Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
File:                     3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          fCkkeWPQ1bL3zX0E+mIVXnYLiD3ASsugMzOLR7uyd5M=
Subject key identifier:   16:C4:48:07:40:1A:0C:C8:D9:FB:CC:18:17:C7:3E:CA:66:7C:36:87
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       2F839C8655E2D96E2D98A0F4C5C7A3B641BAAF12
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 05 Mar 2025 21:43:47 +0000
ROA not before:           Wed 05 Mar 2025 21:38:47 +0000
ROA not after:            Wed 04 Mar 2026 21:43:47 +0000
asID:                     262300
IP address blocks:        138.36.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:9c:86:55:e2:d9:6e:2d:98:a0:f4:c5:c7:a3:b6:41:ba:af:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Mar  5 21:38:47 2025 GMT
            Not After : Mar  4 21:43:47 2026 GMT
        Subject: CN=16C44807401A0CC8D9FBCC1817C73ECA667C3687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:05:ac:65:6a:03:a6:f6:e9:e7:4a:7a:69:
                    9f:a1:1b:d0:a7:fd:16:b9:c1:58:9c:3e:d7:52:b4:
                    1a:07:51:f1:ee:76:03:34:ef:ee:79:01:9e:17:e4:
                    08:67:03:66:d3:f3:e0:ef:60:b9:fd:73:53:da:4b:
                    7e:1b:93:8b:0a:dc:a3:7e:b9:55:3a:4d:14:62:e0:
                    e5:a1:28:f9:d6:ce:1f:d1:0c:94:be:7c:58:d6:ff:
                    45:ca:ae:d6:72:78:47:8e:a6:ad:66:cc:6b:54:3b:
                    f9:0a:8d:1a:87:38:db:3f:99:08:48:fa:4c:26:e4:
                    fe:61:12:f6:03:ab:fc:2a:d0:a2:3d:d1:c9:b1:df:
                    62:48:eb:e8:52:0e:73:52:5e:ce:91:29:a2:3e:72:
                    30:09:0a:c8:43:10:2f:f0:31:a5:3b:f8:74:ed:e2:
                    e9:04:0a:fd:2f:eb:4c:a3:19:5b:a8:b3:9f:cd:c6:
                    03:72:7b:07:7c:41:da:72:06:aa:5e:59:24:38:0d:
                    fd:10:32:0a:74:c0:5f:fb:af:82:cf:a8:71:98:1e:
                    68:30:6c:dd:ad:24:9a:f1:a3:37:bc:41:4b:a4:ec:
                    aa:9c:f0:f4:00:37:10:ab:41:ae:30:e2:3a:48:34:
                    3c:4c:81:e9:33:87:16:7b:67:5e:e9:52:42:a3:c8:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:48:07:40:1A:0C:C8:D9:FB:CC:18:17:C7:3E:CA:66:7C:36:87
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:9b:c2:0b:97:43:19:e7:c6:e0:1b:8c:9c:35:d7:76:b5:
         90:2a:06:18:d4:00:c3:c5:dd:25:29:1a:b9:17:bd:26:64:98:
         49:83:b3:e1:f2:bf:db:9d:52:28:59:91:45:66:12:7f:98:9c:
         d5:4e:3b:6b:33:e4:8d:2a:f7:87:21:b7:78:13:5e:64:35:21:
         3f:4d:e5:86:5f:1f:4a:67:2a:7c:de:34:cc:ef:45:7b:16:20:
         32:0b:34:4e:2d:32:22:e8:00:70:6c:16:7a:67:85:04:1a:09:
         79:9c:76:40:7e:a0:19:07:f2:54:2a:16:3b:e1:72:9b:cc:8c:
         67:84:c5:74:1e:60:fe:9a:cf:fb:43:fe:24:fe:54:bf:7e:8f:
         da:d6:5f:8e:ec:72:82:ed:75:c8:5c:02:b8:05:45:73:87:b8:
         23:48:64:64:e7:c2:55:22:a1:e4:ab:50:3c:af:a3:e1:b6:51:
         5c:41:3c:df:cf:5d:da:f7:76:7c:37:c5:02:2a:64:f4:d8:64:
         8a:4e:39:3c:55:04:e0:cb:81:34:da:dd:ef:50:5d:ce:70:ea:
         d7:7d:6c:e5:46:83:af:9b:23:27:e2:0d:53:5a:df:59:47:b7:
         07:cc:1e:8b:cc:6d:ac:73:2d:e8:ef:6d:7d:17:92:59:7d:35:
         20:4e:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:55:32 2025 by rpki-client