Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32332d3233203d3e20323633383738.roa
File:                     3133382e3230342e32322e302f32332d3233203d3e20323633383738.roa (raw, json)
Hash identifier:          uJABBP7F8soGaJWyOyg3NfD6wFTPgw9p5TI2haSKabk=
Subject key identifier:   18:ED:0F:3F:EB:A4:2B:6C:D1:09:DB:3C:4B:7C:4B:B3:46:77:CD:59
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       58B3F2F9882B6A28F1964E2987B5242335E52D86
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32332d3233203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:33:41 +0000
ROA not before:           Tue 16 Jan 2024 13:28:41 +0000
ROA not after:            Tue 14 Jan 2025 13:33:41 +0000
asID:                     263878
IP address blocks:        138.204.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b3:f2:f9:88:2b:6a:28:f1:96:4e:29:87:b5:24:23:35:e5:2d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:28:41 2024 GMT
            Not After : Jan 14 13:33:41 2025 GMT
        Subject: CN=18ED0F3FEBA42B6CD109DB3C4B7C4BB34677CD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:bf:2d:4f:ba:03:a1:85:fc:3b:99:9f:62:
                    64:d2:ed:18:c0:17:b8:80:44:37:fd:9a:ba:99:7c:
                    b2:13:c5:61:4d:28:11:44:0e:db:a9:ec:cd:4c:11:
                    4a:75:88:b0:54:82:78:95:b5:e6:c2:f3:e7:1d:54:
                    be:a6:ae:e9:45:02:b9:f1:a3:8c:8e:5d:99:4a:c9:
                    18:b8:ba:fa:cb:b1:07:a2:c2:db:a8:08:f5:06:dd:
                    9c:aa:71:83:53:59:60:f1:79:9a:eb:56:af:3f:67:
                    06:4f:e6:17:9c:e1:e5:6b:e0:d3:10:4f:55:ff:bf:
                    18:f6:c2:52:fb:4a:6d:d8:25:64:a0:64:4a:2c:4d:
                    4d:6d:12:6b:90:15:48:1c:e2:bb:2e:6a:ae:0e:0f:
                    70:d9:67:1d:3f:31:73:ec:20:d4:75:a0:f8:a3:e4:
                    e3:61:ce:06:d5:cf:1f:f8:ac:09:2d:f8:8c:b8:cc:
                    32:e5:12:dd:1e:56:e5:00:f7:bc:f7:8e:1f:8b:02:
                    f1:11:4f:4e:64:bc:ba:65:c1:a4:95:3c:4f:fb:b0:
                    6d:77:7f:cd:cc:b2:fb:d6:91:e9:c1:c2:8e:e3:34:
                    81:27:68:f6:a3:57:60:85:54:7f:cb:88:d0:b7:47:
                    d4:aa:53:2a:bc:9b:00:1d:f3:b3:e0:f6:e7:35:85:
                    12:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:ED:0F:3F:EB:A4:2B:6C:D1:09:DB:3C:4B:7C:4B:B3:46:77:CD:59
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32322e302f32332d3233203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:36:e2:af:ea:72:8f:09:92:a8:8e:a7:40:f6:68:9d:d1:05:
         18:c8:b3:02:a2:e1:3c:8d:d6:70:78:9f:08:8e:06:82:35:d7:
         aa:96:71:86:f1:e7:5c:75:2e:d2:28:27:7d:7a:d4:30:ee:dc:
         be:c5:35:17:1a:5a:e5:e8:88:26:d2:50:c9:7a:77:76:91:29:
         d8:91:09:b9:35:6b:61:79:11:9b:cb:df:04:09:f8:41:ad:7c:
         1e:9d:cd:9f:0f:11:ad:95:a5:e2:58:8f:18:70:eb:4d:7c:28:
         11:c8:24:4b:dd:1b:66:a7:d5:0e:c6:12:90:43:01:4a:5b:62:
         aa:2d:23:80:81:05:40:57:d5:04:7f:0f:e3:bd:68:4a:fd:90:
         3f:e9:c7:3d:b7:25:52:27:0f:bf:ff:52:aa:36:12:da:ca:ed:
         13:46:18:0d:6a:41:81:c3:2a:17:2b:3e:09:0b:3a:37:3e:53:
         a4:8d:e6:d9:c5:89:ae:f3:88:a7:70:fb:89:f2:54:30:c8:c8:
         05:fb:37:a3:56:6d:93:2f:70:f4:d5:36:94:cc:8c:25:25:a4:
         2f:4b:dc:ad:6e:f8:87:da:5b:b4:da:2e:97:d8:1c:43:41:5f:
         0a:92:b4:f9:4e:8d:76:87:2b:1a:b1:72:48:9a:07:a0:79:6b:
         ca:fb:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:10 2025 by rpki-client