Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32322e302f32342d3332203d3e20323634333038.roa
File:                     3133382e3132322e32322e302f32342d3332203d3e20323634333038.roa (raw, json)
Hash identifier:          lak0lYO0xDOVkokaUr24isDvAo5bpQwohceKV4XSm8k=
Subject key identifier:   43:DA:5A:EE:83:16:64:A0:18:23:F6:31:49:59:9D:4F:85:AA:C7:2D
Certificate issuer:       /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial:       38D4CE9CEE880EA689A4F878D3CDF95DCEF8F82D
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32322e302f32342d3332203d3e20323634333038.roa
Signing time:             Wed 07 Dec 2022 12:47:26 +0000
ROA not before:           Wed 07 Dec 2022 12:42:26 +0000
ROA not after:            Wed 06 Dec 2023 12:47:26 +0000
asID:                     264308
IP address blocks:        138.122.22.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d4:ce:9c:ee:88:0e:a6:89:a4:f8:78:d3:cd:f9:5d:ce:f8:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Validity
            Not Before: Dec  7 12:42:26 2022 GMT
            Not After : Dec  6 12:47:26 2023 GMT
        Subject: CN=43DA5AEE831664A01823F63149599D4F85AAC72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:0a:eb:b5:90:c7:5c:e1:d3:6f:a7:a3:e6:
                    d7:76:a1:7b:5d:0e:ac:05:a6:fd:3d:67:05:d0:82:
                    a1:b8:a0:07:b8:79:83:62:63:21:e1:44:29:9c:c0:
                    0e:85:1f:d6:68:40:86:48:54:d8:83:b2:38:00:dc:
                    48:95:96:9b:93:44:fb:5e:f5:f5:db:79:e7:d3:03:
                    5b:fe:0d:18:9b:89:b5:74:14:18:06:6a:8c:2f:f2:
                    41:f6:93:e2:71:bb:67:72:0c:67:44:80:34:e9:fb:
                    80:70:db:88:3c:f9:f3:bb:55:e2:40:56:ca:0f:a7:
                    10:e6:12:21:29:ed:9c:d5:35:5c:bb:0f:82:d2:ef:
                    45:1d:d7:5b:19:c6:ca:7b:62:66:b1:93:4c:95:7a:
                    1a:9b:e4:44:de:6d:e0:fd:fa:99:4d:b0:1a:3c:74:
                    b1:02:aa:52:85:c0:0e:96:6d:07:7b:22:68:bc:d1:
                    83:4e:05:f9:31:5b:5b:88:6d:42:c8:1a:61:12:a6:
                    da:33:32:be:ea:33:0b:43:de:a3:6d:99:95:ea:08:
                    1d:92:57:28:b4:7c:f4:13:43:1e:18:8d:4b:62:e9:
                    07:ea:59:bb:5e:d8:67:a6:e6:82:b2:fb:fc:2e:a9:
                    86:d0:26:30:80:71:54:20:a6:fb:ca:fa:a2:82:e7:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:5A:EE:83:16:64:A0:18:23:F6:31:49:59:9D:4F:85:AA:C7:2D
            X509v3 Authority Key Identifier:
                keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32322e302f32342d3332203d3e20323634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:bc:f4:b7:67:f6:52:29:5d:60:91:12:15:79:bc:8c:27:
         53:1d:a7:bb:14:f0:43:66:dc:e2:6b:50:04:07:46:ad:93:7a:
         0e:3e:ae:59:ec:79:0a:9f:f5:4c:1f:b3:19:2e:45:65:d7:97:
         f3:c6:1d:e0:d8:c6:e9:4f:38:c6:b5:2c:03:ad:b4:0b:11:03:
         63:b4:af:d4:f2:fe:12:0a:f7:80:03:37:9a:81:1f:6b:06:36:
         70:ad:f6:6d:f3:c6:01:34:19:97:3d:94:1d:23:3c:e0:9f:d5:
         3c:b5:4a:e0:42:09:6c:d9:52:9b:71:b5:fc:fc:3d:08:04:bd:
         20:90:b5:86:3a:df:15:7a:cd:8b:dd:ae:7c:18:dd:12:fa:bc:
         ee:34:22:75:6a:38:59:52:ac:7b:31:d8:6c:e9:59:ac:56:6d:
         d0:47:7e:b3:e9:78:e2:0b:5f:bc:98:5e:17:27:b1:47:34:35:
         b2:e0:61:65:fb:85:d2:1c:bd:b1:07:fa:0f:4a:df:4d:8a:56:
         b8:80:1b:ff:f5:2c:60:f8:0a:c0:18:b3:7f:5d:c8:e8:b8:8c:
         3c:0b:4b:0b:52:d0:9d:e2:fc:ec:4d:3b:6c:a5:dc:30:6b:a3:
         53:2a:96:da:14:17:08:9d:78:a8:53:37:13:ac:34:c3:0b:23:
         7a:33:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:28 2025 by rpki-client