Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3235203d3e20323634353632.roa
File:                     3133382e33362e302e302f32322d3235203d3e20323634353632.roa (raw, json)
Hash identifier:          TIPF3ML7nX64Ev8dDpk41OgYBBU2M889STRTLQ2o/mk=
Subject key identifier:   D2:98:BE:9A:07:F8:C7:3D:E2:E1:7F:09:E1:6A:B1:DB:62:BA:B0:B5
Certificate issuer:       /CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
Certificate serial:       4AA9F626EEECDD0D5EA5486F70C12AA5A09D2FBB
Authority key identifier: 0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3235203d3e20323634353632.roa
Signing time:             Tue 12 Nov 2024 00:59:04 +0000
ROA not before:           Tue 12 Nov 2024 00:54:04 +0000
ROA not after:            Tue 11 Nov 2025 00:59:04 +0000
asID:                     264562
IP address blocks:        138.36.0.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a9:f6:26:ee:ec:dd:0d:5e:a5:48:6f:70:c1:2a:a5:a0:9d:2f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25
        Validity
            Not Before: Nov 12 00:54:04 2024 GMT
            Not After : Nov 11 00:59:04 2025 GMT
        Subject: CN=D298BE9A07F8C73DE2E17F09E16AB1DB62BAB0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ad:1f:1b:50:a1:6b:29:25:25:72:24:f6:d7:
                    d9:db:d5:2f:3b:f2:a8:a5:bb:c6:01:19:86:3b:79:
                    53:fa:33:47:e7:21:1a:f7:5d:81:0c:b5:47:5e:c3:
                    53:fd:0e:93:27:a0:50:e5:ee:51:5a:bf:03:4d:0f:
                    15:37:af:e9:61:4f:ab:79:04:16:dd:68:dd:0a:ca:
                    96:47:a7:fe:3b:f9:f9:bd:ff:2c:e0:29:cf:ef:da:
                    8c:ff:82:64:39:e2:e5:29:3d:00:97:0c:57:28:3b:
                    f5:d0:42:a0:39:eb:f5:f1:ba:8e:81:ad:bc:9d:ee:
                    08:41:58:72:fd:24:6e:b6:90:10:cc:33:b9:8e:e7:
                    7f:fb:bd:81:cc:78:b9:48:41:8c:82:9b:bd:55:80:
                    bd:68:cf:2b:18:ce:1f:a6:8f:1d:a1:d3:31:5b:fe:
                    d5:d1:5d:a1:e2:89:3e:39:ec:35:ef:2b:d1:6a:98:
                    1d:d7:5c:3b:3a:2e:72:dc:98:d0:d4:ae:1b:73:47:
                    ff:a2:87:72:f7:69:53:60:58:c3:3e:67:0f:de:4c:
                    d1:ea:24:d7:07:3f:06:65:26:c9:bb:fe:98:7f:e8:
                    30:c3:d9:34:2c:68:f6:42:f3:fc:af:bd:ab:e7:ba:
                    3a:3b:89:de:7a:b2:5b:d8:84:29:b6:25:b1:85:0e:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:98:BE:9A:07:F8:C7:3D:E2:E1:7F:09:E1:6A:B1:DB:62:BA:B0:B5
            X509v3 Authority Key Identifier:
                keyid:0B:DA:57:76:E6:D9:6F:40:CC:3E:4E:7A:CB:15:D5:80:14:44:FF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BDA5776E6D96F40CC3E4E7ACB15D5801444FF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32322d3235203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:e8:0d:56:13:c7:7e:6e:bd:da:95:a3:4d:84:18:39:81:
         9a:d8:c7:92:f9:6b:74:c0:75:cf:b1:af:b9:7a:07:ab:05:55:
         bf:ed:57:95:41:98:4e:0b:34:10:62:ba:4e:ef:60:f9:8e:18:
         a1:87:09:dc:67:72:ab:f3:c8:8d:f9:9a:60:59:18:3c:cf:6c:
         71:b0:3e:3f:bb:82:07:39:62:75:89:b6:b6:89:a6:86:21:86:
         62:25:46:be:08:6f:60:a0:26:e7:ee:2b:c3:bf:c0:38:db:62:
         fe:b5:84:95:64:73:cf:a1:03:88:c6:49:c6:5f:5b:15:8a:89:
         8e:3e:c0:57:dd:2d:fd:80:a8:68:e7:66:82:bf:ad:51:f1:aa:
         b6:20:0a:13:96:40:9e:03:0b:73:0c:5e:e8:fc:36:80:2e:9d:
         93:89:ad:92:8b:33:a2:0d:99:9e:da:cb:48:75:94:9f:dd:80:
         60:a4:2b:5f:7f:1c:e8:f3:aa:ef:c8:68:f4:b3:db:81:b1:c8:
         b0:a3:34:74:04:03:ad:74:8b:71:83:46:b4:41:c4:ce:a5:58:
         8c:84:ec:19:0c:bb:7d:d3:4c:b0:d9:67:f8:76:3b:3c:09:5e:
         6e:27:4e:58:a7:ee:48:ee:f7:2b:a5:bf:e4:fa:b4:49:7a:a8:
         4f:b1:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:02:11 2025 by rpki-client