Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa
File:                     3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (raw, json)
Hash identifier:          J/Q4INq5+rxx5or7Dtxsc3e0XJVFM0Z9uzhdnU1PvWM=
Subject key identifier:   75:90:F5:2D:60:D6:05:77:A5:BF:76:46:FD:20:57:31:3C:31:DA:7A
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       0C52F930D3721E39529BC64022B5F065C324CC0B
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa
Signing time:             Thu 06 Mar 2025 22:10:34 +0000
ROA not before:           Thu 06 Mar 2025 22:05:34 +0000
ROA not after:            Thu 05 Mar 2026 22:10:34 +0000
asID:                     263650
IP address blocks:        138.255.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:f9:30:d3:72:1e:39:52:9b:c6:40:22:b5:f0:65:c3:24:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Mar  6 22:05:34 2025 GMT
            Not After : Mar  5 22:10:34 2026 GMT
        Subject: CN=7590F52D60D60577A5BF7646FD2057313C31DA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:05:98:e4:9b:ce:e6:af:1c:0b:32:b7:a5:
                    bb:d0:9c:a3:c4:df:79:2b:94:7d:84:16:84:ba:3d:
                    7e:20:13:9c:36:b1:6a:12:39:5f:22:d3:dc:e9:68:
                    a3:fb:ea:04:5b:34:66:d3:12:b9:80:3b:51:6b:e5:
                    3a:70:06:3e:78:2a:12:76:cb:8f:38:27:5e:b3:83:
                    2e:c2:a5:95:91:9a:50:23:a0:8c:19:10:7b:82:b7:
                    d8:62:65:16:80:7e:fa:ab:d7:6d:c7:d0:3f:fa:52:
                    16:c1:d2:fd:e1:e4:7b:1c:55:c0:4e:48:f3:1e:33:
                    8a:f7:1f:b5:f0:af:cc:f9:a1:b8:9b:01:47:3c:e2:
                    68:fc:c1:3c:87:e9:fa:b8:c6:31:36:12:94:17:24:
                    f5:64:1a:88:bf:87:3a:e7:01:cb:5f:50:8e:9b:41:
                    28:55:89:17:3a:63:3f:61:98:ee:6c:ec:a6:bf:46:
                    68:47:a2:10:c0:0e:73:13:b4:91:51:a6:6d:01:a5:
                    f8:76:6b:49:9a:f9:c8:3f:c4:7c:4b:87:fe:22:75:
                    c1:9b:b6:82:2b:b1:d2:b5:4e:e5:41:90:bf:9c:96:
                    93:52:11:30:74:95:8a:11:3e:8d:0d:4f:0d:b6:40:
                    e5:d3:ac:9a:b1:ac:53:d6:c9:0e:9e:34:09:f6:8e:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:F5:2D:60:D6:05:77:A5:BF:76:46:FD:20:57:31:3C:31:DA:7A
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:bd:fe:a1:72:7b:56:cd:d6:99:3e:27:91:0e:b7:88:1d:
         84:3a:71:07:e6:99:38:74:9a:eb:b6:3e:1a:df:90:79:f6:75:
         80:d3:c3:2f:04:8c:c3:f0:f3:9a:05:02:62:0a:f4:37:1e:8b:
         2d:c0:a9:a5:b0:64:ec:b6:73:53:0e:32:3d:d8:9e:b8:e0:7a:
         53:8a:45:8d:b1:09:7c:e3:ef:ad:8d:a4:d8:5f:15:cc:a8:cb:
         c7:ad:fb:da:9c:7f:50:42:2e:df:b3:9b:c3:04:3e:03:dd:ef:
         06:8a:2a:4e:58:75:ee:d7:bb:a0:76:40:94:97:a2:f1:60:17:
         5f:19:6b:1c:9c:a8:fc:6e:2d:09:44:98:67:06:36:a0:a5:69:
         19:22:1a:4b:06:8d:7f:d1:af:5e:27:27:8e:ad:b5:30:b6:2a:
         40:09:16:1f:fb:4b:bd:5a:e2:26:4a:b0:20:d2:a4:29:13:4e:
         1b:42:36:f4:7c:4b:8b:14:08:87:3b:39:18:1a:7d:46:35:b4:
         1d:f7:74:60:95:76:e2:0f:2b:bc:58:dd:3b:bb:02:9d:01:dd:
         11:48:50:0e:ac:c1:f5:08:55:c5:f2:af:de:ed:db:83:b3:88:
         f8:21:77:00:38:36:05:3b:0b:e2:f4:a6:a6:19:08:0f:0c:00:
         c7:2a:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:48 2025 by rpki-client