Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          Sf1M49WdPGH7OTh03U4QMZGilll29qfcH+56S6VSa0s=
Subject key identifier:   9C:5E:3E:DE:AF:E6:DA:93:9D:E7:A3:5E:65:92:3C:C8:98:52:27:CE
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       6BC9C48F3B5AA5617EEE86FBCF4C67B57B06EDC2
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:20 +0000
ROA not before:           Wed 20 Mar 2024 18:52:20 +0000
ROA not after:            Wed 19 Mar 2025 18:57:20 +0000
asID:                     263989
IP address blocks:        138.255.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:c4:8f:3b:5a:a5:61:7e:ee:86:fb:cf:4c:67:b5:7b:06:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:20 2024 GMT
            Not After : Mar 19 18:57:20 2025 GMT
        Subject: CN=9C5E3EDEAFE6DA939DE7A35E65923CC8985227CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:0a:da:f8:1d:56:86:e9:69:a9:1a:2e:dc:
                    2d:2e:35:bc:b8:d0:89:a7:57:36:c4:1e:ae:c1:b0:
                    7a:0b:3c:55:dc:e4:57:3d:8c:ba:22:71:60:e0:d6:
                    84:20:c6:81:ae:25:9a:31:32:e4:04:50:09:c0:df:
                    7c:fc:6d:7f:a4:88:d2:6c:94:b7:31:a2:e9:64:ea:
                    7b:20:7a:80:60:8a:0a:8c:f7:ad:93:eb:e8:d0:fd:
                    3f:5b:7c:ee:ed:b9:a1:fc:22:6c:54:a8:76:a2:c1:
                    6c:f4:10:e8:29:71:00:c7:71:0b:6b:9f:da:b4:c8:
                    45:43:61:fe:c7:a7:ca:e9:21:27:84:af:e6:23:f0:
                    cd:74:70:50:1c:9c:5d:02:6c:20:ab:5d:e3:b8:8e:
                    79:ee:f8:22:27:cf:90:e0:5b:82:2a:e7:a2:b9:36:
                    93:ab:60:72:dd:a0:2c:94:b0:6a:9f:d9:b5:16:16:
                    0c:3c:14:a7:52:50:18:fd:e8:63:0a:b4:ce:a6:82:
                    04:89:47:5a:37:82:c8:f6:50:8d:13:c0:3b:e9:ed:
                    07:1c:6c:4d:a7:da:19:a1:0e:38:a6:55:f5:ea:f7:
                    88:df:3e:1b:7a:b3:cf:7f:e0:49:e1:47:1b:91:29:
                    76:69:bc:f5:b4:76:c5:26:3b:62:83:05:e2:ae:a5:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:3E:DE:AF:E6:DA:93:9D:E7:A3:5E:65:92:3C:C8:98:52:27:CE
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232362e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:2b:7e:c0:32:80:fe:ed:34:5f:59:3c:71:09:e8:59:72:
         9b:c5:22:5e:f8:8a:61:eb:2a:98:80:7c:b0:17:2d:39:e3:9a:
         61:d6:3d:d4:e8:8c:ef:e4:2e:db:12:d4:da:85:22:b3:9c:56:
         38:2a:88:c2:1c:95:5a:01:90:dc:8c:72:6e:18:79:24:c9:35:
         c2:aa:32:43:48:8f:58:a9:1d:34:92:d6:9d:dc:b5:db:7d:a3:
         0d:f7:16:26:98:25:d9:dd:74:fc:2b:b4:2f:5a:79:04:8b:d8:
         df:e1:a6:48:d3:fe:a2:79:d0:ac:39:49:13:eb:b1:05:9c:78:
         1d:eb:c2:e3:60:c3:0a:eb:63:97:12:f3:36:32:d1:b7:29:b8:
         38:68:56:92:3f:77:b5:c2:a2:bf:46:86:6e:59:92:03:41:b3:
         79:1f:cc:60:dc:e9:20:af:18:af:16:3a:ff:9d:5c:e0:96:43:
         1f:1d:7d:9e:ee:db:28:c2:b2:8b:11:00:9e:6d:ef:46:1a:a9:
         29:78:04:3c:30:b5:52:4b:5f:a3:ca:52:a1:89:7c:98:50:1d:
         f2:bc:df:7a:2e:ce:38:f3:7d:7b:c5:3e:c4:be:a1:2c:c9:e4:
         cd:91:b0:ac:94:a5:b0:94:69:21:39:33:e0:1d:3c:74:ce:84:
         fc:47:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:36:43 2025 by rpki-client