Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e3232342f32372d3237203d3e20323633393631.roa
File:                     3133382e3235352e3130372e3232342f32372d3237203d3e20323633393631.roa (raw, json)
Hash identifier:          WXxmEvnr4EBxGkXcTbKgnxV35BvGzKjLf2ykcjaNlqU=
Subject key identifier:   29:43:89:EA:7A:4B:93:D9:8E:80:1D:B7:28:FF:DA:6D:C3:C7:28:C4
Certificate issuer:       /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial:       2E57EFFD0832E26510910190FF607D4E1EE67BA8
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e3232342f32372d3237203d3e20323633393631.roa
Signing time:             Thu 18 May 2023 19:50:36 +0000
ROA not before:           Thu 18 May 2023 19:45:36 +0000
ROA not after:            Thu 16 May 2024 19:50:36 +0000
asID:                     263961
IP address blocks:        138.255.107.224/27 maxlen: 27
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:ef:fd:08:32:e2:65:10:91:01:90:ff:60:7d:4e:1e:e6:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
        Validity
            Not Before: May 18 19:45:36 2023 GMT
            Not After : May 16 19:50:36 2024 GMT
        Subject: CN=294389EA7A4B93D98E801DB728FFDA6DC3C728C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:70:c0:72:4c:c1:5c:65:33:ff:5b:cb:7b:
                    a8:33:4a:95:f2:ce:d4:0c:f4:2b:f1:27:ad:14:7c:
                    62:ad:a6:fb:99:61:c9:76:9f:0d:97:7f:e4:1c:90:
                    aa:4a:10:40:d6:94:f7:6e:3e:af:6d:67:ad:db:2b:
                    cd:37:10:3d:76:ec:7b:c8:bd:2a:7a:04:22:80:04:
                    27:76:60:f2:8e:ed:7e:d7:1b:ad:35:54:d8:9c:8d:
                    ad:84:c4:c3:e0:98:be:e6:1a:d0:1e:bb:a9:a4:65:
                    8d:87:cb:23:e3:53:24:81:a4:dc:c3:d2:45:a0:a7:
                    18:0b:d7:87:df:58:b5:25:33:16:09:c2:f2:8e:e6:
                    f8:d0:cb:9b:63:d3:85:58:ad:7e:b9:39:08:ba:96:
                    19:45:b3:77:c2:6e:3f:09:6c:71:f1:de:5a:85:76:
                    f7:65:9a:b0:c8:1c:21:dc:26:62:7a:ff:24:1c:17:
                    61:e8:24:93:46:2b:51:19:55:b4:69:31:d7:92:9e:
                    11:a4:8a:32:31:b8:40:fd:37:0c:df:6b:6c:df:67:
                    81:ad:45:73:ed:39:a4:cf:f2:d9:40:10:b2:06:0b:
                    79:fa:f2:ef:a1:7b:62:34:c2:c4:99:1d:54:08:21:
                    16:7a:79:9b:9c:07:9c:f1:0a:dc:df:c5:d9:bd:a8:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:43:89:EA:7A:4B:93:D9:8E:80:1D:B7:28:FF:DA:6D:C3:C7:28:C4
            X509v3 Authority Key Identifier:
                keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130372e3232342f32372d3237203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.107.224/27

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:55:23:30:4d:31:f4:58:58:10:4f:d3:f0:8d:f0:bd:61:
         f4:cc:c4:34:8c:68:a3:57:ca:56:bd:4c:09:1b:82:bd:96:92:
         9b:4d:62:99:ea:1e:c2:78:3d:20:e4:b3:d4:fa:aa:a1:ac:0a:
         15:cd:9e:8f:95:11:eb:6c:d0:2e:1a:c6:87:45:fc:48:5e:a8:
         16:b4:e2:66:fd:9e:01:81:10:01:9f:25:07:1d:c3:42:1e:05:
         74:88:e0:ab:23:b5:89:81:c0:91:2d:e4:8b:13:c0:de:7b:08:
         19:7b:40:fd:e4:ae:9d:e3:48:56:fe:e1:0a:d7:36:cc:e1:26:
         cb:92:58:9d:61:dc:b2:b2:db:51:51:63:75:cc:3a:9d:52:43:
         2a:be:19:5d:89:fc:fb:dc:b6:84:e8:91:10:ab:b8:09:4e:49:
         5d:6b:0c:07:e4:5c:f4:12:a0:b5:17:11:8b:69:8f:2c:ee:35:
         30:0a:d1:5f:68:b6:3c:df:6f:12:95:0a:93:ff:90:5c:e7:2e:
         3d:8a:85:1d:d4:27:da:9f:89:68:05:4d:7d:26:b4:68:60:af:
         fa:f7:e6:6b:0c:39:c1:0d:32:b1:3f:1b:a7:39:51:3c:f4:dd:
         d6:83:43:40:53:88:ac:3f:ca:eb:04:d2:b5:e8:29:a8:14:72:
         0a:9e:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:55 2025 by rpki-client