Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136372e302f32342d3332203d3e20323634313830.roa
File:                     3133382e39342e3136372e302f32342d3332203d3e20323634313830.roa (raw, json)
Hash identifier:          LIRBkMDNajruc4pQlDqnjreJ3vZMu9Wlaok2TsqfaG8=
Subject key identifier:   91:2C:F9:CA:A4:3F:D5:D0:49:F1:8C:6A:00:BB:45:EA:31:A1:67:77
Certificate issuer:       /CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
Certificate serial:       3CAA759772F1644107CE0C45EE52F2BF050CC1E2
Authority key identifier: 98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136372e302f32342d3332203d3e20323634313830.roa
Signing time:             Wed 22 Jan 2025 19:03:29 +0000
ROA not before:           Wed 22 Jan 2025 18:58:29 +0000
ROA not after:            Wed 21 Jan 2026 19:03:29 +0000
asID:                     264180
IP address blocks:        138.94.167.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:aa:75:97:72:f1:64:41:07:ce:0c:45:ee:52:f2:bf:05:0c:c1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
        Validity
            Not Before: Jan 22 18:58:29 2025 GMT
            Not After : Jan 21 19:03:29 2026 GMT
        Subject: CN=912CF9CAA43FD5D049F18C6A00BB45EA31A16777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:d6:10:01:70:1b:03:df:92:40:05:4a:b3:
                    94:10:e1:3e:c1:66:f2:3e:01:4b:b6:97:f3:4c:bb:
                    cd:a1:dc:85:e4:6c:6e:0f:4e:2b:e3:8d:58:84:97:
                    18:17:41:4b:27:d0:c7:48:a1:be:db:07:d2:cc:4f:
                    f6:45:16:8e:9c:cc:03:f1:d6:df:c3:52:23:e9:8e:
                    d0:89:51:0c:5f:01:56:da:37:14:f9:a6:bb:62:04:
                    87:da:2e:45:e8:b7:fb:14:4a:9a:3b:11:21:4a:bd:
                    19:70:6f:46:84:27:6e:a5:ce:fa:f7:7c:60:f9:7a:
                    17:0c:3b:45:84:be:40:5d:f3:93:e4:66:21:16:1c:
                    78:d6:7d:d5:71:d0:0a:1a:44:12:b4:6f:af:a2:66:
                    17:c9:3c:1d:77:cd:7a:a1:1f:78:aa:b7:3b:51:86:
                    71:94:86:bb:b7:fe:3e:d5:f5:0a:62:7f:39:72:98:
                    14:47:4a:36:10:e7:cb:bf:db:4d:0f:c8:fa:a8:b3:
                    48:dd:b5:fb:09:39:9a:3d:f2:bd:15:d5:f6:e9:d3:
                    6c:96:d7:67:aa:1f:0b:bf:d3:bd:8f:ea:41:26:de:
                    64:f3:ef:f9:f4:6e:64:58:d4:ee:3a:e4:2c:95:74:
                    af:62:87:0d:e8:cf:20:ea:6c:5a:e9:c6:cc:3a:28:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:F9:CA:A4:3F:D5:D0:49:F1:8C:6A:00:BB:45:EA:31:A1:67:77
            X509v3 Authority Key Identifier:
                keyid:98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136372e302f32342d3332203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:db:b6:36:a2:15:5b:a0:70:29:d6:92:80:6c:c9:e5:4d:
         40:53:ad:6f:3a:d6:a3:cf:3e:fd:b2:18:ec:d3:5c:a4:58:c7:
         b6:a4:a3:ff:7a:b8:96:ea:59:ae:cb:af:01:a9:fc:b5:a0:28:
         df:1e:21:20:d5:c4:87:f1:f4:19:23:73:ab:cf:c7:93:85:98:
         90:78:9c:a0:d5:87:8d:45:38:61:8b:69:89:f5:6d:56:5d:ba:
         0f:a4:a9:56:97:19:cd:cd:95:ce:8b:7c:f5:16:01:de:37:66:
         62:3d:7f:ac:80:8f:2e:d8:7a:44:83:1b:90:fb:54:7b:bd:d2:
         44:d7:13:58:12:c2:69:d0:dd:22:f3:73:37:6a:f6:cd:2e:75:
         1e:b2:00:36:66:4b:c9:00:3f:a5:64:fa:58:10:f0:56:3b:31:
         a2:4b:49:94:b9:f8:f0:83:cf:a9:8a:0c:bd:a7:d1:b4:79:40:
         57:55:73:51:64:07:49:92:26:aa:af:82:03:ca:e2:ad:09:b3:
         88:6c:f5:1c:2a:a2:90:b7:68:37:90:ae:23:d7:9b:27:d3:b8:
         bb:84:36:51:ff:2e:42:46:19:c2:db:eb:d6:24:82:05:21:a1:
         38:9d:a8:18:35:70:94:40:d6:88:60:cb:1b:f4:c8:15:52:ce:
         25:48:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:46:01 2025 by rpki-client