Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File:                     3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier:          gzGeplzkaDAMkcN68qjjIX5PHakWIq0qO+39icoDitU=
Subject key identifier:   9D:6F:3D:5B:E1:D0:15:FF:B9:EC:60:31:07:93:98:62:A7:52:E3:E4
Certificate issuer:       /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial:       550CCFD3BE03318ACF9270511BDCD1E543761188
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time:             Mon 09 Jun 2025 11:41:15 +0000
ROA not before:           Mon 09 Jun 2025 11:36:15 +0000
ROA not after:            Mon 08 Jun 2026 11:41:15 +0000
asID:                     264561
IP address blocks:        138.0.252.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0c:cf:d3:be:03:31:8a:cf:92:70:51:1b:dc:d1:e5:43:76:11:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
        Validity
            Not Before: Jun  9 11:36:15 2025 GMT
            Not After : Jun  8 11:41:15 2026 GMT
        Subject: CN=9D6F3D5BE1D015FFB9EC603107939862A752E3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:7a:0a:6d:31:b8:32:ff:47:bb:f0:ad:09:
                    1a:6a:45:d4:68:24:83:5e:74:ec:7d:16:13:2f:b8:
                    6e:a1:b5:40:9a:66:03:7a:4c:9d:0d:06:e5:44:b5:
                    a3:0d:e8:29:de:ec:e7:36:4d:d3:77:03:4c:4a:97:
                    5a:90:8d:63:21:05:44:1e:2c:5c:39:c5:f7:bf:de:
                    45:92:f4:ec:3a:d6:01:18:06:75:45:fa:87:fc:ff:
                    10:75:ef:d2:b7:c1:30:7a:45:d5:7c:63:1d:ec:5d:
                    1b:5b:f0:8f:e1:a7:92:ac:65:bb:44:d0:7c:c0:e2:
                    45:1a:1d:32:bd:1d:aa:9c:ed:31:17:59:5b:99:e6:
                    ec:78:e0:c0:56:29:8b:e0:b7:0e:e8:15:1c:8a:bc:
                    09:3d:b6:d6:87:ac:26:d1:13:98:1c:fb:1a:67:f1:
                    1b:f1:35:5c:f4:80:41:26:da:aa:ee:63:43:65:8a:
                    b7:61:a0:4b:f7:f8:d2:02:35:4c:f7:b0:68:73:cd:
                    00:d7:96:81:cf:07:7e:03:0f:99:32:36:fe:ba:c9:
                    ec:30:3c:03:78:4d:4e:fd:2a:70:03:1d:7a:c5:8e:
                    83:90:0b:c0:4f:77:f4:fb:20:1b:bb:25:43:7b:05:
                    6a:67:f3:1d:f4:70:18:db:86:c4:c0:d6:86:fb:4c:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:3D:5B:E1:D0:15:FF:B9:EC:60:31:07:93:98:62:A7:52:E3:E4
            X509v3 Authority Key Identifier:
                keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:1e:5f:3e:e0:e9:70:fc:a6:39:37:97:f5:73:bf:cd:24:f1:
         ad:71:34:d1:8c:c9:23:e7:03:8d:d2:51:54:67:9a:de:16:4a:
         ec:22:79:4a:d1:fa:8a:0d:9b:cd:02:7f:de:cb:93:24:64:41:
         2a:81:93:8c:d1:dd:2e:22:3b:9f:87:34:a7:56:29:ef:87:94:
         cd:16:4e:db:2c:2d:18:23:14:b5:16:a7:e6:2b:a1:6a:2c:00:
         70:a5:bf:1b:38:77:41:74:4c:db:88:23:9e:bf:a1:83:28:38:
         b8:af:10:43:73:3d:ff:42:73:00:fd:07:26:a3:22:50:9e:be:
         d3:da:ea:c2:2e:ee:1e:42:02:98:bf:03:7f:25:ac:82:56:04:
         78:38:9f:3c:c2:c4:2f:78:f7:ac:7f:87:11:a8:53:12:c7:71:
         4d:51:fd:a3:bb:e2:8d:6a:69:37:62:f4:6e:e0:0b:c3:b6:a5:
         40:4f:19:c2:bd:17:82:e8:3c:f3:12:30:83:bb:da:87:17:51:
         48:76:e9:7d:44:e1:a7:42:95:7f:6f:bb:07:8a:22:c8:2d:c7:
         47:3b:7a:a0:7a:a7:95:cd:53:05:46:3d:19:59:11:66:ab:ce:
         e2:11:23:81:e6:ef:8e:c6:dd:49:53:c1:1e:8b:89:08:70:fa:
         8e:82:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:55:30 2025 by rpki-client