Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          0/eCUKcbjzRCELZ39/mo2qYXxG/Sby1LBstkSgOpKRE=
Subject key identifier:   18:9B:FF:AD:7F:CD:DB:25:F4:F8:26:EC:22:C0:2B:1F:76:99:BA:B1
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       7989DB254330E2725B0F024291F86FEBE23BC087
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        138.121.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:89:db:25:43:30:e2:72:5b:0f:02:42:91:f8:6f:eb:e2:3b:c0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=189BFFAD7FCDDB25F4F826EC22C02B1F7699BAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:8c:f0:e9:81:89:2d:2c:58:05:f0:bd:bf:
                    aa:63:35:14:e9:08:2c:d1:45:09:b2:2b:31:c6:1f:
                    a8:d9:c8:b2:fe:f4:ab:ff:66:39:30:7d:d1:77:c5:
                    71:15:8f:c8:7d:11:9c:32:3b:b9:a8:e2:40:7a:19:
                    d2:65:f4:af:1c:85:d4:2d:6b:78:42:02:6a:14:c0:
                    32:f2:f2:0f:d6:fe:79:59:ff:e0:d1:e2:d5:5c:53:
                    71:5b:57:73:62:8f:fa:5b:f6:90:18:c4:82:a0:d2:
                    60:35:4b:1e:fe:77:e7:52:be:25:0c:2c:c7:c0:3f:
                    b3:9f:a1:55:dc:08:55:03:35:07:4b:a6:bf:a2:ed:
                    f7:1d:41:7b:ca:82:3e:6f:c4:16:99:77:ea:e2:48:
                    33:f7:e6:99:46:3e:8c:44:73:58:96:fc:f1:27:d9:
                    ce:b3:e9:e4:71:4d:4c:ad:01:f8:6c:b5:a7:64:cb:
                    e6:4b:b8:ae:97:a3:44:09:43:9c:5a:42:40:1b:ac:
                    82:5e:3d:94:8f:b8:d5:93:07:5d:f9:6d:87:ce:ac:
                    fb:50:51:ec:82:f8:ef:1e:f9:b2:5d:36:fb:e4:7c:
                    89:6a:f0:65:f1:48:86:32:b9:14:8b:56:c1:80:b2:
                    2c:a6:7b:c9:c8:58:47:31:7a:cc:e1:61:76:19:f7:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9B:FF:AD:7F:CD:DB:25:F4:F8:26:EC:22:C0:2B:1F:76:99:BA:B1
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:79:ca:a0:4b:ab:68:bc:f5:e4:ba:cd:2a:9a:4e:7c:eb:eb:
         63:14:dc:4f:f9:fe:3c:42:89:16:c4:03:0c:99:d6:22:45:13:
         02:35:3d:e6:ef:25:ba:78:9b:49:b0:d7:c0:0d:f1:a4:c2:99:
         09:10:17:36:7d:35:0d:9b:f0:bd:8a:bb:57:27:eb:1d:49:75:
         0c:20:d9:94:f1:89:62:7b:f4:50:3f:7d:4d:3e:ca:23:db:ab:
         89:1d:51:89:b6:02:1d:dc:eb:cd:13:a9:77:30:6e:c7:06:54:
         e1:49:f2:41:db:9a:ca:11:93:f3:01:17:9a:59:14:8a:a9:1e:
         00:47:fb:db:1c:66:6c:f6:4f:89:7f:46:e0:4a:ae:5f:60:32:
         43:24:5d:89:e5:b1:97:a6:d0:3f:14:da:45:52:49:c6:44:53:
         62:6e:47:b6:6d:aa:39:84:8d:33:a1:b2:cb:ac:b3:a7:77:ad:
         2b:16:ff:b9:bb:90:ba:fa:75:14:5a:21:70:c4:1c:25:03:4f:
         60:fc:dc:09:b8:5e:0d:50:6a:08:89:33:06:c5:77:d1:c9:be:
         53:03:22:c9:2b:a4:33:10:c9:f5:55:2c:25:8f:5f:03:cf:9d:
         05:68:41:ca:74:04:db:a8:17:a1:9f:60:4d:f0:05:7f:da:eb:
         04:d1:7b:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeYnbJUMw4nJbDwJCkfhv6+I7wIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNDA0MDQwNzEyMjdaFw0yNTA0MDMwNzE3MjdaMDMxMTAvBgNV
BAMTKDE4OUJGRkFEN0ZDRERCMjVGNEY4MjZFQzIyQzAyQjFGNzY5OUJBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98Yzw6YGJLSxYBfC9v6pjNRTp
CCzRRQmyKzHGH6jZyLL+9Kv/ZjkwfdF3xXEVj8h9EZwyO7mo4kB6GdJl9K8chdQt
a3hCAmoUwDLy8g/W/nlZ/+DR4tVcU3FbV3Nij/pb9pAYxIKg0mA1Sx7+d+dSviUM
LMfAP7OfoVXcCFUDNQdLpr+i7fcdQXvKgj5vxBaZd+riSDP35plGPoxEc1iW/PEn
2c6z6eRxTUytAfhstadky+ZLuK6Xo0QJQ5xaQkAbrIJePZSPuNWTB135bYfOrPtQ
UeyC+O8e+bJdNvvkfIlq8GXxSIYyuRSLVsGAsiyme8nIWEcxeszhYXYZ9595AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGJv/rX/N2yX0+CbsIsArH3aZurEwHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv
MzEzMzM4MmUzMTMyMzEyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5pjANBgkqhkiG9w0BAQsFAAOCAQEAUHnK
oEuraLz15LrNKppOfOvrYxTcT/n+PEKJFsQDDJnWIkUTAjU95u8lunibSbDXwA3x
pMKZCRAXNn01DZvwvYq7VyfrHUl1DCDZlPGJYnv0UD99TT7KI9uriR1RibYCHdzr
zROpdzBuxwZU4UnyQduayhGT8wEXmlkUiqkeAEf72xxmbPZPiX9G4EquX2AyQyRd
ieWxl6bQPxTaRVJJxkRTYm5Htm2qOYSNM6Gyy6yzp3etKxb/ubuQuvp1FFohcMQc
JQNPYPzcCbheDVBqCIkzBsV30cm+UwMiySukMxDJ9VUsJY9fA8+dBWhBynQE26gX
oZ9gTfAFf9rrBNF7HQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:58 2025 by rpki-client