Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133342e302f32332d3233203d3e20323634323135.roa
File:                     3133382e39392e3133342e302f32332d3233203d3e20323634323135.roa (raw, json)
Hash identifier:          MhXt1sk0+i7nygIDGeERu/hD0mYb1YbaRhwHXH2Z+fI=
Subject key identifier:   F7:A8:76:3F:94:C9:81:12:78:52:66:9A:5D:C8:9D:01:95:0F:62:EC
Certificate issuer:       /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial:       53BCA1757B0FE6EADF4D420A0C79E4E68963B8AC
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133342e302f32332d3233203d3e20323634323135.roa
Signing time:             Thu 20 Apr 2023 14:14:22 +0000
ROA not before:           Thu 20 Apr 2023 14:09:22 +0000
ROA not after:            Thu 18 Apr 2024 14:14:22 +0000
asID:                     264215
IP address blocks:        138.99.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bc:a1:75:7b:0f:e6:ea:df:4d:42:0a:0c:79:e4:e6:89:63:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
        Validity
            Not Before: Apr 20 14:09:22 2023 GMT
            Not After : Apr 18 14:14:22 2024 GMT
        Subject: CN=F7A8763F94C981127852669A5DC89D01950F62EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:97:51:64:79:58:0f:02:2f:80:2b:24:71:
                    93:91:fb:e1:80:ef:cc:d7:e6:9c:7d:25:6a:71:b7:
                    9d:e6:a4:ba:83:28:1b:1e:89:dc:a3:cd:72:09:e5:
                    fb:ab:82:c3:50:f8:2c:80:f2:3c:b2:01:d0:b7:4f:
                    5f:4f:48:9c:b4:38:9d:d4:8f:c9:fe:f6:fc:1b:64:
                    b7:de:c7:68:bb:7b:14:76:2d:89:00:85:06:09:8f:
                    39:24:e1:c1:06:eb:39:58:9d:91:a4:1c:b6:e0:64:
                    15:b1:12:40:42:9c:41:dd:f3:ca:56:23:f1:dd:b4:
                    45:44:46:1f:b9:16:3e:dc:cc:8f:53:98:9f:21:37:
                    32:5d:30:0d:85:ed:5a:fb:4f:2e:b4:cc:9e:d3:ae:
                    81:45:f9:57:af:06:76:8a:a6:07:7a:88:4f:1f:bc:
                    95:bf:a5:c8:60:29:4e:73:4d:a7:b7:ee:c1:c6:71:
                    2a:54:e8:99:d5:f3:f7:a5:cf:ad:bb:7b:a2:43:9f:
                    de:a8:40:0b:c6:7e:9d:1d:76:5e:cb:c8:dc:ca:14:
                    56:61:b5:48:86:98:52:20:46:b1:06:be:30:04:11:
                    04:7f:c6:60:86:f9:41:14:1a:25:49:e7:6f:93:ac:
                    2f:b6:6c:e1:35:cc:31:21:a9:b8:d7:e1:46:a1:64:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:76:3F:94:C9:81:12:78:52:66:9A:5D:C8:9D:01:95:0F:62:EC
            X509v3 Authority Key Identifier:
                keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133342e302f32332d3233203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:64:09:fa:7f:7e:4d:b6:fb:c9:b2:9e:b6:32:45:86:21:
         39:11:0c:76:39:b7:99:ae:83:5f:2c:fb:56:73:28:9c:d4:47:
         e2:89:f0:56:c5:2c:99:1b:30:c1:21:cb:70:4f:d1:e0:e8:d4:
         b4:e0:97:8f:75:31:c9:1f:87:aa:68:13:44:fb:93:66:92:27:
         1e:4d:b8:7c:f8:b6:cb:94:0f:8e:ac:fa:d5:1d:12:be:e6:eb:
         b4:ee:ea:e7:ee:34:29:ad:4c:87:64:7c:6a:0b:d8:bb:40:f7:
         8a:0d:cb:ac:16:b5:b6:f4:26:8d:f1:5e:1a:ab:69:52:30:5d:
         e9:7a:6d:8b:6c:d1:b9:39:0f:b9:4c:ae:d6:d7:0b:ed:6e:f4:
         08:50:45:b8:21:02:be:75:dc:ba:3c:39:8d:6b:9a:d5:58:41:
         97:7c:33:6a:d7:bc:e2:03:c0:34:8e:22:d2:d0:b2:a3:06:a2:
         c3:f3:c7:93:9f:ac:7e:af:fe:d0:53:0e:ff:8b:92:b5:43:92:
         c4:55:8d:21:1d:b6:db:f7:3c:b4:98:11:06:77:02:af:f9:ea:
         28:32:f0:16:f5:a5:9e:6c:23:01:00:a0:49:1c:b7:63:9f:0e:
         1f:69:95:2c:c4:cd:3c:3b:d3:49:58:eb:78:16:4a:a0:0a:3c:
         a7:1e:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:09 2025 by rpki-client