Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32332d3233203d3e20323634323733.roa
File:                     3133382e3131382e3232302e302f32332d3233203d3e20323634323733.roa (raw, json)
Hash identifier:          6EcGpornfegmu/h0I6n7VrIw6fiST36lPy9VjBTkOcA=
Subject key identifier:   7B:B7:D9:9E:C9:F4:51:53:27:27:BF:AA:03:42:E0:B6:7E:0A:8B:0D
Certificate issuer:       /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial:       1776DCF969C44EEE1E4CB3D6FF77EEADA1A4CA4A
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32332d3233203d3e20323634323733.roa
Signing time:             Wed 07 Feb 2024 12:58:39 +0000
ROA not before:           Wed 07 Feb 2024 12:53:39 +0000
ROA not after:            Wed 05 Feb 2025 12:58:39 +0000
asID:                     264273
IP address blocks:        138.118.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:76:dc:f9:69:c4:4e:ee:1e:4c:b3:d6:ff:77:ee:ad:a1:a4:ca:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
        Validity
            Not Before: Feb  7 12:53:39 2024 GMT
            Not After : Feb  5 12:58:39 2025 GMT
        Subject: CN=7BB7D99EC9F451532727BFAA0342E0B67E0A8B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:ce:81:31:f5:f0:58:4b:96:65:4b:66:8c:
                    f1:17:b4:30:dc:71:c4:7d:cd:89:34:4c:4f:2d:cd:
                    b7:f2:3e:2f:9a:06:23:dc:4a:9b:aa:45:13:ef:de:
                    2f:ab:5f:54:93:0d:c9:5b:59:7e:b3:0f:9b:60:42:
                    46:30:fa:d9:c2:c5:39:5a:7b:e9:44:5a:4c:a5:6f:
                    1f:44:c4:98:aa:bd:9d:32:a7:6b:2e:7d:99:09:ce:
                    71:ba:b6:28:eb:65:1e:95:ad:ca:3f:95:11:67:f7:
                    1e:53:34:6a:ba:a4:5b:ae:59:fd:90:4d:c6:75:5d:
                    c6:a8:26:4a:e0:5a:e6:ee:3f:35:f8:95:96:26:ae:
                    da:a4:36:40:d0:b7:00:53:13:7e:35:12:c6:88:ee:
                    61:aa:60:ec:ac:ad:4c:e8:75:aa:3f:b2:9d:1b:11:
                    39:d8:b2:4d:a2:07:f5:d1:f3:95:27:b2:0d:8d:53:
                    5f:ee:12:c3:b1:e0:1d:fc:3b:e8:db:06:0d:4f:8b:
                    d9:a9:0a:6e:b2:47:f0:16:03:72:5e:1e:c4:fe:3b:
                    ff:85:3e:ed:67:1c:18:f1:32:b6:f5:dc:48:ee:c3:
                    bf:b6:64:c3:e3:36:5a:9f:da:06:c5:3b:aa:51:dd:
                    12:61:e0:d8:cf:3e:ca:41:e6:77:aa:33:05:03:66:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:D9:9E:C9:F4:51:53:27:27:BF:AA:03:42:E0:B6:7E:0A:8B:0D
            X509v3 Authority Key Identifier:
                keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32332d3233203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:67:df:6e:6c:c4:e1:ca:37:3c:c6:81:68:19:7c:b0:f5:32:
         59:0c:e0:a1:77:fb:26:dd:3c:85:9e:f3:66:02:0e:20:85:54:
         0a:11:9d:04:9e:49:fa:e5:54:b6:b9:5f:e3:22:96:bd:b9:24:
         e5:ab:c8:1c:60:97:2e:ce:73:97:e4:aa:b0:95:d0:1f:d6:86:
         1e:2d:87:6e:d9:1f:a9:87:ec:13:b7:e7:3e:59:b4:8f:68:4c:
         2d:44:d4:f3:c4:04:82:67:7b:93:c7:78:6c:0b:3d:91:32:de:
         17:e1:00:0a:c9:4e:eb:0d:20:7d:c6:d8:4f:a2:f4:2d:52:bb:
         3b:c3:e7:26:0d:9c:68:f1:d7:d7:2c:12:b6:2b:ad:19:c3:e0:
         e0:5a:89:85:47:1b:7e:b9:c4:cc:fb:f0:ab:35:8c:e7:00:f4:
         43:af:f1:3c:63:6e:e4:a4:37:57:5e:c9:0b:8d:2e:d3:75:33:
         b3:89:b2:5c:ba:cc:0c:92:f2:98:b6:b9:19:14:47:d8:0f:9c:
         fc:c7:ca:27:96:75:18:88:60:0a:df:3c:90:d8:c8:f4:67:82:
         f0:9d:1c:63:1b:15:7d:09:aa:9a:cb:28:b5:c7:ca:b3:cb:02:
         9d:5c:4e:9a:bd:1f:01:2b:5b:7d:62:8c:82:27:ca:66:eb:85:
         b3:bd:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:33:02 2025 by rpki-client