Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          gThqVJuR7QPQ1GzrsYxmk+EDLZ2l8dAbLyrJX1loguw=
Subject key identifier:   08:CC:07:53:FD:E9:A3:5C:98:5C:B9:07:F8:8C:BC:9B:E6:FA:14:43
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       5444373457AD312DE9E554E777E14812A75D3AD3
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 05 Mar 2025 19:00:20 +0000
ROA not before:           Wed 05 Mar 2025 18:55:20 +0000
ROA not after:            Wed 04 Mar 2026 19:00:20 +0000
asID:                     61639
IP address blocks:        138.219.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:37:34:57:ad:31:2d:e9:e5:54:e7:77:e1:48:12:a7:5d:3a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Mar  5 18:55:20 2025 GMT
            Not After : Mar  4 19:00:20 2026 GMT
        Subject: CN=08CC0753FDE9A35C985CB907F88CBC9BE6FA1443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:c4:07:69:ee:a7:c5:a0:15:c2:e5:29:02:
                    ed:33:e6:3b:67:cc:33:5e:e9:3d:ad:3d:d6:f4:f3:
                    4e:de:ca:ad:98:ba:21:28:57:50:6e:3e:ab:e0:00:
                    d4:ad:5f:09:86:6d:a3:da:22:a8:90:3f:35:e5:8a:
                    6b:48:4d:2c:28:9e:57:5c:1b:8e:a3:bf:2f:bc:5a:
                    c9:d3:95:c2:de:b4:4a:c2:99:2a:ff:89:1d:6d:ae:
                    70:ae:23:d3:ac:71:5b:74:44:d1:d1:6b:30:ba:02:
                    ee:ad:24:51:ba:0f:a4:e7:f9:57:0a:11:72:86:91:
                    b2:d5:a1:7a:fa:8b:a0:88:50:bb:fc:ae:d5:23:cd:
                    13:00:d6:aa:4f:2f:02:98:2b:fc:86:6b:36:1e:a6:
                    53:93:0c:84:0b:6e:b5:1f:d9:96:73:1d:fb:4c:ff:
                    f2:7e:80:09:f1:cf:97:8a:56:7d:96:f7:3a:af:23:
                    01:a7:e6:67:4b:f8:de:90:36:ff:f2:b1:5d:d9:2f:
                    01:46:9d:c7:3f:83:9d:0f:98:87:5c:a3:1c:ee:31:
                    bd:92:8b:3d:fa:84:c9:16:14:51:93:ab:d8:56:1b:
                    ef:34:47:89:ff:53:cd:91:b0:57:3f:47:ae:40:17:
                    44:9c:e6:3c:d6:d1:1e:39:9f:06:78:de:2f:41:7e:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CC:07:53:FD:E9:A3:5C:98:5C:B9:07:F8:8C:BC:9B:E6:FA:14:43
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:79:5b:c4:29:55:c9:92:5f:08:4c:11:82:c7:e9:f2:b9:
         ac:4d:94:c7:a9:8e:b4:b3:a6:5f:b6:6c:b6:5a:9e:c4:59:44:
         b8:10:51:d6:dd:7f:b6:f4:fb:ab:63:66:35:38:85:91:ca:54:
         c3:6a:c8:c9:d1:c4:57:39:4b:b5:5b:41:57:92:0d:f7:e1:d5:
         bf:7d:f7:96:35:01:47:28:61:5d:38:c3:8c:77:fb:da:63:78:
         48:e3:74:30:3c:88:98:17:6b:ad:83:ec:f8:bf:fb:d4:65:1c:
         e0:57:2a:8e:80:81:a5:a9:53:06:71:1d:a5:d2:b9:a9:fc:04:
         b3:bd:82:fa:f5:d7:d3:d8:01:ae:ae:80:3b:0d:3b:de:7e:0b:
         14:95:44:26:75:30:17:9a:3c:8a:28:f4:a4:fd:f1:25:38:bf:
         07:eb:9a:74:a3:e4:84:0b:b3:4c:12:24:9b:fa:fc:e3:7b:4e:
         65:07:02:26:b0:f0:20:e9:0d:c3:56:ce:e0:6d:90:cb:bf:e0:
         c4:b6:17:4c:fb:72:86:78:ce:e5:b3:d6:9c:a1:bd:9e:61:38:
         e8:a0:5f:9f:95:06:3d:f7:f4:90:d1:3d:21:a4:34:43:79:f1:
         e1:5d:36:a5:5f:a1:c5:a7:be:d6:eb:6c:77:fe:29:c6:64:1b:
         12:de:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:46 2025 by rpki-client