Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3332203d3e20323633393832.roa
File:                     3133382e3235352e3233322e302f32322d3332203d3e20323633393832.roa (raw, json)
Hash identifier:          HPzKx4JFlwnP7QyjnaKBdR9LCC1xBYMe0m9Ke7V7fpI=
Subject key identifier:   EE:DC:3D:06:04:8C:C4:DC:9A:CE:0B:05:3A:E2:AA:BE:AD:48:90:F7
Certificate issuer:       /CN=931EED7EF470658CBBAAC332D748978DEF54B593
Certificate serial:       580463C7BA33FF04F1A536F74EED5FBE04BFE4B8
Authority key identifier: 93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3332203d3e20323633393832.roa
Signing time:             Fri 28 Jun 2024 14:01:01 +0000
ROA not before:           Fri 28 Jun 2024 13:56:01 +0000
ROA not after:            Fri 27 Jun 2025 14:01:01 +0000
asID:                     263982
IP address blocks:        138.255.232.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:04:63:c7:ba:33:ff:04:f1:a5:36:f7:4e:ed:5f:be:04:bf:e4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931EED7EF470658CBBAAC332D748978DEF54B593
        Validity
            Not Before: Jun 28 13:56:01 2024 GMT
            Not After : Jun 27 14:01:01 2025 GMT
        Subject: CN=EEDC3D06048CC4DC9ACE0B053AE2AABEAD4890F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:e0:6d:0e:7b:e7:f9:8e:28:24:b6:53:88:
                    40:e1:4d:43:cf:34:fa:f1:90:57:3e:f1:39:a0:2a:
                    58:bf:a3:04:d0:c6:ba:d0:0b:43:02:f5:70:9d:ea:
                    3c:e3:60:47:fd:13:34:fb:79:3a:53:53:54:f2:da:
                    ec:6a:88:01:a1:61:06:2f:11:22:b0:99:76:61:c5:
                    e9:88:61:32:33:d9:3a:1b:68:1b:35:07:a5:04:a6:
                    69:e3:41:e5:af:4e:3a:5a:4e:ed:a1:87:91:c6:9b:
                    04:71:d0:ce:fd:d2:86:0e:4e:6a:77:8e:1c:f9:bb:
                    b0:e7:f0:39:70:cb:e8:d2:75:2f:ac:8b:d1:35:e5:
                    cc:b0:98:06:a7:87:4d:dd:ef:95:a3:81:bb:0d:60:
                    27:79:f6:90:6c:b6:45:3c:55:cc:5e:87:b3:87:85:
                    51:d6:55:f0:ad:ab:b5:8d:f8:5f:a4:df:c6:5f:3b:
                    4c:cd:37:d7:cb:56:df:cf:e9:99:01:40:17:ba:b8:
                    fe:21:62:2b:ce:8f:fa:f7:71:08:60:05:da:6a:f9:
                    d2:bd:5a:da:4a:8d:63:76:ff:ac:46:09:3e:12:de:
                    37:96:a3:97:a3:1f:74:95:5b:3e:da:3b:ae:f7:c2:
                    7c:d8:df:19:11:5b:a2:9b:0d:de:b0:2a:37:ad:50:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:3D:06:04:8C:C4:DC:9A:CE:0B:05:3A:E2:AA:BE:AD:48:90:F7
            X509v3 Authority Key Identifier:
                keyid:93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3332203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:89:4c:53:e2:0f:d6:6d:2e:4c:fe:97:fd:67:aa:ac:bd:
         bb:4d:10:dd:23:03:21:f8:bb:56:0e:eb:c5:b8:d4:10:a7:d3:
         a9:ad:63:1a:4f:7e:c7:93:8a:f5:8f:5f:b0:5b:7c:33:77:3c:
         f9:6b:6b:87:28:69:be:b8:af:10:e7:1c:d7:c9:87:16:95:ae:
         6b:a0:16:57:85:a2:da:ad:84:9c:04:06:a9:e7:2b:61:04:80:
         91:40:46:04:36:9d:bf:2f:17:0d:5d:05:85:17:17:2b:44:a2:
         22:6f:47:3d:65:ba:89:7e:d7:75:f6:31:b9:72:e9:c8:89:78:
         a5:35:af:58:63:c8:e8:1d:c1:7d:c7:e1:6f:3d:8d:0f:93:5e:
         bf:16:e6:37:8c:35:c3:93:4a:02:a6:71:d5:a7:00:97:90:d0:
         3c:a1:02:00:df:b0:c6:1d:7a:1d:63:25:81:76:db:ff:45:26:
         93:8e:f7:15:47:db:c6:2e:00:4b:7d:9c:b3:87:ae:46:93:52:
         2d:8d:33:be:85:66:53:c5:77:60:fc:50:3e:53:3c:80:b6:32:
         9c:7f:18:4d:03:21:fc:16:58:f5:82:75:d3:fa:96:bf:1c:c1:
         4e:09:b7:93:13:0a:fb:9d:9b:62:2c:fb:96:e0:ac:06:51:0c:
         20:67:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:49:50 2025 by rpki-client