Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323634363030.roa
File:                     3133382e302e3134382e302f32322d3234203d3e20323634363030.roa (raw, json)
Hash identifier:          PLwr3f7UzDuk6qEpy0k5vX/PYaXwmuXHUbnuApzPr4M=
Subject key identifier:   5B:68:93:7A:E1:E0:84:99:32:DB:8E:24:92:6D:87:88:AB:56:BB:34
Certificate issuer:       /CN=4A1758C02056B68B850854C0D9687F347003679B
Certificate serial:       1AE67D4336720682ABB09CC90F03743EB7C94D43
Authority key identifier: 4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323634363030.roa
Signing time:             Mon 21 Feb 2022 12:46:04 +0000
ROA not before:           Mon 21 Feb 2022 12:41:04 +0000
ROA not after:            Mon 20 Feb 2023 12:46:04 +0000
asID:                     264600
IP address blocks:        138.0.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:7d:43:36:72:06:82:ab:b0:9c:c9:0f:03:74:3e:b7:c9:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1758C02056B68B850854C0D9687F347003679B
        Validity
            Not Before: Feb 21 12:41:04 2022 GMT
            Not After : Feb 20 12:46:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:66:b0:02:04:0a:5d:a6:e9:8d:20:fb:a2:
                    8d:f0:fd:00:df:7d:76:9c:7a:6e:ec:0b:b0:44:c0:
                    e2:0a:02:de:b9:97:7e:2a:d1:ab:b0:97:c0:85:ea:
                    1e:9c:b8:31:55:84:7e:01:3c:ba:07:17:59:8a:cb:
                    d0:ea:6e:6d:4f:12:c2:ae:c3:7f:9d:eb:c2:a6:e3:
                    6a:f3:f3:97:e6:ae:90:32:b1:82:d8:88:2c:65:32:
                    ad:50:e0:60:99:c3:fd:b6:92:fe:fc:94:ce:1e:4a:
                    fe:69:7b:11:2a:38:84:3f:71:7d:a1:30:87:e6:77:
                    9c:9e:19:d2:c7:26:0f:86:0e:75:0f:15:5b:11:e1:
                    43:32:b3:50:6a:e4:94:50:ef:24:13:24:e5:14:6f:
                    bd:b3:03:03:1e:53:e0:96:87:1b:e0:af:fb:5e:6a:
                    8f:aa:f8:fd:b0:87:52:ac:67:28:d0:52:64:c7:b0:
                    23:07:fa:53:f1:8e:14:27:4f:fc:18:1d:63:da:8f:
                    25:30:48:17:ad:04:66:f5:d7:1f:9f:20:a7:7d:d4:
                    5b:0c:a2:61:8a:0c:b0:c8:51:b5:4b:92:ff:c5:73:
                    c5:c7:3e:ae:d6:7d:3a:9b:60:e3:5b:d9:a0:48:18:
                    a8:cb:5e:16:a1:01:73:4d:92:b4:18:ed:06:d9:75:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:68:93:7A:E1:E0:84:99:32:DB:8E:24:92:6D:87:88:AB:56:BB:34
            X509v3 Authority Key Identifier:
                keyid:4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/4A1758C02056B68B850854C0D9687F347003679B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323634363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:0c:0b:dd:1d:4a:a0:21:c0:a4:9b:a8:c3:ac:db:8f:29:
         06:82:fd:ad:6d:2c:bf:44:a2:80:78:98:a4:f2:8a:9f:4b:1a:
         34:0f:28:cf:0d:f5:4a:26:3b:08:d7:51:d4:32:83:75:1d:56:
         1d:8c:b7:ff:f8:86:cd:fb:5b:5a:f6:37:54:42:dc:2c:7d:9c:
         e6:c9:b1:06:ab:77:64:23:54:42:2a:76:07:a2:92:97:89:05:
         ad:81:b4:4f:14:f0:b0:e4:1c:5c:90:20:96:8b:29:37:f9:b3:
         67:80:f6:2e:63:e8:df:12:69:d7:ab:c1:81:37:06:e7:d9:9f:
         05:61:45:ca:ba:ff:18:4e:0c:07:0c:7e:28:d5:90:f8:b9:80:
         f6:bd:3a:d5:3c:32:b8:ed:c4:bc:0a:58:92:60:4b:5c:b8:6d:
         52:68:51:6a:80:00:55:01:e9:49:98:0d:1c:8f:a3:78:91:b4:
         55:79:cf:62:85:8b:13:2e:bd:bf:28:42:e5:11:41:93:a1:6a:
         ed:06:75:24:d8:d6:56:16:86:26:76:ef:fa:8f:7f:9d:21:b7:
         47:aa:c4:05:63:17:9b:98:2c:9d:ec:4b:47:63:86:3a:e5:54:
         09:15:fc:d2:c9:ea:43:15:ed:5d:19:b7:dc:3b:9d:35:14:50:
         8a:e8:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:56 2025 by rpki-client