Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          SaPAjUh+nvfIIeRagSFkdWQoxMBpbbtqRUn8mcG/0DE=
Subject key identifier:   3C:5D:9C:69:C0:80:05:A3:54:E7:C3:1D:B0:D9:03:F5:ED:58:6D:2B
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6F1F6121D6FF56A44DB59FA576EEA1860E9EFC23
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:06 +0000
ROA not before:           Wed 05 Mar 2025 23:55:06 +0000
ROA not after:            Thu 05 Mar 2026 00:00:06 +0000
asID:                     52653
IP address blocks:        138.122.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1f:61:21:d6:ff:56:a4:4d:b5:9f:a5:76:ee:a1:86:0e:9e:fc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:06 2025 GMT
            Not After : Mar  5 00:00:06 2026 GMT
        Subject: CN=3C5D9C69C08005A354E7C31DB0D903F5ED586D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:70:65:eb:21:6a:cb:21:a9:e4:57:2a:87:
                    de:81:3f:f9:89:3b:97:86:0d:58:db:94:3d:13:46:
                    d0:d2:9a:25:50:e4:59:86:47:f5:7c:39:4d:a9:a5:
                    63:99:12:8a:89:2d:a9:2b:fe:56:22:c4:61:e0:6a:
                    1f:f3:8a:35:bc:07:23:4a:96:7e:d4:bd:0c:84:d9:
                    20:75:11:4d:cc:8d:e8:e2:17:ff:a7:23:9a:29:51:
                    d9:e6:ab:05:bc:a7:60:5e:af:41:a8:ab:72:03:48:
                    b2:5c:95:92:0a:07:02:1c:16:0d:b9:28:ed:f7:4a:
                    08:bf:83:db:2e:c0:5f:80:14:6b:39:03:f4:b8:37:
                    1f:0f:d2:57:9e:d5:71:b1:a7:cc:02:66:29:93:18:
                    7a:fe:de:f3:1c:1c:8d:03:4b:1d:a9:4b:56:8c:94:
                    a8:f7:51:21:f6:1e:3f:b8:27:dd:44:67:62:0a:f6:
                    4a:3b:36:33:f9:28:ec:19:04:85:5f:9e:f7:70:5c:
                    90:02:96:a4:5d:21:91:f3:a5:fd:b6:c0:1a:40:e1:
                    e3:18:2d:5d:67:de:47:1e:dc:96:d0:d4:45:49:fe:
                    83:4b:ca:3e:20:1a:53:0a:21:e0:8c:d2:f1:9d:b6:
                    e0:b2:c0:a3:79:bc:90:7e:16:06:0b:d6:4d:fc:2b:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5D:9C:69:C0:80:05:A3:54:E7:C3:1D:B0:D9:03:F5:ED:58:6D:2B
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:54:00:fb:e3:4b:80:79:20:ee:1c:6b:8e:23:0c:c8:03:68:
         b8:4c:01:1a:a6:0b:bd:fe:24:b9:fe:81:9b:dd:4a:76:b3:65:
         d4:81:cf:5d:46:01:d5:f9:56:b7:1f:86:9c:6e:42:31:1e:7b:
         7d:f1:2d:a6:80:b7:a7:a8:6b:5a:10:26:19:6a:2a:a9:06:09:
         1a:85:64:d9:6c:3e:08:21:f7:1f:db:38:30:7a:35:ef:fb:fa:
         d7:24:5a:2d:dd:99:9c:6a:de:e2:99:ba:4f:b9:6d:a2:40:6c:
         94:cf:b3:fb:4c:08:7b:c5:54:fc:32:ff:53:d1:b6:ac:03:fe:
         4d:38:fc:aa:0e:c1:0b:f2:7f:f9:1b:51:5e:cb:dd:5a:48:22:
         80:6b:f4:b5:13:f1:97:9d:41:94:80:e9:cf:b8:10:45:21:60:
         86:fd:71:33:e9:4e:66:6e:3e:bd:d7:aa:60:8a:db:49:5c:a1:
         5b:4f:50:59:16:5a:a3:98:28:b6:f6:d1:43:40:93:75:c5:e2:
         c0:4d:a9:6b:52:f4:8b:91:3a:4a:27:1b:50:9f:dc:fa:c0:88:
         0b:c5:91:9e:bf:c6:22:92:72:75:03:c0:48:e6:ed:9d:9d:d9:
         07:7f:2f:81:df:67:44:8f:41:fe:60:c4:cf:56:0a:5e:f9:f7:
         c7:57:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:08 2025 by rpki-client