Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32342d3234203d3e20323634333230.roa
File:                     3133382e3132322e3132322e302f32342d3234203d3e20323634333230.roa (raw, json)
Hash identifier:          PkzyBzec5m0aH7wh5YRuUjwEVZ050WPhO36hwfJsMEY=
Subject key identifier:   21:91:56:9C:48:81:C3:59:B9:C5:0F:CC:07:34:2A:0E:8C:AF:15:64
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       45D91E6525394AC1A1214DDF77CC6003F24F9984
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32342d3234203d3e20323634333230.roa
Signing time:             Tue 03 Dec 2024 18:24:30 +0000
ROA not before:           Tue 03 Dec 2024 18:19:30 +0000
ROA not after:            Tue 02 Dec 2025 18:24:30 +0000
asID:                     264320
IP address blocks:        138.122.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d9:1e:65:25:39:4a:c1:a1:21:4d:df:77:cc:60:03:f2:4f:99:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Dec  3 18:19:30 2024 GMT
            Not After : Dec  2 18:24:30 2025 GMT
        Subject: CN=2191569C4881C359B9C50FCC07342A0E8CAF1564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:fa:79:f3:8d:6d:17:c5:ba:98:cc:fc:17:
                    7b:6d:2d:24:65:a6:06:ca:51:d9:b4:96:f2:3c:0d:
                    a4:02:be:6c:ad:87:a1:e8:75:84:45:29:a1:67:1d:
                    31:ce:30:ea:51:16:19:cb:ee:f1:50:ff:1e:ae:ed:
                    96:24:1f:b1:4e:03:0f:24:1e:64:be:ae:96:d4:50:
                    cb:9b:fd:86:6c:8d:df:2e:65:e9:f4:e4:e0:d8:a5:
                    a5:3f:c8:55:58:9c:a7:90:a4:cd:20:49:13:ad:68:
                    02:9f:c2:18:50:e4:93:3b:28:f2:88:79:0a:9a:66:
                    5a:e3:2e:b2:f1:a5:e0:af:19:89:c5:ee:33:84:c6:
                    bc:f4:6e:b4:4a:eb:db:48:99:c5:fb:17:75:5f:65:
                    01:d8:e4:78:d5:28:30:5a:04:64:47:4b:07:2a:40:
                    96:62:96:74:14:03:92:39:c2:41:33:15:20:32:a3:
                    c7:78:d8:a6:82:37:90:1c:a2:5f:4c:b1:98:db:bc:
                    bc:2f:71:f5:07:3d:40:3d:90:5c:5d:e5:27:5d:34:
                    63:d3:eb:53:f3:07:d4:4c:5d:dd:94:a1:7a:73:53:
                    cf:15:10:c9:59:94:4a:c0:9d:0f:52:7c:e0:81:7c:
                    67:9d:ce:29:28:b0:79:73:09:b3:1f:c3:05:f5:65:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:56:9C:48:81:C3:59:B9:C5:0F:CC:07:34:2A:0E:8C:AF:15:64
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132322e302f32342d3234203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:7a:df:bf:96:34:cc:e5:fe:a6:3f:eb:80:4d:c6:1c:10:
         54:57:ee:c4:da:65:eb:92:01:a3:e5:ae:4a:f8:62:75:e9:c6:
         62:ca:f1:c1:08:c2:f6:95:9d:02:58:bc:7d:28:4e:14:2f:c3:
         cf:39:44:1e:70:00:23:ca:f0:d7:9d:f2:f4:ca:be:d4:7f:53:
         39:eb:9e:42:30:62:ad:88:30:0f:73:ba:50:36:e2:1f:77:6e:
         c2:4d:7f:30:34:d7:a0:8d:a4:2f:2f:ed:e8:f3:34:97:e8:4f:
         ae:38:fa:09:67:d1:bb:e3:df:0c:9a:ef:4e:aa:d1:04:b0:53:
         d2:e4:82:2f:3b:ed:fb:4c:b2:11:86:00:80:bc:b1:06:78:54:
         fa:3f:d2:7a:01:e3:a7:1c:ec:10:a4:aa:73:ca:73:68:9b:96:
         3c:d7:3f:e7:f3:fb:1b:46:36:fc:98:28:9f:11:38:b4:1a:80:
         12:68:3f:93:12:5d:d2:e0:d6:39:fa:9b:e4:5d:53:6d:9d:c7:
         0e:57:26:bb:4c:db:5d:93:91:5f:d2:fc:49:7d:ea:90:b3:68:
         ab:f5:af:9c:94:e2:1d:83:82:42:85:83:ea:24:4c:fa:d6:51:
         f2:f7:b2:09:14:b6:e2:de:39:db:8d:cc:95:83:4d:aa:9f:03:
         e4:15:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:40:21 2025 by rpki-client