Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3132312e3137322e302f32322d3234203d3e20323633363436.roa
File:                     3133382e3132312e3137322e302f32322d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          hFlhGBJBcBVToSfG8L1jH8v4hRteha7k25nRo4YqvU0=
Subject key identifier:   72:38:9E:04:57:69:AB:66:87:6F:28:D7:AD:8D:03:1C:22:48:B5:30
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       03685B39095CC4BE2DBFA5CFFAA558C58093A0C2
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3132312e3137322e302f32322d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:40:24 +0000
ROA not before:           Fri 14 Jan 2022 23:35:24 +0000
ROA not after:            Fri 13 Jan 2023 23:40:24 +0000
asID:                     263646
IP address blocks:        138.121.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:68:5b:39:09:5c:c4:be:2d:bf:a5:cf:fa:a5:58:c5:80:93:a0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:35:24 2022 GMT
            Not After : Jan 13 23:40:24 2023 GMT
        Subject: CN=3082010A0282010100A9FC195EF3D32A75596D5EE3B49C0B0B87C26B21EE64F5DBC8359DEE24D9A14001D7A41F2DC7BFF0E3215E1E91DB67B2422F29E6F1498772EF5E5456DA42AFBA1639B7B56CDE2CBFB4EA6A6ADA6439D1EA0C88487BEA9DDC491694E70E84BAA0D1D3FA4BBDD496369918C6FA477EC159BD2E517FF340A34454D46D03EE0606043DB3660FB2B02959BCB4551C20D27AE6BDB78771D0413990FED8078E832FC20E2A1652E73B465BAF3AA01B38885178EA54686EC9E4BB3B3421406EE70CD0D13F4464C29A0E1B7108BBCF3A15C892338F60CF60E925D116E9E72055F761D8F303A6A46BB07CDA333176FA8D6B4AA23E02ABE84F8B3AAE416284917FF04A0F780D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:19:5e:f3:d3:2a:75:59:6d:5e:e3:b4:9c:
                    0b:0b:87:c2:6b:21:ee:64:f5:db:c8:35:9d:ee:24:
                    d9:a1:40:01:d7:a4:1f:2d:c7:bf:f0:e3:21:5e:1e:
                    91:db:67:b2:42:2f:29:e6:f1:49:87:72:ef:5e:54:
                    56:da:42:af:ba:16:39:b7:b5:6c:de:2c:bf:b4:ea:
                    6a:6a:da:64:39:d1:ea:0c:88:48:7b:ea:9d:dc:49:
                    16:94:e7:0e:84:ba:a0:d1:d3:fa:4b:bd:d4:96:36:
                    99:18:c6:fa:47:7e:c1:59:bd:2e:51:7f:f3:40:a3:
                    44:54:d4:6d:03:ee:06:06:04:3d:b3:66:0f:b2:b0:
                    29:59:bc:b4:55:1c:20:d2:7a:e6:bd:b7:87:71:d0:
                    41:39:90:fe:d8:07:8e:83:2f:c2:0e:2a:16:52:e7:
                    3b:46:5b:af:3a:a0:1b:38:88:51:78:ea:54:68:6e:
                    c9:e4:bb:3b:34:21:40:6e:e7:0c:d0:d1:3f:44:64:
                    c2:9a:0e:1b:71:08:bb:cf:3a:15:c8:92:33:8f:60:
                    cf:60:e9:25:d1:16:e9:e7:20:55:f7:61:d8:f3:03:
                    a6:a4:6b:b0:7c:da:33:31:76:fa:8d:6b:4a:a2:3e:
                    02:ab:e8:4f:8b:3a:ae:41:62:84:91:7f:f0:4a:0f:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:38:9E:04:57:69:AB:66:87:6F:28:D7:AD:8D:03:1C:22:48:B5:30
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3132312e3137322e302f32322d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:53:4a:6c:49:a1:3e:76:a7:84:1d:12:d3:d7:55:9a:4f:
         05:66:0b:06:b7:09:74:f1:00:5c:fd:92:90:f2:18:14:ad:13:
         ed:e0:03:d8:12:bf:ce:c9:0d:fe:00:49:ca:3d:74:f5:e2:c3:
         f9:a6:4c:19:3d:2d:78:8f:6e:5f:8c:b6:5f:f3:44:58:ea:e6:
         07:27:e2:1a:09:3a:4d:92:f1:13:55:86:8c:9b:1d:e1:58:3e:
         fd:30:7e:e7:f5:47:e3:a8:78:20:ee:48:34:25:47:10:ac:b7:
         45:4e:38:e1:f8:34:da:18:02:4d:96:59:78:57:66:fc:da:e1:
         c5:89:31:b4:88:e7:c5:4c:18:13:bb:05:f7:43:82:b7:b0:31:
         8b:67:bf:4f:ed:44:dc:43:4d:2a:d0:c6:8f:ea:44:90:b1:a6:
         ea:af:3c:72:f8:b2:7b:ee:df:75:d6:63:4e:a7:a2:18:1e:be:
         b5:bb:95:cf:79:64:f0:ba:f3:35:95:2b:d1:25:95:78:f0:22:
         a2:6e:82:aa:94:8d:d5:6c:d1:f4:a0:0c:3a:0b:8e:8c:3a:53:
         b8:1d:5b:72:d3:6c:08:b1:40:58:53:14:d5:4d:b3:3e:4b:68:
         22:6d:e4:ca:77:8b:dd:6a:36:16:72:71:97:ed:67:8c:91:b8:
         58:ec:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:37:43 2025 by rpki-client