Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3234203d3e20323632333737.roa
File:                     3133382e3131372e3231382e302f32342d3234203d3e20323632333737.roa (raw, json)
Hash identifier:          c1oaz7BgVupUC+pRLQbiDQwBPoOcn3rmH6b3oyCMtWM=
Subject key identifier:   BA:E0:15:B3:5D:F8:ED:27:88:57:85:7E:F6:EF:44:85:F9:6D:0B:FD
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       73F885AC3F119E4A3A90262CD7275EBF25274B40
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3234203d3e20323632333737.roa
Signing time:             Sat 03 Jun 2023 18:02:30 +0000
ROA not before:           Sat 03 Jun 2023 17:57:30 +0000
ROA not after:            Sat 01 Jun 2024 18:02:30 +0000
asID:                     262377
IP address blocks:        138.117.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f8:85:ac:3f:11:9e:4a:3a:90:26:2c:d7:27:5e:bf:25:27:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  3 17:57:30 2023 GMT
            Not After : Jun  1 18:02:30 2024 GMT
        Subject: CN=BAE015B35DF8ED278857857EF6EF4485F96D0BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:5c:b3:13:2b:f9:0e:75:0b:f3:61:b0:38:
                    59:5c:4d:e4:06:05:da:fd:ed:1e:53:81:8d:a1:51:
                    e1:d3:39:9c:c8:ab:e1:79:86:3a:94:eb:1a:34:b1:
                    21:de:68:72:dc:13:6d:0e:f3:03:1e:3a:d6:3c:98:
                    c4:b1:f5:f3:e5:00:54:46:88:15:90:32:aa:0a:29:
                    2c:6e:92:7b:8a:95:77:2d:ac:b2:70:ca:8f:d7:ac:
                    ca:56:fe:a2:af:88:82:a5:17:ee:90:ca:68:00:f7:
                    cf:e1:02:7e:fc:1e:89:40:fd:eb:4c:5b:46:d3:0a:
                    4c:06:f1:98:fe:bc:a1:08:fc:67:1f:5e:28:1f:e5:
                    2c:b7:4f:94:f1:6e:0f:f9:74:0b:e7:ab:44:62:fd:
                    53:90:66:63:8b:3c:52:1b:aa:60:d2:c2:28:4b:c1:
                    8e:d8:8e:20:f5:a7:b4:46:1a:1a:9a:3c:b8:ba:a1:
                    41:d8:b8:22:bc:d5:7d:35:36:f3:85:c5:f3:fa:0e:
                    65:3b:30:56:ab:cd:9b:60:bd:35:a1:a6:42:6c:52:
                    a7:9f:f2:61:3a:65:c2:13:99:33:ec:08:fe:87:7e:
                    1b:b9:25:4e:43:ad:c0:fa:d4:c1:8f:be:40:43:e9:
                    3c:63:2b:a4:42:57:88:63:7e:c7:fd:f1:b2:9d:33:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:15:B3:5D:F8:ED:27:88:57:85:7E:F6:EF:44:85:F9:6D:0B:FD
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3234203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:43:40:4e:f6:cf:5c:27:7b:0b:50:cf:cf:4d:e4:a6:0d:9f:
         da:df:3f:19:08:5b:ff:ab:88:c4:17:a2:4b:d7:63:69:ff:7e:
         22:78:50:7f:60:76:1e:2f:0f:ab:eb:45:56:e3:e3:91:56:3b:
         1d:e1:ef:df:71:46:a7:00:57:bc:1c:a7:4b:3e:01:18:0e:ca:
         5a:da:0c:24:dc:87:06:76:66:3c:a7:ad:a8:b3:3f:40:15:32:
         da:00:dc:4e:e2:53:3a:7f:2a:47:b4:ce:55:f6:2d:cf:ff:54:
         32:e1:6c:40:38:5b:69:19:6e:8b:d5:7e:e2:2b:c8:2a:af:84:
         a8:cf:c4:07:00:60:0e:61:b1:1e:48:fa:fb:31:bf:d8:d9:9a:
         d8:7f:d0:e7:0c:7e:b3:e9:3d:52:95:4e:05:ff:ec:c3:4c:98:
         2e:2f:86:b0:e2:09:ff:21:f6:cf:f9:7a:98:22:1b:95:e2:64:
         b9:bb:1f:ae:86:05:3d:77:84:df:eb:96:81:2f:c2:aa:93:f9:
         a9:3d:5f:e7:57:b9:63:21:a3:df:bd:27:ab:4a:89:23:d9:63:
         51:75:5f:0a:df:40:c2:0a:0e:32:ef:d5:5b:38:ff:a7:00:43:
         a1:5c:4d:46:8c:28:3c:09:ca:0a:5f:34:df:9d:57:1c:de:0f:
         30:49:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:30 2025 by rpki-client