Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
File:                     3133382e39372e35322e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          E3WMsmqEkhdbsbIMFTk09kY0OwhJeErA/X0iuPVijZ4=
Subject key identifier:   C3:1D:E4:98:5B:23:A3:90:C7:86:75:F0:B8:21:C1:89:CF:A5:47:27
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       72782F4BDC23FB646652FA9CFB192B50917CC0CF
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa
Signing time:             Thu 06 Mar 2025 10:21:53 +0000
ROA not before:           Thu 06 Mar 2025 10:16:53 +0000
ROA not after:            Thu 05 Mar 2026 10:21:53 +0000
asID:                     264128
IP address blocks:        138.97.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:78:2f:4b:dc:23:fb:64:66:52:fa:9c:fb:19:2b:50:91:7c:c0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Mar  6 10:16:53 2025 GMT
            Not After : Mar  5 10:21:53 2026 GMT
        Subject: CN=C31DE4985B23A390C78675F0B821C189CFA54727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:02:d8:6a:4f:2e:c5:63:9a:1b:23:b5:78:99:
                    a5:c7:f4:8d:91:46:6c:31:7d:2f:67:84:a3:d5:37:
                    8c:75:4f:7c:5a:52:f7:08:5d:4b:c6:8e:6c:15:0c:
                    c9:08:82:78:94:18:10:fb:03:14:34:9d:5d:48:ca:
                    bf:3a:aa:92:b4:a9:2a:5e:8c:66:dd:00:4a:1b:2a:
                    80:9e:e0:12:d0:25:2d:e1:07:d7:b2:ee:a3:3f:b1:
                    e0:d7:64:0c:61:db:ba:40:c7:18:43:a5:80:03:9f:
                    fd:67:bc:1d:4d:91:62:a4:f0:63:d0:0e:01:7f:ab:
                    90:dc:7e:2f:e3:8e:2f:0e:45:ee:dc:86:88:ab:64:
                    e5:6f:a7:b6:f9:f7:0c:2e:b7:34:77:e3:0f:aa:59:
                    71:02:a9:9b:38:c5:e6:9d:84:16:0e:ce:c3:57:01:
                    f1:03:c4:a8:73:e7:b0:c1:ca:b0:9a:17:c1:74:41:
                    5f:92:93:9f:62:a2:1a:69:9f:f9:11:04:b6:50:52:
                    d7:2e:4a:e2:b2:15:49:47:6b:42:84:eb:2d:41:f7:
                    61:de:7e:7a:b0:82:e9:52:ba:c5:59:ef:d3:e2:c9:
                    2b:b1:6b:fd:81:ea:eb:38:5f:86:ac:ea:88:6b:51:
                    04:86:e0:95:54:91:a1:a1:1e:fa:b3:62:23:a3:54:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:E4:98:5B:23:A3:90:C7:86:75:F0:B8:21:C1:89:CF:A5:47:27
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3133382e39372e35322e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:84:48:5a:b3:41:64:f2:46:07:bb:cd:38:1e:4a:25:98:
         7e:29:36:a6:bb:14:ec:ac:c0:54:79:4f:59:0d:c8:5d:db:1e:
         07:c9:43:df:d0:b0:e7:7d:3d:d6:67:6e:f1:77:da:56:4d:b4:
         82:2f:bd:b4:98:9b:28:b2:93:e5:86:8b:36:63:23:f4:2a:a6:
         61:91:0e:14:99:0f:86:9f:dc:b8:8b:29:79:8c:fe:59:65:2a:
         4f:ca:a3:ea:68:75:57:83:21:d7:34:ba:03:32:24:14:06:1b:
         b6:26:b0:79:ca:57:ab:b7:8c:02:1b:48:5f:ac:42:8b:dd:bf:
         f3:e7:a0:a6:26:22:c5:8e:51:fc:17:ac:e1:f3:bf:aa:f3:0d:
         06:6c:97:78:5a:25:c9:c8:be:aa:9a:8c:15:7d:a2:c2:ea:53:
         53:5b:93:d3:f6:06:18:a9:54:0c:54:14:a9:a7:18:ad:9c:4e:
         9b:b5:53:0e:0e:d5:5b:14:4e:ab:68:f3:94:b8:e3:cd:5f:8b:
         13:8a:d4:e6:cc:b6:6e:fd:0f:c7:52:2a:6d:b6:c3:3b:ca:8f:
         f3:e1:9c:15:5b:24:1a:eb:a3:f6:9b:ed:48:21:10:df:92:45:
         34:7a:38:ce:98:81:6a:a7:ea:c6:f8:7c:75:40:29:6e:e3:6d:
         6b:24:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:27 2025 by rpki-client