Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138332e302f32342d3234203d3e20323730383136.roa
File:                     3133382e35392e3138332e302f32342d3234203d3e20323730383136.roa (raw, json)
Hash identifier:          yan4zR5O+0n0s7smsbXWiVxua1GDMwyBuaOAqHn4DpM=
Subject key identifier:   5D:B0:BA:84:46:DB:17:76:5E:3A:BD:4E:CB:B1:F8:54:1C:68:CB:08
Certificate issuer:       /CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
Certificate serial:       74470FA04EE31395C04EE5A1EB73EFC356D5EA08
Authority key identifier: 6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138332e302f32342d3234203d3e20323730383136.roa
Signing time:             Thu 25 May 2023 18:09:37 +0000
ROA not before:           Thu 25 May 2023 18:04:37 +0000
ROA not after:            Thu 23 May 2024 18:09:37 +0000
asID:                     270816
IP address blocks:        138.59.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:0f:a0:4e:e3:13:95:c0:4e:e5:a1:eb:73:ef:c3:56:d5:ea:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
        Validity
            Not Before: May 25 18:04:37 2023 GMT
            Not After : May 23 18:09:37 2024 GMT
        Subject: CN=5DB0BA8446DB17765E3ABD4ECBB1F8541C68CB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:24:e2:1f:b0:89:00:ef:67:03:9f:48:97:ae:
                    c0:3b:7b:91:d6:3e:32:1c:55:83:36:17:0e:05:53:
                    d1:98:ea:82:8b:fc:7e:16:8c:98:eb:b5:43:ca:d9:
                    20:c0:87:56:8b:9a:f4:39:17:1b:b1:d2:f9:1f:f3:
                    8c:3a:bc:3e:24:a8:e5:2f:6c:e3:b5:ff:c9:7b:83:
                    a9:02:35:c2:0b:da:7d:37:84:07:41:c6:95:c8:b8:
                    81:31:f3:79:23:1c:1e:b6:c9:48:a3:ad:cc:71:20:
                    ab:97:be:9f:d2:56:1a:2d:80:f5:34:f4:ca:30:3c:
                    bd:33:1c:e2:17:ee:21:82:56:e3:4f:04:47:b7:83:
                    0c:aa:87:49:e6:54:45:ec:76:63:f8:3f:69:11:ce:
                    d5:3e:fa:03:90:e1:4f:a4:44:6b:1a:0c:b9:36:72:
                    57:17:37:d3:18:00:3b:eb:ba:07:bc:14:9e:70:4c:
                    49:e5:4a:f8:05:35:7a:b0:ae:30:fe:b9:b7:75:df:
                    69:b1:4a:4e:56:97:a3:91:7e:c2:b6:52:b1:41:75:
                    16:2d:13:33:0e:00:04:d0:12:52:1c:9a:38:a3:83:
                    d9:5c:a1:fc:05:57:72:b4:a0:b0:c3:e1:93:ee:0c:
                    07:da:aa:f4:2f:cc:9e:ad:31:38:dc:f3:9c:1e:3c:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B0:BA:84:46:DB:17:76:5E:3A:BD:4E:CB:B1:F8:54:1C:68:CB:08
            X509v3 Authority Key Identifier:
                keyid:6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138332e302f32342d3234203d3e20323730383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:e4:6b:e6:d0:4b:10:2b:9a:59:ba:f5:cd:a8:7d:0a:ce:
         5b:5a:ee:5a:26:6a:83:0f:29:3d:56:c6:ac:18:f2:46:71:f5:
         d1:dd:40:47:3a:2e:b2:9d:50:0c:16:3b:d9:b1:c1:b2:58:31:
         c1:52:bb:18:2e:fd:82:11:d4:04:78:dd:df:74:18:e3:29:06:
         ab:14:26:a3:34:c7:be:a3:d3:1e:7b:d8:5a:cb:86:85:f3:af:
         b2:b2:66:16:9e:16:20:6f:f6:8c:4f:27:01:be:6f:bf:92:51:
         3f:f5:23:ef:21:d0:cc:e2:fc:1e:83:7f:74:48:38:59:11:d1:
         97:02:03:f9:bf:a9:7b:ea:2b:8e:c9:d5:95:8e:0c:c8:37:13:
         c7:7b:a5:b8:0b:4e:a5:8b:ce:4e:c2:13:fb:ee:0b:9d:3a:19:
         d6:37:ee:eb:6c:98:c8:04:ee:ae:38:b2:63:f7:49:dd:f1:7d:
         fe:2d:55:1a:18:32:05:b2:55:f4:2a:2e:16:ca:3c:2c:63:1c:
         9e:2b:bb:39:67:fe:7f:c4:65:67:de:33:c8:a8:9f:9d:c7:ee:
         a3:dc:97:ad:26:0d:df:a9:f3:0f:04:66:ee:6e:8b:26:20:af:
         14:11:60:8f:a8:bc:54:0c:30:55:c7:c5:4d:3f:20:4d:4d:0b:
         1e:e0:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:17:01 2025 by rpki-client