Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/1/3133382e39342e3136302e302f32322d3234203d3e20323634313636.roa
File:                     3133382e39342e3136302e302f32322d3234203d3e20323634313636.roa (raw, json)
Hash identifier:          jUU9aQ1HEi7hzyuE6/fyyblNaLz3Q0HfZDlzqO1wcHY=
Subject key identifier:   0B:0B:E7:56:03:8A:FF:EB:C3:13:8B:18:F7:17:44:8D:1D:1C:CD:25
Certificate issuer:       /CN=5979AEAF4F5CFD6291DD88DD076BB399C2853B42
Certificate serial:       133C22DE732913916B71E81F4CF28AAC94249E4F
Authority key identifier: 59:79:AE:AF:4F:5C:FD:62:91:DD:88:DD:07:6B:B3:99:C2:85:3B:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5979AEAF4F5CFD6291DD88DD076BB399C2853B42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/1/3133382e39342e3136302e302f32322d3234203d3e20323634313636.roa
Signing time:             Thu 06 Mar 2025 11:35:28 +0000
ROA not before:           Thu 06 Mar 2025 11:30:28 +0000
ROA not after:            Thu 05 Mar 2026 11:35:28 +0000
asID:                     264166
IP address blocks:        138.94.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3c:22:de:73:29:13:91:6b:71:e8:1f:4c:f2:8a:ac:94:24:9e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5979AEAF4F5CFD6291DD88DD076BB399C2853B42
        Validity
            Not Before: Mar  6 11:30:28 2025 GMT
            Not After : Mar  5 11:35:28 2026 GMT
        Subject: CN=0B0BE756038AFFEBC3138B18F717448D1D1CCD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:c3:c9:8f:4e:81:06:12:d7:e3:35:05:22:
                    66:f0:41:a1:64:4f:0f:13:42:2b:53:e5:f1:aa:7c:
                    27:be:c3:b2:5d:14:55:29:66:8c:d1:ec:9b:5b:18:
                    83:6b:26:e1:f5:76:50:cd:f6:b8:40:ad:2e:7d:81:
                    7b:b1:11:d8:0c:79:0d:0a:d5:03:2d:1e:94:83:37:
                    67:78:06:05:05:c9:8d:17:b0:72:a5:0b:2a:1a:85:
                    81:a8:5b:64:34:9d:1c:7f:3b:7e:96:77:8f:b7:e9:
                    59:97:43:0e:f4:23:b1:1e:17:ec:d2:2e:f6:6d:e4:
                    82:b8:40:1f:74:46:73:4a:4e:e8:0e:29:0e:6d:13:
                    37:33:bd:7e:a8:3e:fa:ce:e7:64:6d:d1:d8:a9:b4:
                    8c:65:29:5b:6d:90:a0:9a:20:78:28:c6:7b:05:4c:
                    b8:1e:de:81:dc:1e:bc:18:e9:2b:38:8c:2e:0f:e4:
                    e4:59:aa:c2:dd:7b:b3:ce:47:f6:a5:32:72:19:86:
                    33:69:17:d8:cc:20:28:fa:c4:06:98:31:f9:24:11:
                    7d:22:1c:57:44:30:0e:4b:10:f1:89:70:18:62:95:
                    f9:f7:82:a9:3e:b4:c1:d2:74:84:cb:8d:bb:e6:97:
                    b6:3c:23:e6:07:41:05:81:5d:32:ae:c6:d2:79:5d:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:E7:56:03:8A:FF:EB:C3:13:8B:18:F7:17:44:8D:1D:1C:CD:25
            X509v3 Authority Key Identifier:
                keyid:59:79:AE:AF:4F:5C:FD:62:91:DD:88:DD:07:6B:B3:99:C2:85:3B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/1/5979AEAF4F5CFD6291DD88DD076BB399C2853B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5979AEAF4F5CFD6291DD88DD076BB399C2853B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZuoggWM2sDHMUKpztLpCgHjVS88t6UJP3AxGKppz9Qq/1/3133382e39342e3136302e302f32322d3234203d3e20323634313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:cf:0d:61:7a:38:8a:dd:ce:08:e7:c0:87:6e:10:fc:75:
         11:07:9c:b3:fd:7c:ec:b5:f5:c0:72:05:af:23:d7:dc:07:71:
         73:6a:0c:16:8f:ef:ed:46:12:44:2a:11:05:4f:40:c3:d8:98:
         76:48:8c:ac:77:c9:29:5b:2b:f7:97:8d:d8:e0:1b:a0:d7:ee:
         20:99:d1:54:bb:53:d9:f1:3d:80:2a:99:da:0a:56:a4:c7:df:
         0d:54:31:f0:99:45:65:c7:d4:35:63:ff:ae:a9:e3:9d:48:ea:
         7a:1e:9b:68:c4:3c:5b:14:93:32:00:89:85:a7:f1:95:43:c5:
         d1:a4:25:d6:a3:55:9f:85:6c:23:ed:8d:45:e5:f3:bb:91:65:
         50:a7:c9:c5:83:f5:8f:81:74:84:5a:cd:07:f4:5d:b2:ba:00:
         80:f6:ab:ea:a7:6f:e2:0e:36:79:be:2e:f9:6a:38:c4:f0:61:
         c4:e0:01:8b:ad:01:b9:7a:d0:1f:79:11:18:44:47:fa:16:16:
         43:33:7f:e2:10:af:6c:9b:b1:77:4d:ee:fe:f1:ed:28:81:94:
         5e:76:8d:36:bb:1e:ff:29:51:aa:a3:cf:e6:c7:05:3a:a1:fa:
         40:b1:c2:17:a9:0e:bc:80:ee:19:58:62:bb:45:05:19:72:64:
         d0:63:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:27:55 2025 by rpki-client