Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa (raw, json)
Hash identifier:          BRk8j0YxkCD+BKoHI5cAijf0LXk6ksYIBMKpHjzphRE=
Subject key identifier:   81:28:47:9A:C0:1B:42:A8:64:3E:6A:44:35:44:BA:44:F9:1E:77:5B
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       628E34BD56FF1C362372DFB3225C68F1DB3CBE85
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:38 +0000
ROA not before:           Wed 05 Mar 2025 19:27:38 +0000
ROA not after:            Wed 04 Mar 2026 19:32:38 +0000
asID:                     263989
IP address blocks:        138.255.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:34:bd:56:ff:1c:36:23:72:df:b3:22:5c:68:f1:db:3c:be:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:38 2025 GMT
            Not After : Mar  4 19:32:38 2026 GMT
        Subject: CN=8128479AC01B42A8643E6A443544BA44F91E775B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:9d:00:9b:43:74:96:3b:49:53:eb:28:7c:
                    69:67:7c:0a:dc:82:5b:2a:db:bb:13:43:a8:54:d2:
                    98:4f:64:dc:10:75:50:ae:49:22:13:10:a7:fb:cb:
                    9d:2a:7d:b2:99:9b:b8:7d:18:fe:32:3e:dd:05:e0:
                    77:4c:fe:0c:97:df:c7:00:ff:71:1c:63:da:47:53:
                    00:3d:4d:5f:0d:f0:99:5e:69:96:f8:32:44:0b:1c:
                    18:32:c2:97:b2:42:45:ce:d5:b4:cc:84:ed:6c:76:
                    ab:fa:0d:f4:01:18:c2:93:38:83:d5:00:10:31:1a:
                    16:8d:27:ab:fa:3d:c3:85:08:4d:50:53:77:65:1c:
                    83:90:7d:d6:bd:f2:84:42:aa:87:2a:6c:42:d1:ac:
                    60:75:97:94:31:ca:cc:9c:92:66:36:83:f7:ff:50:
                    61:1d:57:57:e7:88:6f:14:bc:a8:d6:0d:bb:33:9a:
                    db:53:fa:74:26:01:dc:9e:6d:4f:33:09:c9:b5:b8:
                    84:11:5a:df:7a:88:38:fa:7a:0f:5d:cc:fe:47:48:
                    7b:4c:62:40:b0:72:a8:0a:9f:cb:24:00:ca:3b:c4:
                    3a:0b:b6:3b:11:82:f3:7e:b1:52:02:22:15:e8:a7:
                    c7:f8:55:6e:a1:65:93:b8:aa:7c:1d:c9:9e:19:b2:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:28:47:9A:C0:1B:42:A8:64:3E:6A:44:35:44:BA:44:F9:1E:77:5B
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:9f:f7:0b:3d:4b:9d:a0:73:71:1a:a1:4f:86:08:12:3a:
         13:98:d6:ee:84:f1:a1:68:74:08:1d:3e:20:31:ec:19:d2:fc:
         eb:9b:07:da:f2:29:87:4d:9a:fe:3d:02:bb:6d:16:3d:38:3c:
         02:a3:03:16:ba:5c:3e:35:46:db:e9:4f:70:d0:a1:27:5a:02:
         af:e8:d1:79:ef:04:b2:17:0e:d2:17:ee:e7:7f:3c:ef:06:61:
         fd:7a:06:62:c9:f1:fa:3e:22:b4:f0:6e:d3:40:6b:92:23:bf:
         68:fb:0f:1b:f2:55:8f:58:dc:d5:c0:57:e8:62:0b:0b:08:0c:
         a2:cf:f9:30:e0:f7:f4:1d:91:d4:5b:4d:d9:59:65:5d:cc:9f:
         0b:64:94:3f:c9:45:49:7c:f4:a2:0d:c0:f4:c6:e0:f1:48:e3:
         c3:39:60:d7:5c:eb:63:3b:68:67:53:dd:5c:40:b1:c8:66:66:
         49:f5:02:32:7f:0e:8a:49:e2:34:ec:f5:cc:5d:61:a5:6a:a9:
         f8:ac:3c:34:48:4c:7f:d0:fa:70:f0:47:95:45:82:43:19:41:
         35:dc:e0:13:77:d1:0a:e6:7e:13:ee:b9:8f:c7:5e:d6:c3:cc:
         86:87:5f:d2:3b:9d:c0:d4:a8:23:d2:1b:05:38:2c:76:a8:63:
         0b:4d:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:00:44 2025 by rpki-client