Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32342d3234203d3e20323634323733.roa
File:                     3133382e3131382e3232322e302f32342d3234203d3e20323634323733.roa (raw, json)
Hash identifier:          W5wx2FSA2pnk+5k9WY6zhFTqiDTd80bDFRi2NaGpmcA=
Subject key identifier:   10:83:E9:ED:4B:BA:8C:65:1C:11:5E:19:D7:CF:0D:26:77:A8:D9:18
Certificate issuer:       /CN=447EECD24927FECC2F1795CABFFCF5BF2230A2C6
Certificate serial:       0EEAE5858D28147395901E00253F42BFD6FFE416
Authority key identifier: 44:7E:EC:D2:49:27:FE:CC:2F:17:95:CA:BF:FC:F5:BF:22:30:A2:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32342d3234203d3e20323634323733.roa
Signing time:             Wed 16 Mar 2022 13:00:16 +0000
ROA not before:           Wed 16 Mar 2022 12:55:16 +0000
ROA not after:            Wed 15 Mar 2023 13:00:16 +0000
asID:                     264273
IP address blocks:        138.118.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ea:e5:85:8d:28:14:73:95:90:1e:00:25:3f:42:bf:d6:ff:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447EECD24927FECC2F1795CABFFCF5BF2230A2C6
        Validity
            Not Before: Mar 16 12:55:16 2022 GMT
            Not After : Mar 15 13:00:16 2023 GMT
        Subject: CN=1083E9ED4BBA8C651C115E19D7CF0D2677A8D918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:20:ba:74:30:01:20:05:d7:f9:12:0b:12:63:
                    d1:dd:1e:5a:57:a9:c9:44:f1:ff:c8:1d:90:f7:2f:
                    0b:6b:ed:10:7a:fe:48:3b:a5:ac:5f:6a:b0:5b:60:
                    06:af:a0:6d:dc:6f:b8:1f:26:23:97:61:9f:0f:a4:
                    19:3d:50:31:a9:a5:6d:a1:f7:e2:4a:32:d7:47:2d:
                    0e:7d:a4:48:aa:ef:91:31:48:cb:56:ca:1e:1f:34:
                    a3:31:64:79:2c:1f:57:bf:f4:16:33:7d:44:ee:62:
                    a3:8e:15:aa:92:b6:49:94:f7:f3:dd:f0:7f:d3:8b:
                    b7:f7:b3:c2:b7:b0:57:7e:d6:40:f2:f7:2c:2c:d8:
                    0e:b0:a9:2d:81:cc:91:bc:25:58:fa:0a:87:b3:0c:
                    d9:8f:b9:1a:d7:43:59:a2:38:2b:4f:7f:c2:e4:d1:
                    4f:ba:b0:8d:b8:77:96:b2:a4:fe:13:b8:ad:2d:73:
                    70:3c:01:8c:59:90:9d:f8:48:08:4d:b7:f4:5e:19:
                    89:83:eb:cc:7d:fc:30:d8:69:44:64:92:95:99:d9:
                    ac:7f:16:91:91:16:f7:f2:09:53:7f:ce:05:bd:77:
                    70:37:b7:bf:dd:b5:fd:b3:94:85:e8:69:64:0a:d6:
                    47:0a:9a:75:90:8f:5c:b1:da:4c:ed:e7:91:21:50:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:83:E9:ED:4B:BA:8C:65:1C:11:5E:19:D7:CF:0D:26:77:A8:D9:18
            X509v3 Authority Key Identifier:
                keyid:44:7E:EC:D2:49:27:FE:CC:2F:17:95:CA:BF:FC:F5:BF:22:30:A2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232322e302f32342d3234203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:bd:35:01:91:e7:f5:46:5d:e0:1c:33:4a:7b:27:37:39:
         fc:36:0b:23:61:ea:37:8a:68:a2:42:9a:47:5c:e1:a5:f5:60:
         1d:1e:a4:0f:89:49:d0:5d:71:0e:e7:24:d3:31:30:ec:3d:fa:
         80:8d:43:e2:6d:46:66:13:32:03:c7:8f:9b:99:d1:d1:2a:50:
         9d:90:6f:f9:d2:6a:15:d1:27:eb:4f:82:25:d4:38:06:f0:f9:
         90:a0:84:27:e8:41:cc:ea:f9:dc:cb:17:ba:5e:b0:a2:05:5b:
         00:03:ae:ff:06:d0:56:a8:cf:64:a2:80:76:df:2f:93:4c:6c:
         da:ff:87:06:66:06:8a:86:cc:c7:bd:81:a4:a0:cb:70:ce:7e:
         9d:25:19:e0:6b:62:bf:b7:26:02:6b:5a:6e:1e:d8:5b:76:c9:
         b2:8c:5f:c2:10:7c:c8:88:ba:24:f8:c4:16:6e:64:68:76:17:
         53:02:da:e2:6c:eb:66:55:3f:86:8f:c9:c0:23:33:07:da:d8:
         d7:ab:61:2e:e0:2b:fc:8f:65:4a:d4:67:c0:f1:2d:5c:71:64:
         68:9d:d4:d5:27:51:20:65:56:1a:59:e7:7b:7a:5d:ed:a5:7b:
         13:ed:03:a7:05:4a:86:ea:b3:02:27:98:53:e1:8c:6c:c6:91:
         7b:64:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:35 2025 by rpki-client