Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa
File:                     3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          BOHO4RMrrK2Qq6MV1eFq4VIpAb6NKCHPtg5O3tmG1HE=
Subject key identifier:   42:AD:0B:68:60:F0:09:AD:75:FA:7D:D4:EE:D3:37:E8:3B:6C:8B:9B
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       7CFE5476CD6DC425BCEA684D6F60C76A0F22E712
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:41 +0000
ROA not before:           Fri 23 Jun 2023 19:01:41 +0000
ROA not after:            Fri 21 Jun 2024 19:06:41 +0000
asID:                     264589
IP address blocks:        138.36.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:54:76:cd:6d:c4:25:bc:ea:68:4d:6f:60:c7:6a:0f:22:e7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:41 2023 GMT
            Not After : Jun 21 19:06:41 2024 GMT
        Subject: CN=42AD0B6860F009AD75FA7DD4EED337E83B6C8B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:13:b7:c8:4d:0d:0a:bf:fa:d0:40:49:d1:
                    89:6d:94:84:59:8a:db:c7:7a:b7:ef:10:bf:0c:1f:
                    3a:07:1e:1e:52:5d:cc:28:88:d7:cb:5a:f1:34:18:
                    b9:78:8a:3b:9d:e6:0a:10:3b:d7:07:2b:2f:3c:4a:
                    21:94:6c:75:a5:f2:7c:36:ab:d6:f9:e8:12:b1:51:
                    a3:95:bd:88:a3:d5:79:34:b0:47:6a:ec:16:dd:1c:
                    fe:c9:95:d2:ec:78:d0:dc:33:2f:d7:27:d0:0f:c7:
                    44:15:13:aa:5e:8c:49:16:dd:1f:e1:79:5c:e8:0d:
                    7c:93:6d:81:a7:48:17:98:19:97:c6:63:c6:22:1d:
                    67:9a:be:f6:13:45:1f:a9:ca:0d:ea:94:64:4f:b2:
                    c6:aa:f3:9d:66:9b:4b:a6:3f:bb:6e:d7:c2:a2:09:
                    60:04:1c:dc:79:00:b6:16:e1:f4:6c:00:17:e6:a6:
                    6b:b7:95:41:fe:2e:2d:4e:11:47:b1:d6:29:9f:6b:
                    00:2a:89:ca:01:62:6c:80:6b:b8:f8:90:eb:af:5a:
                    fa:96:07:44:07:8d:1c:11:49:ec:f0:db:02:11:53:
                    f2:0f:57:60:e3:18:47:d1:99:90:28:62:47:82:04:
                    fc:f4:6d:1c:1f:38:c2:1d:1f:ad:e2:10:0e:14:ab:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AD:0B:68:60:F0:09:AD:75:FA:7D:D4:EE:D3:37:E8:3B:6C:8B:9B
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:b3:7f:59:0f:a3:14:1b:3b:38:81:9c:53:be:2b:4d:d1:
         12:5c:47:0a:de:f5:6e:90:fc:47:31:c0:4c:74:31:f6:08:0c:
         43:31:58:6d:5b:36:9c:0a:01:74:6d:99:78:d5:f0:3d:f5:cb:
         05:12:b9:9e:64:9c:f1:96:f0:09:01:6c:b7:98:c8:e2:fd:af:
         79:41:33:bc:a3:0e:88:75:e5:d9:61:33:7a:8c:c1:a1:1b:1d:
         39:2f:f1:ac:b0:df:d1:7b:e5:5e:ef:07:4f:8d:1d:f3:8d:b8:
         d1:4c:ab:f1:75:bf:62:39:78:e0:52:2f:a9:8d:04:45:6c:c7:
         d1:d8:b2:b4:ee:9e:0c:25:a9:73:92:be:81:6a:bf:00:87:65:
         67:04:b4:dc:1a:9f:50:c1:7a:91:57:fd:69:a1:fe:76:6b:c7:
         e4:9a:48:04:b3:1a:d2:9c:28:ee:af:58:8f:4a:4e:29:fe:be:
         23:2f:17:0a:46:68:e5:71:9c:48:ea:11:c1:a7:e1:f7:ec:fe:
         51:77:70:21:0b:22:a5:c2:9e:7b:53:01:35:17:35:ab:6b:39:
         ab:f0:2d:3e:87:49:a8:86:79:a2:3c:98:a0:51:2e:8c:2a:4a:
         aa:32:20:a6:1d:a2:9b:a2:f8:54:12:ce:62:a8:46:69:b7:29:
         72:47:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:47:48 2025 by rpki-client