Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          Mgs/YpRufdliS51M3mqT3Hvwhdnf9ht/QFoRPnWEd5A=
Subject key identifier:   82:CD:42:25:F8:3F:B9:1A:E5:D9:47:34:87:D3:D3:39:29:4B:BA:FE
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       1BD616C4FFC9636CB176DD49447143AC5C22DE63
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time:             Thu 07 Nov 2024 20:40:15 +0000
ROA not before:           Thu 07 Nov 2024 20:35:15 +0000
ROA not after:            Thu 06 Nov 2025 20:40:15 +0000
asID:                     271724
IP address blocks:        138.117.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d6:16:c4:ff:c9:63:6c:b1:76:dd:49:44:71:43:ac:5c:22:de:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:15 2024 GMT
            Not After : Nov  6 20:40:15 2025 GMT
        Subject: CN=82CD4225F83FB91AE5D9473487D3D339294BBAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:85:ca:a6:c5:7c:77:94:9c:86:1a:95:ad:
                    64:de:ac:e5:10:56:25:60:8f:e3:5e:06:85:ff:1d:
                    df:b1:8a:4f:84:a5:85:09:1b:c3:00:43:12:a8:30:
                    1a:1e:a1:a2:12:00:63:f6:76:a9:83:2e:eb:3b:ac:
                    36:91:41:37:57:2c:ac:cc:59:9a:19:4d:65:b6:b8:
                    5a:d7:d6:dc:b1:29:fc:27:0c:3f:f0:ec:e9:f1:bd:
                    7c:37:80:cd:e4:41:09:6c:57:8d:2d:5a:3d:0d:7b:
                    50:14:53:53:ea:ca:f7:b6:04:f2:26:25:9a:7e:10:
                    9a:ba:49:6e:9f:58:4f:f8:f9:79:23:24:a4:a9:7c:
                    ff:5a:5c:78:b0:95:19:55:52:74:48:86:7b:0a:e0:
                    b2:f3:46:9e:93:58:55:b2:2d:67:94:3f:5b:f0:27:
                    7f:ac:55:86:71:97:2f:29:a0:2d:12:2f:3a:cc:9d:
                    34:e6:04:96:d2:9a:01:9b:5f:22:46:d1:77:79:67:
                    76:9f:cd:3f:15:9c:67:95:9b:14:72:bc:5e:82:15:
                    a8:e8:3d:ff:c8:85:13:de:70:65:fc:bf:16:dd:51:
                    34:64:ae:8c:06:43:41:c1:f3:12:e6:8a:31:34:3c:
                    cc:2f:c6:85:e2:b9:30:dd:82:e7:33:4d:54:25:a2:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:42:25:F8:3F:B9:1A:E5:D9:47:34:87:D3:D3:39:29:4B:BA:FE
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:74:63:b0:d3:95:2c:d7:65:4f:c0:c1:ea:c9:02:ec:15:a3:
         a1:36:b9:b0:21:dd:04:60:2e:17:27:bc:2c:6c:e3:dd:6e:52:
         4d:c3:18:8f:95:af:54:8b:7e:7c:7b:20:57:85:15:4e:72:a3:
         a7:f7:de:b3:a8:c4:a6:4e:27:3f:52:0f:db:ff:b8:8c:9d:b7:
         46:04:2f:54:fa:dc:c5:a8:0c:c0:ad:70:3d:6a:07:b2:d0:cd:
         cb:4f:5c:10:6d:d3:f3:15:c3:d8:1d:94:39:fb:e3:2f:c3:81:
         c3:c4:8c:27:a9:5f:77:66:9c:48:f5:c8:3c:7b:2a:23:d4:71:
         45:fb:a6:22:d0:8c:c6:1c:e4:5e:f3:b8:6d:f1:1e:89:68:d3:
         e5:b1:25:61:18:fa:1f:86:1a:96:01:b8:d8:c4:a3:9a:7a:f1:
         8e:d1:eb:08:48:93:1b:ca:f7:77:32:62:4b:a5:2d:59:da:4c:
         9d:d1:63:1f:76:02:a0:d0:42:4b:ac:84:c3:d7:1f:95:e4:bd:
         e9:5f:89:be:f3:47:66:3c:fa:29:f7:54:78:5c:58:b2:fa:2a:
         b4:69:af:e5:28:44:e2:97:ff:2c:a2:99:d4:41:05:d2:d2:83:
         48:22:d3:fa:60:8b:67:31:ec:b6:67:0c:be:af:e1:0a:ee:47:
         db:e5:a9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:16:22 2025 by rpki-client