Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3332203d3e20323730383730.roa
File:                     3133382e35392e3135342e302f32342d3332203d3e20323730383730.roa (raw, json)
Hash identifier:          IhvllqY7b5cDPGZbI0cGX45vD59Ur8RDLY5I2vYwMJg=
Subject key identifier:   AF:84:CC:43:65:35:5A:AD:0E:D8:D1:A3:0A:F9:3E:0B:56:2D:32:48
Certificate issuer:       /CN=1E1EDA50F40BCE29E4CBA74240E9B7EA362CF496
Certificate serial:       3239A892D7A95AABFA11CC19C7F35E023FDD7B60
Authority key identifier: 1E:1E:DA:50:F4:0B:CE:29:E4:CB:A7:42:40:E9:B7:EA:36:2C:F4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E1EDA50F40BCE29E4CBA74240E9B7EA362CF496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3332203d3e20323730383730.roa
Signing time:             Tue 14 Nov 2023 14:50:14 +0000
ROA not before:           Tue 14 Nov 2023 14:45:14 +0000
ROA not after:            Tue 12 Nov 2024 14:50:14 +0000
asID:                     270870
IP address blocks:        138.59.154.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:39:a8:92:d7:a9:5a:ab:fa:11:cc:19:c7:f3:5e:02:3f:dd:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E1EDA50F40BCE29E4CBA74240E9B7EA362CF496
        Validity
            Not Before: Nov 14 14:45:14 2023 GMT
            Not After : Nov 12 14:50:14 2024 GMT
        Subject: CN=AF84CC4365355AAD0ED8D1A30AF93E0B562D3248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:3d:3b:90:bb:7a:05:c2:f0:ef:5b:d7:71:
                    41:c8:ae:d3:c9:68:06:19:6d:5d:6c:cf:a5:f9:27:
                    66:13:b9:dd:94:50:51:6b:04:fc:83:7f:d8:b5:ff:
                    51:c1:eb:21:e5:02:bb:b8:a4:eb:b7:d2:1b:4a:4d:
                    9f:76:7b:0b:ad:02:9b:8a:7a:ac:f2:6c:22:44:e5:
                    da:8c:eb:d7:32:56:fd:73:87:bd:68:47:a6:4d:07:
                    97:08:86:a5:15:bd:aa:8f:9b:4a:0e:dd:ae:f6:82:
                    a2:b4:fd:76:2f:10:b2:65:2d:4e:b5:05:a3:53:22:
                    79:90:7b:a4:a0:58:9f:af:47:d9:be:07:e5:4f:68:
                    3e:f2:74:fa:7f:e2:96:6a:50:2c:c5:ff:69:e7:64:
                    dd:30:92:c9:ac:79:c7:ba:d8:f8:42:ea:58:1a:c8:
                    69:cf:ad:cb:5b:87:41:19:ed:b5:45:5a:5e:64:8a:
                    73:22:8f:c1:4f:c9:56:c8:86:61:63:d4:97:5f:ee:
                    0b:12:e7:53:18:c1:80:93:75:91:36:6d:15:9f:8f:
                    35:c0:59:c5:d8:9b:3f:3c:f7:e4:e4:2d:7d:42:73:
                    c8:8a:20:1f:23:68:59:27:a5:02:a3:a2:b0:1c:00:
                    99:1e:e7:80:ac:df:40:37:44:82:60:ea:12:69:9d:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:CC:43:65:35:5A:AD:0E:D8:D1:A3:0A:F9:3E:0B:56:2D:32:48
            X509v3 Authority Key Identifier:
