Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          LhAJWDQoMwFGr7PpWPD9gDx8VjWRpw6m+jjOyd5+s1w=
Subject key identifier:   7B:DD:D2:BA:31:2C:CE:C3:E0:2A:05:E0:05:E6:31:7A:0E:10:27:93
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6133670B96B71F3A16571CCD3513B298D5927A74
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:07 +0000
ROA not before:           Wed 05 Mar 2025 23:55:07 +0000
ROA not after:            Thu 05 Mar 2026 00:00:07 +0000
asID:                     52653
IP address blocks:        138.122.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:67:0b:96:b7:1f:3a:16:57:1c:cd:35:13:b2:98:d5:92:7a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:07 2025 GMT
            Not After : Mar  5 00:00:07 2026 GMT
        Subject: CN=7BDDD2BA312CCEC3E02A05E005E6317A0E102793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:7b:fc:e9:99:09:8d:e6:ae:0e:49:19:f0:
                    68:b0:d7:0f:8e:1e:3e:99:9f:0e:cc:3c:5b:47:3f:
                    bd:b8:d3:05:59:fc:bc:88:6f:1c:08:8c:dc:c7:90:
                    fc:fb:83:28:5e:80:99:b4:40:74:1f:82:ee:09:49:
                    f8:7e:82:7f:98:5a:00:f1:b2:b5:ff:5a:2e:01:83:
                    80:b7:c7:24:be:ab:3d:62:c8:49:2f:1f:c4:05:76:
                    27:83:56:97:cc:85:36:2c:b0:71:fc:23:2c:a6:70:
                    98:e7:e5:1e:e4:4d:9a:16:c8:1c:94:b6:87:6a:2c:
                    1a:e0:39:58:38:16:a5:ac:0f:d5:b7:16:68:9b:1f:
                    fd:6c:e5:9a:55:cc:ff:6c:ab:e9:7f:ea:e6:b2:5a:
                    cb:8c:ce:fb:f0:1b:a1:a5:65:7d:59:29:35:98:21:
                    9e:f7:54:10:48:59:54:f3:9e:f7:f7:2d:f4:cb:0c:
                    d6:ec:1d:71:e7:2d:68:e6:bd:37:93:bb:bb:69:94:
                    6a:b9:e8:54:cd:ab:5a:76:12:b1:b5:1e:b2:34:08:
                    5d:57:31:7e:18:64:d2:b4:bf:b4:a5:5d:ab:b8:b9:
                    bb:64:7f:ca:2c:a7:7c:9b:7a:87:1a:1c:40:aa:64:
                    b2:fb:f3:57:6d:1e:a6:3c:7f:de:68:54:ee:5f:08:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:D2:BA:31:2C:CE:C3:E0:2A:05:E0:05:E6:31:7A:0E:10:27:93
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:e0:25:c0:4b:7c:3b:bc:a8:ab:07:ba:91:13:1c:6b:e8:
         15:f2:71:ab:10:9f:20:45:0a:ae:2a:2f:d2:04:bf:4c:a5:ab:
         05:77:fa:f6:61:a4:3f:8c:7e:0e:03:65:c6:4d:e4:0e:58:19:
         e4:5a:28:00:40:63:e2:81:a2:5c:33:90:ed:44:41:dd:ee:74:
         a3:2b:17:66:7a:09:47:7c:94:18:39:eb:11:c3:d2:d0:30:c0:
         34:f2:9f:fa:32:cc:57:fc:98:3d:b8:6f:11:61:5a:19:88:a0:
         82:b8:d3:6c:cd:77:ca:e4:8f:ea:90:24:af:2e:ea:14:a7:62:
         bc:d3:93:97:1d:5c:04:b1:c5:ae:11:e8:8f:86:09:4a:d9:c8:
         ad:46:c6:b5:a5:0c:63:5d:55:b0:17:05:84:0d:c2:be:d0:f1:
         b0:f7:d1:c9:aa:6e:40:50:d9:83:b0:da:d5:03:25:8c:1c:9f:
         77:e4:a7:48:bf:2d:27:c6:cf:38:35:c7:88:f4:cd:fd:a4:6e:
         ed:dc:ce:03:b7:5b:37:57:38:99:08:70:30:b1:03:a2:7e:9d:
         0f:71:aa:a3:68:14:61:a0:30:d4:0f:f5:b8:86:85:f7:f2:17:
         c9:2b:a5:ed:46:2a:40:4f:73:4b:e7:43:33:4a:c1:fc:04:1d:
         5a:99:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:13:15 2025 by rpki-client