Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32342d3234203d3e203631363936.roa
File:                     3133382e33362e3233322e302f32342d3234203d3e203631363936.roa (raw, json)
Hash identifier:          BXbjNzQ4lSfJ/oz4AsTTGMwD+vStEaeJt2YJLRZxKvs=
Subject key identifier:   D7:3A:FA:73:98:CC:7D:93:73:42:E9:D5:ED:33:71:E9:2F:8D:64:F9
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       651E65D1C903622A3DC8721D3CC10193FD89FA16
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32342d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:14 +0000
ROA not before:           Fri 06 Oct 2023 19:42:14 +0000
ROA not after:            Fri 04 Oct 2024 19:47:14 +0000
asID:                     61696
IP address blocks:        138.36.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1e:65:d1:c9:03:62:2a:3d:c8:72:1d:3c:c1:01:93:fd:89:fa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:14 2023 GMT
            Not After : Oct  4 19:47:14 2024 GMT
        Subject: CN=D73AFA7398CC7D937342E9D5ED3371E92F8D64F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:49:19:fa:b5:d5:68:8e:ea:3e:a5:b2:04:
                    fd:ab:1c:75:e2:67:c4:d6:dd:4d:9a:85:7b:d2:dc:
                    cb:0c:05:e2:7e:4a:41:68:3c:ef:91:43:79:5d:b7:
                    23:84:56:3e:ea:ba:5c:c8:b0:58:28:08:fa:fd:9a:
                    4c:a2:fc:0e:b5:c2:e7:19:6d:c7:f3:16:0c:88:81:
                    b9:1d:54:29:c8:5f:de:86:d6:38:7f:c1:70:0a:c2:
                    b2:30:e9:20:89:05:b8:d7:4e:df:5a:92:3a:f8:be:
                    16:ab:26:0e:8c:6f:82:8e:2d:7e:cc:a3:f7:d7:18:
                    e9:0e:8f:d3:8b:ea:84:62:21:70:83:f9:5f:14:19:
                    5a:bd:f0:1f:ec:66:df:1b:70:d8:4d:d4:a1:80:11:
                    b8:98:06:52:f9:2a:ad:34:14:1c:e1:9b:ed:b8:ef:
                    f4:55:68:a6:5d:fa:b6:88:c6:7f:e2:47:de:67:5e:
                    ca:02:3e:c5:da:9f:4f:96:3c:b6:38:7f:d2:af:ca:
                    df:13:1a:a2:58:84:23:ac:3f:58:ed:4f:a8:0c:a8:
                    ac:91:a2:09:23:e0:48:04:18:2f:d0:ec:27:3f:51:
                    2a:7f:25:d7:8d:7d:7e:34:20:b6:3c:92:d5:9d:c7:
                    07:20:ed:4e:5f:ef:e0:c5:20:e1:2f:77:b7:7d:d5:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3A:FA:73:98:CC:7D:93:73:42:E9:D5:ED:33:71:E9:2F:8D:64:F9
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32342d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:0f:4a:86:ef:fd:35:49:9a:75:03:c7:78:bb:91:ca:67:
         4a:08:d2:95:ab:82:be:f1:eb:2c:ad:a3:a7:c0:5f:37:c6:30:
         be:3d:30:dc:2c:f5:2f:ad:5f:18:07:79:c8:e4:1f:53:8f:a3:
         d0:55:d8:62:1e:97:82:51:b0:23:43:21:cc:c9:32:bd:39:cb:
         23:d5:d7:20:65:da:f9:71:a1:02:9d:4a:e0:74:e9:e2:9f:89:
         7c:b7:10:5e:a0:80:a1:4e:66:f7:6f:73:54:68:7e:36:10:88:
         ff:dd:23:ae:a5:f1:7e:8d:7a:16:5d:d0:99:19:d5:1f:dc:00:
         e8:4b:8d:bb:4a:28:3c:51:78:94:34:9d:fd:0e:92:a9:97:b9:
         2b:f3:ad:c2:19:3c:7e:dd:bb:13:01:78:e5:e1:a9:af:a4:4c:
         44:2d:4d:2a:07:6b:2d:11:b0:e0:0d:06:17:f6:6c:1b:e4:21:
         69:9a:92:e5:fd:ce:32:76:8d:e2:c6:19:8d:c4:4a:bb:34:df:
         a9:34:f3:3d:7a:98:bc:a2:14:00:be:43:b1:b2:b2:5a:ae:bb:
         7b:50:5a:79:c8:4d:58:fd:aa:e7:11:af:db:b1:68:49:a3:3a:
         64:9d:5d:82:d9:5a:8e:9b:cb:9d:e5:8b:66:15:7a:09:01:50:
         16:df:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:54 2025 by rpki-client