                keyid:1E:1E:DA:50:F4:0B:CE:29:E4:CB:A7:42:40:E9:B7:EA:36:2C:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/1E1EDA50F40BCE29E4CBA74240E9B7EA362CF496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E1EDA50F40BCE29E4CBA74240E9B7EA362CF496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3332203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:07:0c:88:6e:9a:61:a1:e6:f5:5c:7a:f5:54:92:47:9b:
         38:a3:6f:77:47:9f:d3:dc:7a:a8:39:30:69:bb:02:cd:57:00:
         21:74:39:f2:23:c6:64:2c:f9:91:1c:a3:e3:47:18:3c:7a:78:
         6d:9f:46:f2:b8:36:0a:00:ae:5d:33:23:9f:ac:65:15:35:92:
         54:6a:6f:53:f9:87:99:0f:d6:28:d8:f3:de:87:b9:bb:c2:90:
         13:79:d8:1d:e2:ba:da:7e:3e:eb:b3:5d:a3:13:eb:14:50:53:
         6d:81:f7:61:7c:4f:a2:b8:59:56:05:b1:0d:cf:a0:3e:c8:24:
         81:27:20:23:15:f7:9d:d6:90:06:e8:fd:c4:14:de:97:fb:92:
         31:18:62:41:90:b3:2f:f7:7c:b9:66:b2:57:15:31:c0:0f:31:
         53:01:bc:d0:cd:fa:a6:50:92:b8:72:05:32:eb:f3:cc:0d:73:
         82:a5:67:35:85:3d:ff:76:88:53:79:87:e7:0d:cd:60:f9:81:
         96:f7:05:d3:76:78:c2:58:f3:b3:b6:7b:47:73:14:36:2f:88:
         41:63:46:d7:68:e9:8c:e7:d2:79:dd:ba:8b:ed:25:c3:ac:fa:
         62:15:6d:9d:37:f6:53:a3:c7:57:81:e1:dc:fd:e4:99:9d:8f:
         9b:28:33:14
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUMjmoktepWqv6EcwZx/NeAj/de2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUxRURBNTBGNDBCQ0UyOUU0Q0JBNzQyNDBFOUI3RUEz
NjJDRjQ5NjAeFw0yMzExMTQxNDQ1MTRaFw0yNDExMTIxNDUwMTRaMDMxMTAvBgNV
BAMTKEFGODRDQzQzNjUzNTVBQUQwRUQ4RDFBMzBBRjkzRTBCNTYyRDMyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAT07kLt6BcLw71vXcUHIrtPJ
aAYZbV1sz6X5J2YTud2UUFFrBPyDf9i1/1HB6yHlAru4pOu30htKTZ92ewutApuK
eqzybCJE5dqM69cyVv1zh71oR6ZNB5cIhqUVvaqPm0oO3a72gqK0/XYvELJlLU61
BaNTInmQe6SgWJ+vR9m+B+VPaD7ydPp/4pZqUCzF/2nnZN0wksmsece62PhC6lga
yGnPrctbh0EZ7bVFWl5kinMij8FPyVbIhmFj1Jdf7gsS51MYwYCTdZE2bRWfjzXA
WcXYmz889+TkLX1Cc8iKIB8jaFknpQKjorAcAJke54Cs30A3RIJg6hJpndEjAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUr4TMQ2U1Wq0O2NGjCvk+C1YtMkgwHwYDVR0j
BBgwFoAUHh7aUPQLzinky6dCQOm36jYs9JYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3
LzAvMUUxRURBNTBGNDBCQ0UyOUU0Q0JBNzQyNDBFOUI3RUEzNjJDRjQ5Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xRTFFREE1MEY0MEJDRTI5RTRD
QkE3NDI0MEU5QjdFQTM2MkNGNDk2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
N1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3LzAvMzEz
MzM4MmUzNTM5MmUzMTM1MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3MzAz
ODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACKO5owDQYJKoZIhvcNAQELBQADggEBAKAQBwyIbpph
oeb1XHr1VJJHmzijb3dHn9Pceqg5MGm7As1XACF0OfIjxmQs+ZEco+NHGDx6eG2f
RvK4NgoArl0zI5+sZRU1klRqb1P5h5kP1ijY896HubvCkBN52B3iutp+PuuzXaMT
6xRQU22B92F8T6K4WVYFsQ3PoD7IJIEnICMV953WkAbo/cQU3pf7kjEYYkGQsy/3
fLlmslcVMcAPMVMBvNDN+qZQkrhyBTLr88wNc4KlZzWFPf92iFN5h+cNzWD5gZb3
BdN2eMJY87O2e0dzFDYviEFjRtdo6Yzn0nnduovtJcOs+mIVbZ039lOjx1eB4dz9
5Jmdj5soMxQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:59:15 2025 by rpki-client