Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          v+RvGnMH67lZ8YsUQLQ0epGrcBBqUs6PxptTBB3ZI4Q=
Subject key identifier:   50:B9:97:90:B5:5F:50:79:F5:43:AE:96:76:4E:90:52:D1:10:60:40
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6DD3EB505332D391AA8C0F19B117C0EDC64A5D2C
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:07 +0000
ROA not before:           Wed 05 Mar 2025 23:55:07 +0000
ROA not after:            Thu 05 Mar 2026 00:00:07 +0000
asID:                     52653
IP address blocks:        138.122.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d3:eb:50:53:32:d3:91:aa:8c:0f:19:b1:17:c0:ed:c6:4a:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:07 2025 GMT
            Not After : Mar  5 00:00:07 2026 GMT
        Subject: CN=50B99790B55F5079F543AE96764E9052D1106040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:e4:92:0f:ac:f2:af:1e:e6:f6:13:b3:30:
                    d9:96:82:a9:be:4c:a3:4c:ee:42:4c:78:e9:dd:39:
                    a7:f3:1c:b3:5b:6f:02:69:cd:b6:90:ae:32:8f:4f:
                    de:2b:5d:4c:90:38:a7:c9:3e:57:a0:ad:04:b4:00:
                    95:00:05:a9:34:50:f0:22:b5:ce:91:56:86:6f:88:
                    ac:47:44:e6:b9:35:8a:3a:ea:5e:7d:e3:5b:34:4c:
                    2e:dd:98:c7:19:e5:34:44:62:7e:63:1f:86:4d:fc:
                    4b:ad:73:95:ae:2c:a3:a9:3e:c8:16:4c:39:0f:c8:
                    68:5c:3e:04:f8:3c:a5:61:58:5d:a0:ae:8f:9f:a0:
                    f7:26:c8:da:64:94:84:db:d8:d2:16:ed:f8:95:17:
                    ed:f9:09:e7:2c:cb:ea:62:ad:bd:e5:22:fd:2b:f8:
                    95:0c:0c:23:8c:84:f6:be:74:c2:42:39:0e:b5:bd:
                    71:46:ae:d4:ce:7f:3b:aa:80:9c:2d:74:2d:f5:6a:
                    e0:5d:94:1f:ca:70:0b:06:e3:67:79:fd:7e:21:3d:
                    99:f2:61:cf:36:cf:93:b0:a6:63:0e:98:9a:88:b0:
                    9d:fb:d0:88:6f:19:e9:83:fb:71:3a:35:78:12:ab:
                    50:41:67:28:93:49:7d:9f:9e:73:f4:d5:9e:56:68:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:97:90:B5:5F:50:79:F5:43:AE:96:76:4E:90:52:D1:10:60:40
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:61:53:74:7d:94:cc:5c:4b:61:2f:60:a6:26:03:1f:1e:17:
         fc:83:5d:6d:e6:bd:4d:f3:a2:12:5a:12:91:0d:e6:5f:91:79:
         ce:d1:22:44:dc:90:97:af:60:99:53:69:3f:34:12:a4:7d:24:
         42:f0:a6:e3:e3:a5:e4:6c:89:02:e4:65:5e:7a:e7:5e:fd:38:
         af:30:60:6f:d1:d4:0f:55:32:11:88:78:64:38:bf:7b:5c:24:
         31:f3:fa:e3:ab:b4:a4:d9:1c:c3:80:b4:b1:43:fc:61:a4:44:
         c9:ee:5e:4e:a5:28:79:c3:aa:97:1e:3e:81:65:ad:1f:c4:79:
         ea:e3:1d:9a:29:05:76:de:ce:3d:d3:c9:9b:21:10:06:fe:6e:
         a9:a0:5e:d6:e6:00:0f:90:09:4f:a0:3a:84:ce:2b:99:3b:b5:
         ee:d4:78:4b:9a:7e:e6:08:bc:7a:90:36:76:01:d6:84:43:7d:
         7a:96:95:da:e8:de:b3:5f:67:cd:8f:91:ae:1d:3d:b0:94:e0:
         21:ae:36:0d:86:57:7f:74:27:d6:c8:8d:9a:77:3f:29:89:95:
         6e:33:f3:cd:05:ff:a6:96:d3:46:e8:97:28:11:1f:af:5a:e2:
         8d:58:b4:ef:a3:e1:c9:c7:7e:6f:42:11:42:5d:06:b9:52:18:
         52:37:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:07:39 2025 by rpki-client