Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32342d3234203d3e20323633393333.roa
File:                     3133382e3231392e34382e302f32342d3234203d3e20323633393333.roa (raw, json)
Hash identifier:          B2KXNxkXTbiw2QgpVAADlVMqZQSsYSMwzrZjCb3dOSs=
Subject key identifier:   7D:6F:2A:96:92:14:68:89:0E:A0:0A:60:6B:DA:AF:26:E5:EC:5E:9D
Certificate issuer:       /CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
Certificate serial:       2BE11229D17316F4D7C7E48AE8D9CAD093FF853D
Authority key identifier: F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32342d3234203d3e20323633393333.roa
Signing time:             Thu 06 Apr 2023 16:04:18 +0000
ROA not before:           Thu 06 Apr 2023 15:59:18 +0000
ROA not after:            Thu 04 Apr 2024 16:04:18 +0000
asID:                     263933
IP address blocks:        138.219.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e1:12:29:d1:73:16:f4:d7:c7:e4:8a:e8:d9:ca:d0:93:ff:85:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
        Validity
            Not Before: Apr  6 15:59:18 2023 GMT
            Not After : Apr  4 16:04:18 2024 GMT
        Subject: CN=7D6F2A96921468890EA00A606BDAAF26E5EC5E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:34:6b:ef:2d:3a:2b:cf:5b:82:71:a0:fb:db:
                    9e:d6:1d:07:54:84:c4:1b:7b:dc:64:b8:f6:95:c6:
                    44:7a:25:1b:fd:46:48:64:66:db:b4:28:bd:f9:b6:
                    46:c1:a7:91:ce:86:d7:da:c4:c9:9b:ec:38:d3:2c:
                    d6:58:9e:6b:69:55:e3:0e:c6:dc:a4:68:8d:1c:31:
                    2b:b6:1d:51:9b:9e:f2:33:f4:a7:66:8b:15:a0:08:
                    53:4d:bc:70:be:40:17:04:8b:dd:ed:cb:2a:22:24:
                    b0:af:10:af:97:bb:b0:3d:4b:88:0f:b5:de:52:41:
                    58:03:eb:42:a4:2b:8f:df:5f:a5:18:53:96:fd:86:
                    26:b4:ab:30:4e:5b:50:d9:ef:0e:6f:e2:38:60:bb:
                    e0:22:a1:75:7b:19:44:ca:e3:04:52:bc:79:44:e3:
                    1e:76:e0:bb:9b:ad:e2:e2:ef:52:16:3a:0a:07:c0:
                    c3:8e:00:d1:49:ab:94:aa:98:7c:f6:a1:2c:d8:e2:
                    85:f5:25:05:59:c5:4c:68:fd:af:3e:9e:c1:3e:8b:
                    15:da:fc:32:ca:f7:bd:0b:5e:d2:ea:6c:62:2f:f6:
                    84:00:c2:7e:3b:71:f5:01:32:5a:a3:8a:1e:db:51:
                    a9:e6:98:97:90:61:94:c8:cd:d3:ba:9c:1c:a9:db:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6F:2A:96:92:14:68:89:0E:A0:0A:60:6B:DA:AF:26:E5:EC:5E:9D
            X509v3 Authority Key Identifier:
                keyid:F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32342d3234203d3e20323633393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:5b:d3:7b:cb:d7:e5:e6:90:f0:23:fc:4c:86:6e:e0:38:
         23:90:fc:82:03:91:da:32:8d:fe:25:70:50:23:4e:ad:85:04:
         da:1e:b9:98:2c:dd:c1:1d:a3:13:91:ad:be:b4:a0:15:7c:c8:
         d1:75:4a:3f:9a:61:db:30:47:e2:8c:5c:db:eb:0e:d0:6d:43:
         93:5b:f0:b9:00:93:91:31:6c:2a:5e:24:4f:62:4a:00:88:e9:
         4c:96:0c:a2:41:26:33:d9:07:21:af:f5:f1:9b:13:d2:b1:97:
         a9:4d:f7:3a:85:77:ac:6a:5b:12:3f:dd:fc:36:85:71:da:f0:
         2f:2a:71:45:c9:50:e4:79:fb:33:dc:f7:79:a8:b1:8b:10:f5:
         82:07:0e:7c:4d:b9:25:9f:86:be:09:1e:f6:3e:42:9a:c3:22:
         92:f1:fb:37:bd:04:d4:4b:8a:d5:d9:97:71:ee:bb:8e:40:c3:
         6d:73:2b:b0:92:c3:61:fb:c1:62:21:47:98:8b:a2:fe:e7:ca:
         05:d9:3d:dd:ee:e4:fa:73:31:9a:31:bc:bc:ac:73:55:13:6b:
         1a:66:37:59:65:13:91:96:26:a2:58:b7:b1:e7:a7:ac:8f:74:
         e1:b5:1f:fb:a0:bf:02:b3:62:3c:5e:f4:e6:5a:5d:e1:40:9a:
         b1:6e:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:11:15 2025 by rpki-client