Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
File:                     3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier:          MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=
Subject key identifier:   56:95:15:37:CD:FE:9E:17:4A:36:7D:7F:FB:16:D2:8C:37:3E:BA:C4
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       135123B89DD7913C0517699929342A21FFDFDF00
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa
Signing time:             Thu 06 Mar 2025 06:49:06 +0000
ROA not before:           Thu 06 Mar 2025 06:44:06 +0000
ROA not after:            Thu 05 Mar 2026 06:49:06 +0000
asID:                     263945
IP address blocks:        138.219.180.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:51:23:b8:9d:d7:91:3c:05:17:69:99:29:34:2a:21:ff:df:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Mar  6 06:44:06 2025 GMT
            Not After : Mar  5 06:49:06 2026 GMT
        Subject: CN=56951537CDFE9E174A367D7FFB16D28C373EBAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:35:bc:bb:08:92:c7:80:97:08:81:03:cb:
                    ae:92:f9:0b:9e:0a:2b:96:28:19:80:26:da:ed:04:
                    8c:33:42:7f:dd:45:89:b9:9a:6d:04:65:89:d3:6d:
                    0e:76:27:d1:c4:b0:9e:b9:6e:36:17:de:fe:4a:13:
                    3d:c3:37:40:2d:70:20:ff:eb:9b:c9:c5:ea:cd:c7:
                    c3:0a:b9:fd:c5:ab:b6:9c:46:53:bb:b3:d5:ff:e2:
                    2e:a3:00:2a:4d:9d:4b:a1:7a:15:3f:81:e6:73:38:
                    81:7d:9e:00:07:44:33:6d:90:55:ae:32:e9:b2:a8:
                    f4:a4:d7:03:50:19:e4:5b:f1:88:48:a0:05:3e:bf:
                    21:98:08:e9:5c:0f:d0:4a:17:4b:05:66:0a:47:79:
                    80:f6:1f:3a:10:80:58:0f:46:ed:b1:e7:bc:a5:6d:
                    60:01:c7:dd:3c:5c:29:49:fe:c4:cd:cf:d5:6e:26:
                    d0:ad:42:16:e4:d1:0a:80:73:31:bf:22:73:1a:36:
                    ab:c5:54:63:bb:87:b6:6c:e2:cf:bb:9a:6b:59:d5:
                    f6:0d:92:01:81:ed:30:58:ad:0c:c6:70:2b:74:06:
                    b6:4c:5f:62:f2:48:ad:6a:f3:0f:58:53:0a:68:48:
                    aa:25:bb:01:e0:8c:8b:91:d0:e0:af:b9:ad:56:95:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:15:37:CD:FE:9E:17:4A:36:7D:7F:FB:16:D2:8C:37:3E:BA:C4
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:08:33:d1:d6:e1:c9:85:2f:d9:81:28:8e:18:19:25:60:10:
         bc:0a:94:9e:54:5c:7e:28:b2:fa:98:b8:d7:e4:7e:7a:8b:6e:
         b4:f1:2d:1e:0c:29:c6:7b:80:ee:32:ab:7f:1f:50:cf:1f:fe:
         7a:5c:96:79:6c:a4:3e:5b:59:ef:b5:d6:9f:4f:26:6e:38:7f:
         95:72:92:74:53:36:d1:6d:c2:0a:a0:3e:db:42:c3:7b:62:3c:
         cf:77:3e:05:a5:3b:42:4b:f2:5d:8f:84:d7:16:a0:3c:99:c9:
         75:b4:8c:2c:75:3f:74:3f:81:79:0b:00:f8:0a:1b:65:02:ba:
         5f:bc:38:8a:f1:e0:45:f6:1f:d5:bf:f8:45:a4:48:80:97:0c:
         fc:6a:09:6f:5b:00:b0:91:36:e4:11:5c:07:44:55:61:68:e6:
         6f:45:b5:b3:c6:77:b8:75:18:60:db:66:51:bf:97:88:1e:1d:
         7a:9e:0d:3b:d0:44:45:11:6a:b8:0c:bc:6d:55:c4:89:0b:c6:
         d7:b8:76:e6:9c:b3:75:80:cf:9b:1c:2a:2d:ed:b2:ce:50:51:
         4a:65:46:d3:7c:96:9e:db:96:a1:f0:0e:1a:1a:c4:5a:e2:77:
         14:dc:fc:c5:7a:9e:ae:b6:42:27:6a:b2:7d:6d:74:99:fb:ec:
         a8:3d:3b:20
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE1EjuJ3XkTwFF2mZKTQqIf/f3wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NERkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5
MEVFRjRFMTAeFw0yNTAzMDYwNjQ0MDZaFw0yNjAzMDUwNjQ5MDZaMDMxMTAvBgNV
BAMTKDU2OTUxNTM3Q0RGRTlFMTc0QTM2N0Q3RkZCMTZEMjhDMzczRUJBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjkjW8uwiSx4CXCIEDy66S+Que
CiuWKBmAJtrtBIwzQn/dRYm5mm0EZYnTbQ52J9HEsJ65bjYX3v5KEz3DN0AtcCD/
65vJxerNx8MKuf3Fq7acRlO7s9X/4i6jACpNnUuhehU/geZzOIF9ngAHRDNtkFWu
MumyqPSk1wNQGeRb8YhIoAU+vyGYCOlcD9BKF0sFZgpHeYD2HzoQgFgPRu2x57yl
bWABx908XClJ/sTNz9VuJtCtQhbk0QqAczG/InMaNqvFVGO7h7Zs4s+7mmtZ1fYN
kgGB7TBYrQzGcCt0BrZMX2LySK1q8w9YUwpoSKoluwHgjIuR0OCvua1WlZFvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVpUVN83+nhdKNn1/+xbSjDc+usQwHwYDVR0j
BBgwFoAUzN+yUoTRQRoFwtWpgWm6oJDu9OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl
bncvMS9DQ0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDREZCMjUyODREMTQxMUEw
NUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFa3Jxb3BraVRrbVZadGQ3ZmFqMndhbUd5QmFrcHRxNWVXS3pTVENnZW53LzEv
MzEzMzM4MmUzMjMxMzkyZTMxMzgzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbtDANBgkqhkiG9w0BAQsFAAOCAQEARQgz
0dbhyYUv2YEojhgZJWAQvAqUnlRcfiiy+pi41+R+eotutPEtHgwpxnuA7jKrfx9Q
zx/+elyWeWykPltZ77XWn08mbjh/lXKSdFM20W3CCqA+20LDe2I8z3c+BaU7Qkvy
XY+E1xagPJnJdbSMLHU/dD+BeQsA+AobZQK6X7w4ivHgRfYf1b/4RaRIgJcM/GoJ
b1sAsJE25BFcB0RVYWjmb0W1s8Z3uHUYYNtmUb+XiB4dep4NO9BERRFquAy8bVXE
iQvG17h25pyzdYDPmxwqLe2yzlBRSmVG03yWntuWofAOGhrEWuJ3FNz8xXqerrZC
J2qyfW10mfvsqD07IA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:27 2025 by rpki-client