Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa
File:                     3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (raw, json)
Hash identifier:          Gb/nRxYav5jBOI2mrNONHBG0QHi6bl415L4EEECFslo=
Subject key identifier:   F0:F9:CA:E1:BD:E4:0E:D8:16:3A:C1:3D:7F:B3:D3:23:31:BB:6A:1F
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       3D6189548914461F69D5865CB524779BE896F204
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:41 +0000
ROA not before:           Fri 23 Jun 2023 19:01:41 +0000
ROA not after:            Fri 21 Jun 2024 19:06:41 +0000
asID:                     264589
IP address blocks:        138.36.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:89:54:89:14:46:1f:69:d5:86:5c:b5:24:77:9b:e8:96:f2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:41 2023 GMT
            Not After : Jun 21 19:06:41 2024 GMT
        Subject: CN=F0F9CAE1BDE40ED8163AC13D7FB3D32331BB6A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:c3:f0:bb:ee:60:37:af:3d:a2:fe:da:46:
                    67:2e:9e:10:c8:da:1d:e6:86:65:6b:67:a0:f3:ac:
                    fe:57:36:5d:0c:cf:48:98:e4:bc:d0:d9:83:42:9d:
                    18:62:cd:64:fb:19:6d:b6:b1:ff:99:40:83:58:2b:
                    2d:ca:fa:1f:ae:a0:3d:c1:a4:06:e3:2f:36:51:d6:
                    a6:f3:0d:86:32:44:74:42:21:ab:6b:0f:b9:ea:9b:
                    39:7e:c2:45:f8:8a:09:93:ed:66:da:7d:80:e2:3d:
                    8a:ba:3c:ac:73:3d:11:a9:00:f7:00:d7:0b:b0:a3:
                    7f:35:0e:a0:c0:73:47:ee:a2:af:77:64:23:b0:8c:
                    a6:19:7f:c0:fb:01:ca:d6:af:12:a0:03:dc:a9:2a:
                    c7:08:fb:4f:55:b1:60:e2:23:01:13:3b:76:d5:5c:
                    d0:4a:74:5c:04:af:9c:22:6c:00:d2:3f:cc:98:c5:
                    d7:e3:51:d6:d3:ea:64:d4:a1:9a:4c:09:c8:2c:d6:
                    a1:2f:b2:55:93:f8:91:5a:b2:9f:56:88:d9:09:8a:
                    9e:52:d6:63:6a:82:d1:56:57:73:0d:6e:37:ba:b0:
                    36:c5:81:3e:3e:c2:1b:ff:d0:d1:a1:2c:39:ad:03:
                    3a:17:83:f4:2f:4b:4e:62:75:93:8f:f4:5d:de:2c:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:CA:E1:BD:E4:0E:D8:16:3A:C1:3D:7F:B3:D3:23:31:BB:6A:1F
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:9c:15:42:2a:e9:89:1d:fa:b9:e4:f4:1e:41:9b:bd:86:
         75:63:66:37:fb:5d:37:49:33:1b:c0:a3:f3:25:55:0b:c5:58:
         fb:83:fb:0f:68:9a:7c:c0:ee:32:10:f4:c2:8c:1a:60:05:54:
         11:de:d4:f0:da:62:b4:d6:15:4b:bc:07:8f:69:52:17:8e:c6:
         87:0e:bd:b2:67:e2:21:e0:c0:45:af:d0:bf:04:de:a3:47:04:
         0a:0c:ee:42:c2:9e:c2:70:4c:76:4d:bb:24:60:28:a2:8f:3b:
         f1:fb:c0:f2:00:d3:8e:a7:7a:56:d7:d5:f1:93:cd:f1:97:24:
         af:6b:b4:41:6d:b5:ff:cd:04:b9:29:70:0f:69:8c:d0:00:dd:
         90:39:8c:20:51:5e:07:4c:d0:b3:a8:fa:f6:53:08:63:6e:23:
         1d:96:91:1c:45:13:b9:65:53:4e:77:29:fe:21:a0:72:43:8d:
         72:4e:af:b5:e4:08:b7:bc:cd:01:bf:26:81:59:8b:de:41:0b:
         4c:59:c4:50:40:4e:24:64:11:05:fa:46:f7:08:7c:7f:ac:19:
         0e:b3:bc:6e:f9:46:19:c1:11:24:9d:5d:50:ca:ef:62:7c:be:
         8e:44:6f:f8:fa:f1:f3:dd:6a:d6:13:0b:b1:13:43:98:9d:d4:
         e1:c7:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client