Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa
File:                     3133382e3138352e34352e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          92PEKgKF/WaZRHfIpNTy8MdFKV/VWMnaqUZFNzn3BeU=
Subject key identifier:   72:3A:18:49:A4:8A:73:B5:B3:5A:EC:0F:01:56:5A:0C:8C:E3:7E:D3
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       2C686DDDF156E4425051282218842DE9D71AF0C2
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa
Signing time:             Thu 13 Mar 2025 12:09:40 +0000
ROA not before:           Thu 13 Mar 2025 12:04:40 +0000
ROA not after:            Thu 12 Mar 2026 12:09:40 +0000
asID:                     52540
IP address blocks:        138.185.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:6d:dd:f1:56:e4:42:50:51:28:22:18:84:2d:e9:d7:1a:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Mar 13 12:04:40 2025 GMT
            Not After : Mar 12 12:09:40 2026 GMT
        Subject: CN=723A1849A48A73B5B35AEC0F01565A0C8CE37ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:25:57:b1:f7:95:0d:01:00:90:3d:47:08:
                    31:99:c1:3d:52:20:e0:db:fd:e9:30:c7:e1:6b:78:
                    e9:aa:52:bc:77:c9:d9:84:c1:48:26:cf:58:93:92:
                    8c:51:9f:87:d3:4c:21:f3:d5:d2:62:3a:2b:50:9b:
                    a5:bb:3f:39:22:0d:b0:63:b2:fc:63:97:8e:07:0e:
                    39:79:49:36:55:12:45:b4:70:c0:4b:7d:15:a9:3d:
                    69:cb:5a:dc:94:9a:89:cd:63:39:e2:7d:de:f7:c6:
                    57:08:c8:20:65:c0:4e:5e:9b:40:b2:58:fe:ef:0c:
                    1d:2c:00:2e:d0:e3:68:c7:56:40:51:cf:df:db:6b:
                    59:76:f0:9c:e4:e3:fd:dc:a1:08:40:3f:ad:43:ab:
                    c2:ea:71:ff:43:48:e9:90:5c:7a:f3:88:69:09:da:
                    10:91:3a:97:6f:39:2a:b3:b7:fb:43:ea:cc:17:5d:
                    2b:3f:c6:aa:89:68:99:0a:2c:89:f9:15:de:88:e9:
                    b1:ce:31:05:e0:c3:25:43:fa:66:99:5e:e1:35:59:
                    a2:a1:68:43:51:62:50:c2:30:71:ee:41:f8:e3:7d:
                    d3:43:40:95:df:26:54:fd:73:d2:cc:fc:3e:b7:c9:
                    46:cc:e0:c1:a3:bb:ba:5d:30:84:1f:26:33:8e:06:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3A:18:49:A4:8A:73:B5:B3:5A:EC:0F:01:56:5A:0C:8C:E3:7E:D3
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:70:c7:03:6d:bb:ba:e6:0f:f3:88:db:ea:ee:64:f5:f8:f6:
         07:ca:af:0d:ae:c0:5d:e8:84:db:86:40:26:85:a5:20:66:97:
         dd:48:54:e7:0b:c8:5a:9f:32:8e:14:c0:37:45:b2:da:5d:31:
         d6:fd:28:a4:b5:e9:6d:e6:7d:2c:e9:80:87:a1:f5:d7:af:9a:
         2a:f5:49:1f:1d:d8:70:5b:1c:ec:d6:42:40:4a:11:20:a5:d5:
         ce:66:80:59:e7:da:a4:94:95:cc:14:ba:49:0e:f9:92:6d:d2:
         7e:9d:51:a4:fc:93:de:54:4e:57:bf:12:3f:28:36:28:74:2b:
         ef:b6:27:75:e8:56:18:30:d2:8e:60:6c:e3:64:1c:2f:42:3e:
         5a:d5:3a:e5:8b:82:77:46:70:8c:24:87:4c:0e:39:10:54:22:
         2e:80:a0:38:4e:e0:9b:6f:55:07:22:df:c7:28:51:9f:67:d9:
         7d:28:83:9e:a1:5a:ba:2e:da:35:92:88:9d:00:d1:ca:89:3b:
         34:95:1f:c5:f2:16:bd:18:28:84:da:6f:5e:fa:29:d7:b7:d2:
         ec:64:3d:cc:3c:17:85:f2:a4:ca:96:81:fd:be:7d:9c:22:8f:
         9a:e0:bf:45:66:13:a1:53:09:bd:64:df:37:61:2f:8c:72:91:
         ff:96:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:41 2025 by rpki-client