Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133372e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          7VtnaWazH/jejBHgY8hZYlcR6QAlSO2nmN7KWtml58A=
Subject key identifier:   DE:97:E3:72:B7:78:3F:C2:F3:80:64:81:4A:94:61:0F:D0:B3:7D:5B
Certificate issuer:       /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial:       38CFB3C978F8E58ADEABC6054A2E6F45B758BC00
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 04 Dec 2024 03:41:25 +0000
ROA not before:           Wed 04 Dec 2024 03:36:25 +0000
ROA not after:            Wed 03 Dec 2025 03:41:25 +0000
asID:                     264550
IP address blocks:        138.0.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cf:b3:c9:78:f8:e5:8a:de:ab:c6:05:4a:2e:6f:45:b7:58:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
        Validity
            Not Before: Dec  4 03:36:25 2024 GMT
            Not After : Dec  3 03:41:25 2025 GMT
        Subject: CN=DE97E372B7783FC2F38064814A94610FD0B37D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:6c:97:0b:6f:86:d7:7a:b1:6c:7d:5f:4f:
                    ed:b6:fc:25:5f:e3:eb:bc:9e:3f:47:e5:b4:12:1a:
                    7d:3b:6c:a0:ed:c6:e5:09:d2:84:53:ae:cf:67:f9:
                    32:8c:fd:11:0e:bc:90:29:97:84:36:ba:e2:23:78:
                    4e:0c:7d:12:f0:9e:ec:16:ef:c7:e7:2b:f2:8f:5e:
                    a9:20:f6:40:04:59:5c:23:a8:0c:1c:ca:d9:c3:02:
                    50:78:6c:13:9e:d2:f4:a3:a8:7c:2c:7b:ed:65:17:
                    cb:34:33:83:fb:f2:95:13:7d:63:9a:4e:96:14:fc:
                    3b:b2:56:7a:55:b5:00:d1:26:16:68:97:77:42:e9:
                    8d:7f:e8:b3:69:a0:e9:7d:4b:84:15:1c:db:a3:b1:
                    45:b4:75:f4:43:0e:0c:43:91:ba:13:49:e4:cc:69:
                    d7:19:6a:0a:0c:15:10:ad:a1:f4:0d:6f:d2:5c:5e:
                    52:94:81:bf:2e:85:c8:2e:15:e4:9a:99:ec:5e:a8:
                    df:37:b4:33:6a:ac:ee:9d:7d:65:2c:56:90:b7:02:
                    ed:cb:1c:cf:8b:4f:c8:17:d7:31:d2:fe:02:42:b1:
                    f0:bf:31:5d:7e:9c:70:ae:04:a7:45:d9:7e:3f:e4:
                    82:41:72:37:51:b1:9e:9b:9d:1a:ef:ee:4d:3c:da:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:97:E3:72:B7:78:3F:C2:F3:80:64:81:4A:94:61:0F:D0:B3:7D:5B
            X509v3 Authority Key Identifier:
                keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133372e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d1:67:e4:91:2e:40:b8:d3:8c:c5:90:74:80:22:f3:94:7a:
         c6:e5:18:1d:ba:62:92:e1:6c:5d:3f:55:be:c9:4f:95:c8:39:
         c5:5a:0b:0e:e3:e2:c1:5b:44:7f:6c:e0:9c:58:40:85:54:20:
         fb:05:cf:70:33:6b:ed:d2:c7:cd:b3:f4:93:f8:c0:24:fa:5b:
         70:db:94:a5:65:40:55:fb:50:52:54:b9:0c:6d:5a:f3:73:b7:
         4f:6d:1b:25:89:14:cf:ae:2e:75:09:c5:d0:7d:98:e9:02:4c:
         99:57:dd:07:5e:40:97:38:74:52:4a:f5:d4:41:62:b9:31:78:
         23:1d:25:2b:0b:1a:48:9e:28:74:60:01:64:2b:e9:5a:82:4d:
         5b:89:f2:04:6f:41:ac:15:01:90:ac:7c:02:38:f2:e1:1a:c5:
         11:d0:09:e6:4f:95:6f:cb:2f:7e:3a:3a:e2:20:91:36:c7:4b:
         d5:84:4a:46:51:5a:e6:44:64:a0:92:89:65:c8:99:bf:f3:ab:
         2b:58:b6:da:d5:27:46:4d:cc:09:bb:1f:95:55:78:62:fa:b6:
         40:8c:7f:a9:ab:3d:07:16:01:ed:d5:b1:f1:ca:a1:ec:41:79:
         bc:3a:a3:2f:28:ba:15:d8:2d:58:6b:f6:df:ec:92:13:79:36:
         dc:e0:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:32:17 2025 by rpki-client