Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
File:                     3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa (raw, json)
Hash identifier:          eTRho2hmFuFNao+tLa1loWu7VBGlUEQAodjJ0CxIsVo=
Subject key identifier:   6A:F0:01:64:6C:E1:3D:3F:E1:1A:E8:48:22:E5:9A:CF:B6:D5:8E:5F
Certificate issuer:       /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial:       51734929B45B55415ED29A329759C25649382332
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
Signing time:             Fri 29 Mar 2024 21:59:26 +0000
ROA not before:           Fri 29 Mar 2024 21:54:26 +0000
ROA not after:            Fri 28 Mar 2025 21:59:26 +0000
asID:                     263961
IP address blocks:        138.255.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:49:29:b4:5b:55:41:5e:d2:9a:32:97:59:c2:56:49:38:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
        Validity
            Not Before: Mar 29 21:54:26 2024 GMT
            Not After : Mar 28 21:59:26 2025 GMT
        Subject: CN=6AF001646CE13D3FE11AE84822E59ACFB6D58E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:64:30:a8:80:21:3e:4f:ab:a8:b7:33:a4:
                    52:38:ec:22:bd:e8:9d:b4:23:7e:84:cf:da:36:d9:
                    2c:d1:73:ef:79:82:65:d9:63:10:8d:1b:82:44:f1:
                    f7:5f:e8:f3:f4:e6:4d:0f:fe:ac:2d:a5:5b:7c:d7:
                    1b:fd:2d:4d:89:4b:9a:b3:b3:61:7f:18:db:35:60:
                    65:71:af:ae:28:04:d5:36:9e:bd:6a:aa:c0:2b:f8:
                    cc:a5:7a:21:4a:8e:12:44:80:b4:d2:f4:21:d6:17:
                    8f:69:36:f9:66:ef:6d:0f:cd:82:80:05:3c:ea:63:
                    6e:e4:77:4e:c6:bd:20:34:8b:b1:3b:7b:38:36:e0:
                    fa:a1:66:e0:82:e2:b7:91:b9:62:ec:10:d7:85:24:
                    e2:c5:f2:4b:fc:44:34:23:fe:19:98:1f:04:bb:a9:
                    90:ea:e2:59:80:ea:4d:1f:e2:5d:ed:ae:9c:d3:a6:
                    c9:88:80:31:a7:ff:bd:9a:fe:af:44:4e:59:06:e6:
                    c8:67:f2:9e:85:ea:69:b0:ad:e7:9d:f5:73:c5:ab:
                    29:3d:4a:ec:25:31:43:06:4a:ec:b7:7a:f1:a8:21:
                    0c:ea:41:87:a3:46:7a:25:47:9b:09:b5:10:d0:19:
                    61:cc:dd:0a:1d:d7:cf:b2:66:bb:6f:5a:93:3a:26:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:01:64:6C:E1:3D:3F:E1:1A:E8:48:22:E5:9A:CF:B6:D5:8E:5F
            X509v3 Authority Key Identifier:
                keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:e2:14:6f:96:de:ca:dd:f4:15:4c:b5:ee:f5:1b:62:6e:
         83:7b:c8:45:4e:8e:1a:1b:aa:33:3f:b1:b8:7a:fc:35:8a:ea:
         3a:e4:6a:55:1e:d3:90:89:2e:d4:29:9a:ff:99:de:13:d7:82:
         ec:5a:52:65:7f:4f:ee:9e:ee:dc:d7:2c:11:1f:d7:15:5f:8b:
         40:f8:67:b4:9b:fb:e3:e6:a2:89:59:5f:38:a8:64:2a:9f:82:
         90:df:cf:67:4f:ab:9f:13:ed:b2:ec:8a:39:aa:e2:d2:47:ce:
         cf:72:c8:a1:16:2d:41:d3:49:0a:ea:80:a8:90:79:2a:ba:77:
         9b:66:f2:fa:01:ac:e0:35:92:c4:3a:04:9b:71:7d:5d:db:09:
         ac:05:cb:83:19:c5:d2:51:d5:7e:e7:b4:25:d9:af:cb:99:d8:
         67:a5:de:56:e8:9f:b7:11:fa:19:85:01:0a:3c:d7:ef:96:8c:
         4b:c1:5a:2e:7b:ed:d9:de:2b:20:cf:f2:90:34:8a:f5:82:e5:
         4a:17:69:3e:56:1f:54:3a:5a:0a:e4:90:34:e9:00:1c:b5:f3:
         b4:b5:99:3f:c6:4d:9f:1b:81:d7:8e:bb:8f:43:38:7b:05:9e:
         d0:49:33:ae:4c:1a:c0:2e:fb:d8:92:53:9f:56:91:11:0f:66:
         27:c0:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:29 2025 by rpki-client