Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa
File:                     3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa (raw, json)
Hash identifier:          ei+8Jgrx97WN6oaKizPsqT+/WbOZDtn6dZwkJDNYbWg=
Subject key identifier:   77:A7:E4:AA:E6:87:83:B8:C3:AB:05:BC:12:CD:AC:2B:A8:9E:BF:67
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       7443F1F3A5A26A4EF52D41D94EB9772E56D2F789
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa
Signing time:             Mon 05 Feb 2024 14:00:00 +0000
ROA not before:           Mon 05 Feb 2024 13:55:00 +0000
ROA not after:            Mon 03 Feb 2025 14:00:00 +0000
asID:                     264332
IP address blocks:        138.185.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:43:f1:f3:a5:a2:6a:4e:f5:2d:41:d9:4e:b9:77:2e:56:d2:f7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Feb  5 13:55:00 2024 GMT
            Not After : Feb  3 14:00:00 2025 GMT
        Subject: CN=77A7E4AAE68783B8C3AB05BC12CDAC2BA89EBF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:70:6a:08:21:a0:9b:46:98:80:c0:21:2e:
                    53:38:41:7a:9c:fe:db:b6:7c:f1:99:28:b3:c9:1f:
                    a0:d7:e4:bd:77:c0:33:c5:90:f6:04:04:fd:89:af:
                    b2:e4:93:fe:47:f6:2b:5d:f3:ee:69:c2:1c:7b:96:
                    d5:4f:fe:7e:56:9f:6e:47:26:fb:41:bc:05:19:8b:
                    79:9a:b9:1d:10:b6:7a:91:42:3a:28:bd:20:1d:96:
                    27:d8:a8:84:8b:2d:01:0f:93:a6:04:f9:ef:0f:5c:
                    65:b7:22:57:e2:bf:0f:3b:5f:fa:7a:ab:25:e1:01:
                    55:57:7b:72:0b:36:1a:fd:76:33:06:95:38:f3:d7:
                    ca:81:00:4e:d8:c5:31:69:df:33:c5:a9:10:0b:79:
                    44:f7:3d:24:df:2c:bc:1c:ca:65:6d:10:9e:a8:27:
                    4f:c5:8b:f9:5a:b1:ef:bb:92:ce:a7:6b:34:8f:47:
                    38:dd:27:ed:f3:73:23:ad:be:2a:a5:4f:a2:a3:60:
                    67:40:29:3b:01:a7:70:07:6c:85:67:c0:f4:06:b4:
                    8a:77:67:bc:80:9d:a0:1e:bc:fc:0e:7f:d7:22:69:
                    11:08:80:9a:cf:0c:ad:16:87:44:f6:46:be:0c:a0:
                    69:60:69:02:82:6e:15:be:63:19:f6:6e:de:3e:65:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:E4:AA:E6:87:83:B8:C3:AB:05:BC:12:CD:AC:2B:A8:9E:BF:67
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32322d3232203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:ab:7d:95:e7:d2:92:9b:18:8b:c5:84:60:db:be:4a:ef:
         9a:9f:49:ae:ae:fe:3f:14:9c:f1:ee:b9:54:01:64:63:0c:ba:
         2d:39:fd:5b:d2:5b:e6:5f:93:2d:25:9f:21:e6:fd:dc:7b:17:
         e4:fa:54:66:3d:9b:2d:cd:d8:0c:f1:50:a6:47:8f:60:4b:d6:
         6f:2d:0c:af:14:60:a9:68:70:3c:5d:76:3a:81:5e:0b:6b:91:
         5d:90:a7:e8:12:6e:20:76:64:7b:ed:c8:4c:3d:85:51:c8:de:
         e3:b0:17:e5:7d:00:f3:2a:55:39:c5:66:30:e5:dc:86:13:b4:
         19:16:5c:f3:fa:ae:76:94:2b:51:48:0a:e6:be:45:82:d2:0b:
         18:f7:2f:f9:ea:95:95:af:62:0e:90:ed:44:8e:9a:75:35:fc:
         f0:54:15:f3:70:00:52:fa:cb:19:7d:66:c8:b0:91:d5:01:11:
         da:f9:ef:5c:93:28:c1:07:61:5c:cb:6b:de:f4:09:44:d8:51:
         95:ba:3e:fe:3e:f0:fa:d9:33:6a:6c:89:de:a3:dc:65:8c:20:
         fa:16:82:dc:a0:be:ca:1b:1a:ca:d4:34:73:ae:a8:ec:77:af:
         de:7e:1c:d4:b5:16:5e:ad:1b:3c:f5:15:30:02:11:c9:e4:7d:
         34:b8:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:35 2025 by rpki-client