD:26:BB:83
Certificate issuer:       /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial:       178397DD727CFC6C5C6F4A85317ED8A943C29E1D
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa
Signing time:             Wed 07 Dec 2022 12:47:11 +0000
ROA not before:           Wed 07 Dec 2022 12:42:11 +0000
ROA not after:            Wed 06 Dec 2023 12:47:11 +0000
asID:                     264308
IP address blocks:        138.122.20.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:83:97:dd:72:7c:fc:6c:5c:6f:4a:85:31:7e:d8:a9:43:c2:9e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Validity
            Not Before: Dec  7 12:42:11 2022 GMT
            Not After : Dec  6 12:47:11 2023 GMT
        Subject: CN=36E084E213F15D1FB80B1206AE082951DD26BB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:a2:60:e8:1c:92:37:9c:84:fa:7c:65:73:
                    b8:31:58:bb:6a:c3:2b:5e:38:dc:3c:89:e4:4a:4f:
                    9c:d0:3e:57:61:a7:f5:bb:35:93:62:f9:c9:e3:0b:
                    57:31:e4:91:2b:48:fa:07:92:b7:21:2e:1a:98:64:
                    f4:31:af:0f:fb:31:d2:f3:38:02:e4:74:95:63:e3:
                    1b:62:b3:8b:4d:ed:d9:f4:f5:a6:df:a1:e3:00:5b:
                    28:19:32:dc:38:10:6d:81:62:b0:a0:19:a8:44:22:
                    05:f8:f6:d3:f3:3b:f5:14:13:a3:ca:42:36:a5:3a:
                    39:6e:2a:85:68:9c:c2:a1:56:d1:34:c3:7d:22:47:
                    29:43:34:da:47:b5:8f:c7:5c:1d:47:88:d3:64:3d:
                    c6:8f:d0:58:ea:5c:74:da:5b:c2:5f:36:ce:36:c6:
                    7e:0b:38:8f:5d:d4:cf:14:a8:ca:37:b3:16:f4:4e:
                    95:15:d8:f3:c8:de:93:db:3e:bb:0a:67:66:8f:f0:
                    53:8c:e3:78:b6:d7:6c:c5:3c:35:4a:64:91:2b:39:
                    e0:80:dd:54:58:4e:85:1b:bb:47:f2:78:ed:f6:8b:
                    9e:a0:f8:2f:78:14:ee:7c:7f:c7:ba:fb:ae:ac:8b:
                    25:7c:f3:ef:77:ab:49:3f:ff:eb:56:99:79:6c:81:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:84:E2:13:F1:5D:1F:B8:0B:12:06:AE:08:29:51:DD:26:BB:83
            X509v3 Authority Key Identifier:
                keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32342d3332203d3e20323634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:47:46:c7:ad:b2:0a:79:d9:40:3d:06:a9:65:a9:86:34:
         ab:62:c6:c1:31:7e:4c:ac:a0:c9:76:03:66:8d:bc:a9:c1:ea:
         70:f5:83:69:d7:ca:ba:55:17:82:1d:8c:25:dc:b0:19:c2:ae:
         12:fa:c3:07:a8:e1:79:0e:f0:3b:96:c1:93:ba:b7:62:45:30:
         c5:79:87:3e:9d:07:0c:4b:fa:8b:11:c5:90:16:03:cb:e3:5e:
         0c:7e:4c:d0:50:19:56:76:69:47:6d:b7:e9:c6:38:18:e2:2f:
         a2:e1:07:b7:a2:59:62:ac:54:58:8f:19:82:98:ac:73:d5:8e:
         85:9a:f6:32:22:e5:ab:c2:49:92:e6:93:6a:86:f2:8d:cf:e2:
         4f:65:e5:b6:68:1b:fd:00:57:7b:d2:26:76:ac:68:0a:a3:7e:
         ad:e3:04:b1:32:be:20:31:f1:3f:d8:7b:8d:7b:75:47:44:bb:
         2e:89:38:06:89:90:e9:d0:3c:18:10:69:91:9e:f1:45:b6:05:
         cf:6f:58:ca:e3:7c:61:55:75:35:1a:60:e9:80:eb:55:d4:22:
         39:52:88:6d:81:14:bd:f7:16:d4:4f:a7:97:01:29:41:25:54:
         0e:89:78:a8:30:1a:47:6d:20:16:ad:3d:1a:71:79:1a:00:8e:
         90:98:df:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF4OX3XJ8/Gxcb0qFMX7YqUPCnh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxRkFGQjBCMkEzMEQwQThEQzBGNkVGQzEwNUY2QUVB
ODlFRDIzNjAeFw0yMjEyMDcxMjQyMTFaFw0yMzEyMDYxMjQ3MTFaMDMxMTAvBgNV
BAMTKDM2RTA4NEUyMTNGMTVEMUZCODBCMTIwNkFFMDgyOTUxREQyNkJCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6D6Jg6BySN5yE+nxlc7gxWLtq
wyteONw8ieRKT5zQPldhp/W7NZNi+cnjC1cx5JErSPoHkrchLhqYZPQxrw/7MdLz
OALkdJVj4xtis4tN7dn09abfoeMAWygZMtw4EG2BYrCgGahEIgX49tPzO/UUE6PK
QjalOjluKoVonMKhVtE0w30iRylDNNpHtY/HXB1HiNNkPcaP0FjqXHTaW8JfNs42
xn4LOI9d1M8UqMo3sxb0TpUV2PPI3pPbPrsKZ2aP8FOM43i212zFPDVKZJErOeCA
3VRYToUbu0fyeO32i56g+C94FO58f8e6+66siyV88+93q0k//+tWmXlsgacjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNuCE4hPxXR+4CxIGrggpUd0mu4MwHwYDVR0j
BBgwFoAUXR+vsLKjDQqNwPbvwQX2rqie0jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVmN2RVZThzazZkUjdzb3pOTkxvdFJrZUU1TjV4czlRZEJMNjZSZmpw
b3kvMC81RDFGQUZCMEIyQTMwRDBBOERDMEY2RUZDMTA1RjZBRUE4OUVEMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVEMUZBRkIwQjJBMzBEMEE4
REMwRjZFRkMxMDVGNkFFQTg5RUQyMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllZjdkVWU4c2s2ZFI3c296Tk5Mb3RSa2VFNU41eHM5UWRCTDY2UmZqcG95LzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzQzMzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKehQwDQYJKoZIhvcNAQELBQADggEBAKk4R0bH
rbIKedlAPQapZamGNKtixsExfkysoMl2A2aNvKnB6nD1g2nXyrpVF4IdjCXcsBnC
rhL6wweo4XkO8DuWwZO6t2JFMMV5hz6dBwxL+osRxZAWA8vjXgx+TNBQGVZ2aUdt
t+nGOBjiL6LhB7eiWWKsVFiPGYKYrHPVjoWa9jIi5avCSZLmk2qG8o3P4k9l5bZo
G/0AV3vSJnasaAqjfq3jBLEyviAx8T/Ye417dUdEuy6JOAaJkOnQPBgQaZGe8UW2
Bc9vWMrjfGFVdTUaYOmA61XUIjlSiG2BFL33FtRPp5cBKUElVA6JeKgwGkdtIBat
PRpxeRoAjpCY38g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:30 2025 by rpki-client