Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37352e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37352e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          xjXvvfEBoxb3BWDID47PaC/1KzyxQguIbbVUHUDrL8Q=
Subject key identifier:   37:59:27:BC:EB:B9:9C:01:C3:3D:CB:89:FC:84:E1:04:EE:57:0D:14
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       2985FF77BA58B3D5B0D6BFEF845944700C7667A2
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37352e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:30 +0000
ROA not before:           Thu 06 Mar 2025 07:55:30 +0000
ROA not after:            Thu 05 Mar 2026 08:00:30 +0000
asID:                     263263
IP address blocks:        138.122.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:85:ff:77:ba:58:b3:d5:b0:d6:bf:ef:84:59:44:70:0c:76:67:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:30 2025 GMT
            Not After : Mar  5 08:00:30 2026 GMT
        Subject: CN=375927BCEBB99C01C33DCB89FC84E104EE570D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:98:eb:01:90:2e:36:db:1b:5c:6f:4b:e6:
                    bd:38:ba:fc:02:97:02:33:70:18:6f:a8:3d:4f:6a:
                    9f:a2:9a:9e:4d:94:14:de:b6:ac:0c:ad:e5:b0:df:
                    3a:b6:b6:22:8f:62:c0:b5:c1:b6:ca:07:79:27:d7:
                    9e:22:33:eb:64:a3:3a:3e:40:c2:ad:f1:4d:c2:d3:
                    12:f1:e4:ba:a5:d3:b7:29:4a:bb:e4:eb:b5:ac:7e:
                    ed:07:69:1e:e8:26:8b:e5:6a:a7:f7:0c:b1:37:20:
                    8f:1a:d4:f9:75:c3:e4:2e:01:fb:23:ff:28:de:4b:
                    27:68:44:ba:8a:1f:ab:8d:04:a8:5d:9d:a1:e3:59:
                    d6:6f:23:e4:e1:ae:1d:1f:70:ea:34:3b:51:c0:9e:
                    b0:4c:b3:06:84:92:b6:73:cf:d6:fb:30:43:19:bc:
                    ba:77:f6:04:da:19:a2:07:9b:bf:3d:ae:31:a8:9d:
                    ff:c6:4f:86:28:af:59:70:69:7e:51:4b:01:ef:ea:
                    9c:f7:29:5a:38:ac:4f:c5:cb:b4:06:32:91:db:9e:
                    bd:91:35:25:f1:3d:e1:f3:a2:09:33:0d:9d:19:81:
                    4f:23:d3:ef:4e:6e:ce:94:3b:a0:59:f9:5e:35:95:
                    31:bd:b3:84:f0:5c:c3:a2:bc:b7:23:82:aa:5c:0f:
                    88:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:27:BC:EB:B9:9C:01:C3:3D:CB:89:FC:84:E1:04:EE:57:0D:14
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37352e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:ed:1c:a4:e8:ce:9f:40:25:b0:62:c1:c2:06:07:f9:d1:
         d3:bf:df:23:7c:85:1f:67:e2:1a:2d:3c:f3:45:ce:c2:1d:5d:
         91:10:a2:9f:d4:a3:d0:8f:c9:8f:6a:ed:bb:7b:e4:ff:ca:d6:
         4f:d3:fe:52:4f:5e:bb:41:27:cd:0a:e3:57:b6:ae:82:23:43:
         c8:71:c7:fd:93:35:ad:5d:96:3b:e9:dd:32:06:7d:e8:49:0d:
         a6:2d:49:05:cd:64:16:10:7c:18:67:f0:6f:2f:ae:0c:5a:f4:
         66:1a:82:82:05:61:0e:87:5c:61:b1:3e:0c:a5:c0:eb:1a:66:
         33:56:eb:c0:ee:f6:9a:24:5a:cf:b4:98:d7:6b:f7:07:ee:fc:
         64:32:4b:f4:f2:4b:6a:7d:4d:10:75:fe:28:a4:eb:53:f4:93:
         48:26:f1:3c:e7:59:36:1a:4e:71:72:c1:43:41:18:08:fd:8b:
         3d:e9:f5:86:48:ab:53:21:35:e1:58:1f:cd:1d:a8:e1:62:29:
         b6:77:fe:f8:1a:36:54:f0:e8:3c:93:12:27:d0:b0:9d:2f:65:
         07:c2:f3:ae:30:6f:ed:5c:75:f5:f8:2c:d0:bb:21:56:40:02:
         f0:5f:97:b3:bb:a4:50:a9:28:cc:bd:64:f9:3b:53:d8:99:c9:
         13:8f:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:10 2025 by rpki-client