Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32332d3233203d3e20323634333336.roa
File:                     3133382e3132322e3132342e302f32332d3233203d3e20323634333336.roa (raw, json)
Hash identifier:          RiI1OozQxhYPoy6gGzXIQMqRKwSHSfqc52M7RelNoT4=
Subject key identifier:   C8:EF:2E:BE:5C:19:80:22:92:7B:4B:9D:67:F5:61:A8:C1:87:F0:91
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       13FA4C994B3277D088C827FFB13672504B9A5027
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32332d3233203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:12 +0000
ROA not before:           Tue 11 Apr 2023 10:28:12 +0000
ROA not after:            Tue 09 Apr 2024 10:33:12 +0000
asID:                     264336
IP address blocks:        138.122.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:4c:99:4b:32:77:d0:88:c8:27:ff:b1:36:72:50:4b:9a:50:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:12 2023 GMT
            Not After : Apr  9 10:33:12 2024 GMT
        Subject: CN=C8EF2EBE5C198022927B4B9D67F561A8C187F091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:77:dc:fd:3e:6f:70:7d:98:7f:99:11:7d:
                    e0:33:58:97:cb:d6:e2:5e:95:d7:92:40:0c:8c:d1:
                    97:19:1e:46:b8:f3:b9:5a:b9:88:ad:62:b0:13:d1:
                    c7:8d:02:c4:98:a0:9c:36:ea:bb:fa:99:91:ee:80:
                    27:e0:4a:e2:2a:19:49:d8:36:1d:49:9d:03:52:f4:
                    af:d7:3e:c4:e6:08:7c:3c:01:ec:e3:9d:ce:d4:93:
                    ab:eb:36:94:b0:91:a1:be:7e:59:ba:cb:8d:4c:4d:
                    96:75:5f:7e:1b:cd:91:1e:e2:0d:9c:75:45:04:b6:
                    ec:e5:25:a3:6e:6e:18:8d:ee:dd:dc:a2:99:de:5b:
                    58:72:dc:5e:58:a1:b8:c1:83:2c:f4:f1:f1:31:f8:
                    22:28:fe:55:41:55:70:c9:ab:8e:0b:af:44:cd:59:
                    37:8b:2d:73:51:55:20:07:0d:2d:93:0e:ff:88:ab:
                    e1:8f:2d:a6:b9:04:fd:a5:b1:01:d1:fb:7a:1d:d1:
                    0e:3a:0e:63:3d:29:7e:b1:37:52:13:3e:38:13:0e:
                    99:1e:3c:a8:54:de:17:49:50:87:b6:c7:9a:20:84:
                    9b:ca:67:13:fa:f9:0a:7e:29:71:a5:51:9c:b0:d6:
                    09:c9:e5:4b:ce:58:7a:fe:d0:5e:a6:c5:cc:44:28:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:2E:BE:5C:19:80:22:92:7B:4B:9D:67:F5:61:A8:C1:87:F0:91
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32332d3233203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:83:f3:16:4c:87:8c:1b:19:14:fe:e2:be:b7:ac:8a:48:1b:
         86:0e:a0:5c:5b:ff:af:82:3e:4a:e7:c0:03:61:f6:29:c5:81:
         38:d1:ef:b9:12:e0:66:f1:f7:0b:06:e3:5d:7a:8c:55:1b:f8:
         11:06:f3:19:05:75:83:cd:6b:9f:9d:31:c7:70:a6:ba:df:6f:
         70:68:41:b2:d8:a2:23:1c:34:6a:9f:9d:08:ed:b5:5c:e3:ad:
         f8:16:9a:38:15:b8:33:da:66:97:2f:4e:75:c3:fb:1d:14:dc:
         4b:a6:21:7b:88:52:42:ca:58:d4:2f:35:27:a9:fb:49:12:3b:
         81:fd:58:4b:c4:3b:7b:ad:78:51:c5:b2:d5:1a:29:e2:2d:46:
         4a:16:c0:20:51:ba:29:59:dc:da:8e:c0:04:f4:f2:fe:89:1b:
         c0:e7:79:cf:90:1a:f6:0b:80:e5:59:ab:16:46:75:9e:54:5d:
         fb:8a:b9:40:76:6f:a0:f6:3d:1a:33:09:eb:7b:be:7a:ce:f0:
         97:fa:48:b0:e3:19:d8:e9:77:e5:ab:72:24:81:2e:bd:0c:83:
         aa:6b:c6:bd:43:7b:5d:b1:d4:38:c9:f2:8d:4d:07:78:5f:f2:
         b9:12:92:af:b4:93:1c:d0:ef:9c:53:90:fe:96:c6:f1:4d:ca:
         03:2f:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:34:30 2025 by rpki-client