Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133392e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          JQfvUMMBX2lqVaOoRYmKIQVa1xclDm1g6CUHPRCFejA=
Subject key identifier:   EB:49:7E:32:25:FC:41:1F:6A:54:A0:63:5C:E7:88:5F:DE:79:60:31
Certificate issuer:       /CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
Certificate serial:       454D0A63415D0E00F194DF217B2BB0C6F855C209
Authority key identifier: 4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 04 Dec 2024 03:40:27 +0000
ROA not before:           Wed 04 Dec 2024 03:35:27 +0000
ROA not after:            Wed 03 Dec 2025 03:40:27 +0000
asID:                     264550
IP address blocks:        138.0.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:0a:63:41:5d:0e:00:f1:94:df:21:7b:2b:b0:c6:f8:55:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668
        Validity
            Not Before: Dec  4 03:35:27 2024 GMT
            Not After : Dec  3 03:40:27 2025 GMT
        Subject: CN=EB497E3225FC411F6A54A0635CE7885FDE796031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:55:fc:39:60:0f:3b:99:76:03:58:63:da:
                    ef:01:58:ae:c3:40:45:30:ca:b2:ac:c0:6a:a3:8f:
                    49:a1:01:b6:ed:3f:2b:19:da:14:30:07:d5:5e:18:
                    b6:50:27:79:63:c6:af:ad:ce:44:41:c9:24:6f:f8:
                    0f:bf:16:cb:31:0e:76:63:f4:af:31:34:fd:af:f0:
                    d5:d2:5f:79:69:c1:72:2a:0b:b3:b5:8e:7a:b3:f0:
                    39:9c:88:67:9f:2e:cc:53:d2:46:7d:b3:4a:c1:d4:
                    e7:e8:ad:b9:98:6c:05:8d:48:93:46:cd:9f:38:1f:
                    18:2a:c9:48:f9:05:d1:7d:9d:b1:4a:69:8b:aa:34:
                    f7:9c:17:09:bf:14:08:ee:69:54:de:69:71:ab:18:
                    62:19:39:58:d7:07:0e:84:de:8f:94:bd:48:54:03:
                    ff:87:70:ec:d5:c5:fd:63:f1:7c:15:b5:06:a3:f0:
                    4a:48:31:5f:13:a9:37:36:f0:a9:02:cb:ea:92:22:
                    a7:51:65:80:25:81:83:fc:21:04:25:85:b6:e5:cd:
                    7b:60:02:3e:a8:7a:7a:8f:35:d4:77:cc:36:7d:b5:
                    a6:82:31:56:f9:1e:da:17:68:1c:7a:49:1d:70:ec:
                    77:3b:65:03:65:dc:a0:6e:3b:d8:bc:44:fe:ab:c0:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:7E:32:25:FC:41:1F:6A:54:A0:63:5C:E7:88:5F:DE:79:60:31
            X509v3 Authority Key Identifier:
                keyid:4B:3C:F0:6C:00:02:D4:0D:E1:ED:23:E6:F8:32:8E:9F:4F:5E:46:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3CF06C0002D40DE1ED23E6F8328E9F4F5E4668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:78:9a:c1:29:07:ff:68:16:b1:e3:58:b5:36:e9:88:d7:1f:
         3c:8f:51:e3:35:ee:68:92:24:ff:19:0e:1f:2a:2a:72:e2:1a:
         e0:35:59:8c:0a:d4:37:a3:f8:29:ca:7f:6d:8c:59:5c:1b:d9:
         ab:65:de:52:e6:47:9f:7e:53:01:50:1a:fb:87:9b:dd:9a:72:
         1d:f9:0c:c3:a7:35:32:7d:19:9d:fb:0d:91:05:3a:50:0c:7e:
         d7:6e:0f:28:41:5e:5d:44:fc:54:72:7f:83:ce:30:2f:db:61:
         0d:e3:ac:d1:40:77:36:99:b8:36:fa:f1:3a:e7:3a:cd:cf:1a:
         ad:37:70:28:b9:c7:a6:c7:60:00:e6:3b:b8:2b:a4:4d:b1:3c:
         1e:f9:32:a3:d9:d4:28:28:80:9a:de:98:41:d1:c2:a9:7f:67:
         83:1a:27:cf:e8:f1:4e:df:fe:22:e1:50:ea:d3:d1:78:67:76:
         d1:80:ed:de:84:0f:1e:90:30:e6:b4:bd:6a:19:08:63:a0:c5:
         ff:ba:df:1f:4c:48:6c:86:d3:76:d6:9e:2d:bf:9d:65:52:14:
         11:6d:b8:f1:fb:dd:71:93:33:7f:a7:bd:c4:d6:cd:a2:55:ae:
         da:44:63:78:e3:5f:c0:1c:32:63:82:c8:0f:08:cd:6c:5d:b8:
         bb:0d:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:32:08 2025 by rpki-client