Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32322d3232203d3e20323634323436.roa
File:                     3133382e3131382e35362e302f32322d3232203d3e20323634323436.roa (raw, json)
Hash identifier:          0vGprLO41eSd+7O572AhKRDn4wZdr1ixJKPHkjqeWSc=
Subject key identifier:   64:6B:D7:A9:9B:C5:72:A0:88:2E:F7:7C:74:97:A2:2D:6C:E2:04:9A
Certificate issuer:       /CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
Certificate serial:       0DA622CF892887AED608F33865F4F84826039FBB
Authority key identifier: DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32322d3232203d3e20323634323436.roa
Signing time:             Fri 06 Dec 2024 19:05:41 +0000
ROA not before:           Fri 06 Dec 2024 19:00:41 +0000
ROA not after:            Fri 05 Dec 2025 19:05:41 +0000
asID:                     264246
IP address blocks:        138.118.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:22:cf:89:28:87:ae:d6:08:f3:38:65:f4:f8:48:26:03:9f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC
        Validity
            Not Before: Dec  6 19:00:41 2024 GMT
            Not After : Dec  5 19:05:41 2025 GMT
        Subject: CN=646BD7A99BC572A0882EF77C7497A22D6CE2049A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:4b:55:31:ab:64:d9:50:04:9d:b1:f9:e9:
                    1b:05:fd:64:1e:5e:39:6a:75:f9:48:dd:06:9e:c7:
                    cf:d3:d8:64:3f:55:cf:dc:f6:5d:e0:ed:8e:78:0b:
                    36:ed:10:bc:92:22:fc:5a:5b:06:95:3c:11:78:2b:
                    a9:b6:d1:33:43:65:c0:b2:53:81:d0:6a:63:9a:25:
                    e0:a0:0b:26:dc:aa:59:ca:49:1d:6c:96:84:44:7a:
                    97:81:d9:7c:f2:44:55:0e:79:bf:6e:a9:ca:ee:20:
                    92:30:45:ed:bf:37:0c:72:da:11:53:44:f0:20:ee:
                    31:cf:48:e3:96:db:ab:78:14:d4:46:b8:9a:b9:48:
                    13:7d:46:52:b8:b3:b2:5b:9f:33:66:bf:6b:60:4f:
                    03:b6:96:87:59:7e:72:19:71:63:da:c8:40:a1:2a:
                    db:c2:6d:4d:f5:5f:03:31:f7:1a:fd:e5:0b:bf:6c:
                    5f:e6:7e:60:70:a4:0c:32:b4:c7:1f:62:60:4a:5f:
                    14:ef:e4:8f:04:3a:6d:6c:cf:6d:76:f5:33:65:c3:
                    c0:82:4f:90:53:b1:11:44:3b:7c:a8:27:56:06:ee:
                    31:21:c3:e1:d5:1e:cc:0d:1e:ad:34:ff:9a:c8:75:
                    94:73:13:c1:51:95:0d:dc:52:64:af:1a:40:b8:d2:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6B:D7:A9:9B:C5:72:A0:88:2E:F7:7C:74:97:A2:2D:6C:E2:04:9A
            X509v3 Authority Key Identifier:
                keyid:DB:A4:96:1E:6C:8A:B8:C5:F7:0B:EB:67:0C:1A:DB:2F:9D:09:D3:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA4961E6C8AB8C5F70BEB670C1ADB2F9D09D3FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32322d3232203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:37:59:a2:ae:f9:c1:30:0a:64:64:8a:2b:8b:42:11:40:
         16:63:bb:b6:d0:da:ca:6d:2f:10:be:f9:05:19:76:2a:d5:2f:
         ce:28:ee:ac:11:25:c2:79:86:ed:c1:0d:d9:3b:36:96:73:38:
         9f:18:1b:1e:45:cc:0e:4d:fe:cc:7e:0c:e8:c1:e4:36:fd:2e:
         dd:17:c5:df:2b:f1:f4:f8:67:b4:83:d2:aa:1a:95:f9:dc:36:
         e3:cc:83:83:a4:17:45:b0:0c:53:71:e5:b0:96:9f:cf:af:a3:
         df:78:a8:6e:fc:36:34:ae:f3:95:1f:a1:85:7f:b3:21:a6:41:
         d6:64:3d:3e:33:10:e0:10:67:7c:ad:62:02:fd:1f:5b:e4:94:
         2d:55:98:63:09:64:93:73:16:93:f1:3a:58:f3:1a:04:b8:c8:
         a4:8e:38:ad:32:c3:b4:dc:66:80:46:2e:86:92:9c:22:53:ce:
         9a:17:32:be:1c:1f:bc:9b:af:5f:60:17:78:ab:30:26:41:a7:
         a3:df:ab:02:cb:a2:44:89:d6:b0:26:a4:5a:1c:7f:09:ef:3a:
         37:e0:d4:59:93:eb:75:fc:db:90:13:d4:c4:83:10:27:03:90:
         b2:ad:50:b3:11:b1:98:cb:f1:6c:91:b0:98:48:47:16:1f:20:
         89:a0:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:53:35 2025 by rpki-client