Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa
File:                     3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          RT1elFPvQqeRWaijfqEDs8IDYRfcO76EvCSEuzFRGJs=
Subject key identifier:   72:6C:57:8C:19:D7:6C:52:FA:8C:D9:7A:28:DC:28:F6:60:99:3D:21
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       6C77AC7F3A6B56C600B0FD747961CEA7E5C23988
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa
Signing time:             Sat 11 Mar 2023 00:57:03 +0000
ROA not before:           Sat 11 Mar 2023 00:52:03 +0000
ROA not after:            Sat 09 Mar 2024 00:57:03 +0000
asID:                     53181
IP address blocks:        138.255.140.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:77:ac:7f:3a:6b:56:c6:00:b0:fd:74:79:61:ce:a7:e5:c2:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 00:52:03 2023 GMT
            Not After : Mar  9 00:57:03 2024 GMT
        Subject: CN=726C578C19D76C52FA8CD97A28DC28F660993D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:76:17:fe:8a:93:b3:e7:f7:0b:6c:1d:98:
                    9d:a4:3b:a2:d2:88:8d:3e:84:1d:1b:cf:fd:ad:08:
                    8e:77:b6:96:d4:e6:bb:df:40:04:24:8e:3e:55:5d:
                    e4:62:33:ef:14:6f:ed:c1:bf:28:0d:7a:6c:92:d8:
                    e2:10:72:fa:65:7d:96:2d:d9:dd:06:01:95:08:1f:
                    74:91:e6:7b:ab:ce:c0:9f:a6:94:40:01:39:36:f0:
                    81:49:ae:59:0d:8e:98:3d:59:29:d8:b1:29:b0:4a:
                    d5:83:59:e8:50:bc:cb:f6:2a:38:e4:98:c4:78:60:
                    bb:5d:fd:07:a3:a4:47:92:17:b1:01:fa:17:5d:38:
                    55:5a:9c:cd:c2:f9:fa:21:69:7f:c9:6f:d2:ea:59:
                    c1:90:7f:81:1e:a9:4d:2a:26:ec:a5:89:5f:84:6e:
                    d5:1f:ab:b4:da:f7:b7:cc:62:20:85:e7:42:a8:29:
                    fa:ff:0a:95:da:95:6c:4f:37:44:15:9f:d1:1f:0d:
                    2e:46:dc:6e:a1:6f:de:53:47:6a:22:b8:d8:51:d5:
                    a9:e3:94:e5:8e:3b:33:2c:2f:8a:0d:45:be:cc:1a:
                    3e:53:8a:f2:e4:69:d3:89:e2:7b:66:ac:c1:0d:61:
                    ba:c5:63:f8:c7:0d:ec:82:19:1c:36:5e:dd:bc:9a:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:57:8C:19:D7:6C:52:FA:8C:D9:7A:28:DC:28:F6:60:99:3D:21
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:49:52:da:76:1a:68:6e:ec:83:51:a8:1f:71:63:41:54:
         f9:eb:a7:fd:d7:ce:1e:e3:24:8a:fb:9e:07:50:07:ba:d9:f9:
         a5:4d:5e:bd:3e:38:47:38:bb:1e:90:c7:40:1b:1e:fa:62:e1:
         ae:75:63:7c:99:bf:56:ac:19:3a:de:57:35:ba:dc:3e:a6:56:
         85:b3:21:3d:6b:be:40:05:42:ad:88:f0:35:c9:30:ff:fd:08:
         ae:d6:dd:b2:a2:3d:11:81:2d:5e:05:f6:e8:aa:83:46:09:f4:
         62:ab:37:ef:01:0e:ad:fa:95:ff:5a:08:12:3b:ee:2f:e7:a1:
         15:18:90:9e:a8:73:8d:3d:60:93:7c:47:f4:f8:6a:23:98:30:
         67:b9:4f:c8:33:ff:90:1b:e9:d3:da:fe:86:47:84:95:50:c1:
         9a:e0:ae:f4:e9:28:25:3d:e1:67:f2:cf:25:52:35:58:e5:1d:
         a8:67:28:9d:42:7c:d1:e9:1c:23:01:8f:ff:1c:a7:73:d3:49:
         0c:04:35:78:91:8e:7d:30:f6:ff:d5:4e:2c:d9:39:15:54:d9:
         de:9f:1a:4c:16:f2:3f:fe:21:12:53:b2:17:96:b6:17:44:06:
         c6:38:46:e8:73:c3:e1:bd:fc:83:fe:b3:f7:b7:ca:ec:c8:93:
         4b:48:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:06 2025 by rpki-client