Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32332d3233203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32332d3233203d3e20323633393839.roa (raw, json)
Hash identifier:          lwYdot4I0uQdqsgc0n455rTQJyugg0yX52zggCQ56yQ=
Subject key identifier:   12:4C:28:55:14:A3:FF:6A:8B:30:E4:9F:58:F7:35:CF:0F:9B:65:C4
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       3B2C46C019E81EB6B40E2B505EB2EF81F1B5B9BE
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32332d3233203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:37 +0000
ROA not before:           Wed 05 Mar 2025 19:27:37 +0000
ROA not after:            Wed 04 Mar 2026 19:32:37 +0000
asID:                     263989
IP address blocks:        138.255.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2c:46:c0:19:e8:1e:b6:b4:0e:2b:50:5e:b2:ef:81:f1:b5:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:37 2025 GMT
            Not After : Mar  4 19:32:37 2026 GMT
        Subject: CN=124C285514A3FF6A8B30E49F58F735CF0F9B65C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:69:5e:7d:25:7a:78:6d:79:36:f9:24:ec:
                    3d:e8:d5:7d:05:82:01:66:05:02:cf:13:f4:96:49:
                    e1:9a:43:ce:bb:a9:d3:0d:69:51:45:49:97:fe:26:
                    a4:42:32:0e:29:d2:25:5a:16:f2:1e:54:f4:5e:01:
                    cb:30:a7:67:9a:12:0c:f0:e9:6b:c1:61:e6:53:62:
                    e5:23:3d:da:8a:4b:f7:35:86:1d:6b:f7:3e:08:52:
                    ba:7e:60:1c:6c:e7:d6:42:a2:fd:4e:6c:71:48:99:
                    08:b7:93:f1:47:17:cd:ab:c6:bf:44:60:50:a7:09:
                    0e:2a:e7:37:9d:ef:ac:e1:49:f8:28:10:ac:56:a4:
                    10:61:27:61:bc:0e:7c:99:02:c4:ae:a5:f2:9f:17:
                    71:68:dc:e4:5d:62:91:1e:37:15:74:04:0b:b6:2b:
                    75:82:f1:b2:bc:49:68:08:ad:5c:8a:05:6d:fb:e3:
                    49:2d:2a:26:96:bf:85:fe:c0:ab:15:52:a6:89:85:
                    48:39:b6:e6:c7:86:6b:a3:c2:1a:86:6d:5a:44:a0:
                    26:76:b7:1a:aa:3b:55:6b:5b:68:42:88:2c:38:2d:
                    ad:a3:3a:33:1a:95:ac:19:9b:b7:5a:64:29:e5:ba:
                    e5:c7:4c:9a:71:86:b3:0b:50:ac:96:a6:ee:ec:7e:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:28:55:14:A3:FF:6A:8B:30:E4:9F:58:F7:35:CF:0F:9B:65:C4
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232342e302f32332d3233203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:c6:d3:7d:69:a4:fb:30:76:0e:6c:3f:f0:20:cf:3c:2c:
         f6:3b:7a:40:f5:ff:86:57:b6:aa:97:05:88:6a:b2:0c:cd:b3:
         3b:65:06:82:11:e9:a8:d4:0f:e5:dc:4b:72:d8:b5:a6:81:c6:
         6b:e9:db:fa:c5:f4:81:ab:9b:9c:23:c1:9f:4f:12:74:dd:d5:
         cc:da:8d:35:3c:44:21:f9:e1:7d:a3:9e:d9:4e:d5:a7:70:6b:
         88:98:8d:89:7a:51:51:3f:04:7a:81:66:08:e1:41:2d:c1:ed:
         60:cd:00:e7:85:f6:d6:e5:ba:3d:4c:5d:ab:35:9b:ee:48:85:
         6d:93:29:9c:a1:2f:be:5a:3b:41:10:5e:30:b4:0e:de:dc:e6:
         fa:91:51:77:e7:b8:e8:45:ca:07:94:48:84:b7:a6:d4:29:23:
         a0:82:0a:17:97:6a:ba:dd:7e:32:8e:8a:96:45:ca:c7:82:d8:
         d2:4e:d8:31:f8:12:80:62:15:4a:be:34:f0:f4:1f:1d:23:a8:
         0f:f2:f1:0d:7e:57:11:24:70:d1:ad:63:1c:a7:eb:a0:60:57:
         41:70:1a:87:da:77:37:d8:d3:e2:ea:4e:e0:7e:48:0a:ac:36:
         0a:7a:7c:ec:39:b3:91:26:80:e3:dd:00:81:35:12:a6:bf:b4:
         8f:57:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:00:49 2025 by rpki-client