Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa
File:                     3133382e39342e382e302f32322d3234203d3e203238333630.roa (raw, json)
Hash identifier:          FupiEYA/mIKzb7kM/qCgKj2b/8ZvFsVcMLahp2YHYJQ=
Subject key identifier:   F0:0C:9F:DF:18:D3:7B:FE:66:53:D3:7A:63:39:13:4E:DA:93:3F:0F
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       0D57E8169996393F55F08630F303A86C627412C7
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:02:36 +0000
ROA not before:           Mon 12 Aug 2024 19:57:36 +0000
ROA not after:            Mon 11 Aug 2025 20:02:36 +0000
asID:                     28360
IP address blocks:        138.94.8.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:e8:16:99:96:39:3f:55:f0:86:30:f3:03:a8:6c:62:74:12:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 19:57:36 2024 GMT
            Not After : Aug 11 20:02:36 2025 GMT
        Subject: CN=F00C9FDF18D37BFE6653D37A6339134EDA933F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:72:7a:a9:92:0e:b3:f5:00:88:25:9b:cc:
                    bc:b8:05:11:84:7d:58:5c:c5:22:52:94:d1:5f:87:
                    53:4e:c4:98:9b:04:ff:31:1b:10:8b:cb:f7:66:8f:
                    44:4a:e2:8f:19:71:49:e4:19:ab:e9:4f:73:8f:e7:
                    cd:65:92:9c:0b:59:a5:1e:83:0f:04:f5:e8:fd:2b:
                    ad:57:33:0c:ed:9b:15:dd:68:b6:68:e4:58:1d:49:
                    cf:5e:3f:a8:1f:65:a3:c5:69:96:47:64:c7:f2:d8:
                    95:62:8f:02:9f:82:f7:c4:06:a0:50:19:4f:9e:f9:
                    01:36:32:f4:ad:12:05:26:e2:b5:a3:8a:89:b0:b7:
                    3a:dc:91:ab:b7:b7:e2:c5:37:cc:f6:4f:b0:fa:be:
                    1d:8f:09:46:d2:ec:41:79:68:d6:65:0f:85:28:31:
                    c9:49:30:08:17:a2:b9:27:07:b9:52:3f:4c:ae:53:
                    4f:d7:86:99:8d:22:96:32:a7:cb:23:97:d4:cc:ea:
                    d6:e6:f9:0b:c8:b4:44:12:08:f2:d4:38:c0:36:c6:
                    87:ff:a2:a1:32:09:34:3b:9a:e8:a0:12:09:3e:66:
                    b1:3a:dd:df:8a:71:55:10:13:ca:d3:ce:fa:91:bf:
                    27:bf:f9:f2:2e:52:80:76:f3:e7:de:fc:34:5f:09:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0C:9F:DF:18:D3:7B:FE:66:53:D3:7A:63:39:13:4E:DA:93:3F:0F
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:02:63:1b:20:7e:16:3f:5a:b6:16:63:42:2b:aa:a5:49:
         ef:cc:3d:30:d1:7b:8a:25:3a:0c:c0:2b:40:dd:ea:ab:7b:c7:
         fb:e5:56:64:b1:e6:8a:d3:41:32:ac:36:48:6c:e3:8a:8c:a2:
         b4:0c:f1:ac:b0:2a:dd:62:b5:92:2d:2b:17:eb:9a:a5:61:01:
         b8:7f:f0:24:05:4d:b5:76:f2:70:56:98:e6:a4:21:69:fc:09:
         3b:06:6b:e4:a4:4f:53:3c:f5:64:03:a3:3c:09:5a:d3:d4:92:
         10:f2:df:26:0d:99:fb:09:45:3b:d8:2d:3d:b4:c6:c6:d9:16:
         1a:95:7b:35:09:bb:f6:1b:4a:8e:99:1f:c4:10:e9:cc:e7:59:
         01:9b:ff:ff:05:80:33:04:c9:8a:ca:da:4f:79:3e:61:16:7d:
         e2:7b:4f:28:2a:14:a4:e7:a7:7a:84:11:9a:d4:3f:25:e8:11:
         de:ba:e5:d7:93:d8:70:84:59:f1:92:77:7d:af:52:bf:b2:f9:
         19:a6:0b:1c:07:18:49:1d:a6:9e:7d:5c:28:52:6f:e4:08:3c:
         58:4f:97:5d:29:30:05:7f:4c:13:c8:91:00:64:d2:85:e2:a0:
         5b:8f:3b:d9:63:91:26:79:90:cc:29:91:f3:34:82:c1:02:bb:
         2e:dc:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:47 2025 by rpki-client