Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
File:                     3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          qBWzMW2JLNuA+rLl109SN8QIItrkaj1RHZ21RQdsusQ=
Subject key identifier:   F9:96:7A:1D:05:4C:F8:D9:BA:76:98:06:0B:EF:4D:0A:5C:E8:33:B2
Certificate issuer:       /CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
Certificate serial:       6DFCC154CDEE8F19300F6F41712080F8ADB9A77E
Authority key identifier: E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
Signing time:             Wed 27 Nov 2024 17:36:03 +0000
ROA not before:           Wed 27 Nov 2024 17:31:03 +0000
ROA not after:            Wed 26 Nov 2025 17:36:03 +0000
asID:                     270870
IP address blocks:        138.59.152.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fc:c1:54:cd:ee:8f:19:30:0f:6f:41:71:20:80:f8:ad:b9:a7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
        Validity
            Not Before: Nov 27 17:31:03 2024 GMT
            Not After : Nov 26 17:36:03 2025 GMT
        Subject: CN=F9967A1D054CF8D9BA7698060BEF4D0A5CE833B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:37:d4:ae:b3:68:90:b1:9b:38:63:e9:92:
                    13:7e:e2:53:3d:ee:43:2a:23:85:d8:18:00:0d:e4:
                    13:80:29:de:aa:e4:29:f7:4d:57:5b:48:c8:db:24:
                    db:08:cf:86:c2:69:be:34:8c:5f:15:7b:5b:8b:e8:
                    b6:ae:ef:17:03:f2:b3:c8:79:2b:4e:b7:d9:69:68:
                    e3:53:40:83:09:a5:ae:b6:bf:59:88:42:fc:fc:7e:
                    af:f2:93:f0:d8:9f:e7:4b:18:1c:43:d0:4e:52:78:
                    46:e1:c1:07:7c:de:d2:35:68:80:ab:7a:7a:f9:16:
                    b2:17:7b:77:23:7b:a6:73:34:06:9b:eb:22:15:09:
                    e5:10:d5:16:8a:cf:43:27:fd:77:0a:f7:68:e7:a1:
                    ea:75:5b:cd:bc:88:11:14:a5:fb:58:b1:10:f0:d9:
                    b5:53:8e:08:65:90:ed:80:32:7a:8c:96:49:0b:8c:
                    7b:67:bd:d7:62:c0:51:34:4b:5b:24:1f:9e:59:f4:
                    46:84:b3:d2:10:a0:ca:56:12:9a:84:a8:e3:1a:6d:
                    4e:e4:39:4f:af:39:f9:99:9d:da:84:68:ae:a6:6a:
                    dc:8c:5f:e2:dc:35:d6:53:2d:d2:f0:41:1a:3d:5b:
                    1c:76:70:fc:31:7d:27:22:db:8e:3b:71:1a:52:af:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:96:7A:1D:05:4C:F8:D9:BA:76:98:06:0B:EF:4D:0A:5C:E8:33:B2
            X509v3 Authority Key Identifier:
                keyid:E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:b3:af:a5:ae:db:ec:59:0c:46:47:2d:77:f1:c2:43:c1:
         46:04:b9:ed:83:11:20:33:59:0e:bd:f9:72:1c:6e:19:85:68:
         19:4c:50:eb:09:a0:d6:8f:4e:61:36:47:b1:63:30:08:7d:77:
         11:77:cb:c7:d6:68:37:29:aa:77:9d:1d:ea:b8:b5:0b:c9:cd:
         75:ca:23:f7:7d:75:b8:e1:2b:cb:34:10:a0:bf:58:76:6a:61:
         c7:b8:d7:88:1f:69:a6:bb:aa:4f:dd:0a:65:32:eb:3f:d3:ce:
         13:2a:b5:c4:22:67:1b:e5:21:13:b3:05:73:cf:12:9a:09:25:
         25:e6:12:6e:c6:e7:43:84:81:b6:36:19:89:e5:df:ef:06:77:
         b2:d7:6b:16:47:7b:bb:b4:a4:25:08:26:0c:68:a4:7d:a4:17:
         9c:b7:57:88:ad:21:07:f0:fd:0f:7e:c3:5e:be:11:86:13:7b:
         ae:13:59:4c:20:31:69:0d:02:b3:01:14:c4:4f:dd:c1:b5:f9:
         47:ed:87:84:94:c5:8c:28:ad:a9:f0:c3:3b:8c:ea:61:d6:a3:
         f9:d8:3f:34:fa:2b:a0:90:dd:56:5e:2e:9e:4b:04:7f:91:2d:
         09:bb:da:f0:8f:3f:a7:1b:55:78:de:3c:95:c2:6d:a4:f2:a9:
         ef:66:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:32:45 2025 by rpki-client