Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          KgQCtdSAmI2B7P7wIGxaMQ4eNKfghqvBGqN62/hpOTY=
Subject key identifier:   D9:3F:9A:92:69:26:F4:28:4B:AF:AD:8A:5A:47:AE:75:14:FB:DA:F4
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       28EC4A27B218084698B7AC99C97DB2E25EE63282
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 06 Mar 2025 22:10:34 +0000
ROA not before:           Thu 06 Mar 2025 22:05:34 +0000
ROA not after:            Thu 05 Mar 2026 22:10:34 +0000
asID:                     263650
IP address blocks:        138.255.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ec:4a:27:b2:18:08:46:98:b7:ac:99:c9:7d:b2:e2:5e:e6:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Mar  6 22:05:34 2025 GMT
            Not After : Mar  5 22:10:34 2026 GMT
        Subject: CN=D93F9A926926F4284BAFAD8A5A47AE7514FBDAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:c8:61:75:3a:46:cf:a5:7b:da:a5:ec:3a:
                    0f:98:d3:ff:50:c9:6c:53:90:cd:68:10:7b:6c:51:
                    99:32:0e:16:48:06:09:68:90:f7:8d:47:ff:3f:77:
                    60:6b:0d:5c:39:01:64:19:30:ab:e7:c3:3f:ef:8b:
                    46:39:0e:a1:2c:34:f0:b4:e8:95:56:e9:21:e3:0e:
                    42:7f:38:36:c6:16:dd:ab:28:38:4c:8d:9d:77:ee:
                    11:0d:2a:f2:fd:89:cf:64:01:ce:03:92:3b:dd:ab:
                    91:ea:57:f6:65:d7:28:3b:c2:14:d9:2e:e4:c0:27:
                    d9:d1:ee:13:90:02:bf:a5:bd:a7:17:de:47:81:b4:
                    49:68:86:9f:73:13:1d:98:29:33:1a:13:3e:a6:7a:
                    f7:11:44:19:08:96:05:77:c1:fd:1d:17:9d:d2:cf:
                    9e:16:eb:46:c5:5b:75:16:df:f2:a2:71:84:27:bc:
                    92:3e:90:b7:b0:e5:94:6a:94:20:e2:9b:9f:51:7a:
                    46:52:b4:a4:f3:12:7a:9c:67:ed:76:f9:6d:0d:32:
                    58:c9:bd:ff:a5:08:e9:c1:31:d9:ba:c5:65:e3:f7:
                    b3:2f:de:ee:53:3c:16:09:6a:fd:a5:5a:9c:9c:0e:
                    02:89:4d:1d:31:b0:1c:d1:a9:00:b5:7e:62:09:0d:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3F:9A:92:69:26:F4:28:4B:AF:AD:8A:5A:47:AE:75:14:FB:DA:F4
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:ca:95:bf:3f:65:f5:35:66:6f:6a:48:d1:2c:1e:70:2a:
         4a:ce:4f:46:a7:c4:dd:00:ac:68:9f:af:77:41:22:f3:93:69:
         55:e6:a0:3b:6a:10:7c:ac:8f:ac:05:cc:87:a0:fd:5c:cb:75:
         73:5f:41:a0:e7:86:72:de:a1:bb:92:27:04:f0:bc:6e:c0:e7:
         f6:cf:fd:1e:1e:f8:60:8f:8b:1c:8d:df:aa:54:69:ec:a6:31:
         1d:f9:5a:4f:a1:64:70:6e:6e:ec:05:5c:33:9e:2f:bc:31:6f:
         11:cf:db:20:cd:40:05:3e:bd:dd:f2:f4:f6:6e:90:9a:6a:20:
         7d:00:ef:33:f0:bb:8e:4f:13:fb:59:24:5b:3a:c4:f7:14:a0:
         96:63:c5:3d:9d:c8:85:ae:be:0f:78:70:ed:89:e6:64:4e:0d:
         f1:f1:c4:c6:31:6c:64:34:21:7b:ba:3a:5a:65:82:bd:5f:c6:
         d4:b8:04:6d:d4:f6:8e:9c:fa:4e:ad:32:ac:3f:2d:98:f8:f3:
         df:de:09:96:68:cd:54:65:1a:3e:ab:47:af:f6:61:63:87:cb:
         cd:e9:4b:8b:32:ab:a6:f1:6f:b2:f8:2e:6c:90:29:89:56:34:
         3f:b9:db:76:ca:07:42:f6:74:d1:56:01:e2:9f:85:fe:c0:b1:
         0a:bc:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:44 2025 by rpki-client