Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          lAH5DJJmrsAjoInY1EjMt2Rkkgtqeq/nO2st1/oah6Y=
Subject key identifier:   2B:9D:1D:75:47:24:1B:E5:3F:CD:55:8C:13:F8:81:7C:C8:58:C8:95
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       514606E9026C0193665E91559637551B35C630ED
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa
Signing time:             Sun 25 Jun 2023 18:56:13 +0000
ROA not before:           Sun 25 Jun 2023 18:51:13 +0000
ROA not after:            Sun 23 Jun 2024 18:56:13 +0000
asID:                     264242
IP address blocks:        138.117.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:06:e9:02:6c:01:93:66:5e:91:55:96:37:55:1b:35:c6:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jun 25 18:51:13 2023 GMT
            Not After : Jun 23 18:56:13 2024 GMT
        Subject: CN=2B9D1D7547241BE53FCD558C13F8817CC858C895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:27:9d:ae:c4:81:cb:d8:07:7a:26:97:bf:
                    51:da:c4:be:af:be:07:4e:9b:2a:1c:45:c0:a7:2f:
                    23:19:af:d8:8a:22:77:24:57:75:2a:f6:3b:db:09:
                    84:b4:60:11:b3:5f:c3:c6:85:c2:c1:79:e1:b2:da:
                    23:18:0e:10:87:ca:a2:ef:8f:c8:0b:5f:15:00:22:
                    8c:9a:64:f5:36:e9:61:cf:df:b3:02:5c:90:bb:c8:
                    3a:ec:4e:6f:48:4e:63:69:00:38:a0:0b:d7:2d:26:
                    b0:45:b8:66:2d:ae:38:ec:0a:46:8f:08:db:2c:03:
                    96:fa:d6:c7:91:20:6f:fd:4a:d0:e2:7b:66:0f:f3:
                    f1:76:4b:c5:d5:0b:9e:2d:50:95:2b:c8:d3:dc:c3:
                    b0:01:d2:49:34:c1:f3:66:fb:44:ae:85:e1:15:1f:
                    7e:f0:2a:34:30:29:bb:ed:3d:fd:e1:9f:75:6c:6e:
                    af:df:b5:fb:fc:8e:42:e4:c6:a3:83:b8:2f:90:b9:
                    b8:57:d2:d5:ee:f0:af:60:97:0f:f2:3f:1e:67:ee:
                    2c:99:3d:ce:25:f8:63:eb:aa:64:ae:c1:0e:cf:87:
                    8f:43:f8:3b:17:87:92:8d:16:9f:ed:4a:8e:61:a5:
                    43:58:90:51:1c:f4:d0:a3:9e:5b:7c:af:c6:b8:c8:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:1D:75:47:24:1B:E5:3F:CD:55:8C:13:F8:81:7C:C8:58:C8:95
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:89:c5:dd:59:ca:56:c0:71:0a:ef:0b:33:05:09:00:0b:
         aa:4f:79:31:d5:18:65:c6:6b:cd:62:54:55:58:cd:bb:cc:82:
         81:b8:f3:55:4a:aa:3c:ef:8b:74:57:87:e9:fd:c9:59:4e:47:
         11:a4:dc:9e:84:f6:d9:8f:7d:ef:90:42:6d:58:34:6f:de:84:
         ef:5b:31:b0:f0:7e:e9:4e:70:dd:ad:76:51:1f:2c:91:f6:bf:
         9d:6c:9e:03:96:9b:92:51:ab:0e:80:5e:7b:45:cb:7e:bf:d6:
         5e:a8:2c:6c:19:8d:42:8b:46:e5:39:ae:8c:96:4e:b8:bc:d4:
         5e:d5:e2:5d:d9:75:8b:f3:97:11:c5:29:0f:6e:36:4d:ee:94:
         d7:f0:16:c8:af:7c:0f:c8:40:19:81:81:07:f7:c7:0d:c3:32:
         c3:41:ed:8d:62:53:0a:23:16:1f:43:ea:54:bb:db:af:bb:99:
         33:f7:64:c7:6a:f3:24:e3:04:3b:d6:fe:d7:a7:42:e1:96:11:
         e3:93:a7:3f:c0:92:f2:21:df:1a:fe:aa:e0:c5:4b:f1:e4:ed:
         7f:18:ed:23:7d:b7:e0:b2:64:5e:9e:a6:63:c6:cd:39:26:3c:
         d4:d9:ab:f0:af:da:43:35:47:b1:64:fe:d4:c7:6e:55:e5:82:
         32:58:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:45 2025 by rpki-client