Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138312e302f32342d3234203d3e203631363636.roa
File:                     3133382e39342e3138312e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          Wl3rv98MigVuCKaxJIBH2AdcO/CuYDfcOQ87EYM6qzA=
Subject key identifier:   F3:03:CD:3C:19:71:5C:B5:1A:10:79:6D:47:A1:16:AE:C9:FE:96:A5
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       08314A1B47DA5A0DE652E0A3700C6E3861902912
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138312e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:55 +0000
ROA not before:           Thu 14 Dec 2023 13:15:55 +0000
ROA not after:            Thu 12 Dec 2024 13:20:55 +0000
asID:                     61666
IP address blocks:        138.94.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:31:4a:1b:47:da:5a:0d:e6:52:e0:a3:70:0c:6e:38:61:90:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:55 2023 GMT
            Not After : Dec 12 13:20:55 2024 GMT
        Subject: CN=F303CD3C19715CB51A10796D47A116AEC9FE96A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:1f:2d:e9:70:25:fe:a1:cb:d1:23:4a:92:
                    7b:f2:d5:99:43:b5:8a:aa:9d:13:9a:a2:af:60:09:
                    25:96:0f:2b:a1:c8:0f:0e:3f:86:1d:6a:48:1b:e0:
                    71:dd:53:a9:82:14:28:c8:4d:0b:7b:ad:49:3d:f8:
                    2f:d3:8e:fc:6c:e2:4c:c4:1f:9e:99:ce:b8:f8:54:
                    de:87:db:83:c5:41:68:14:cb:a2:a5:98:ec:c4:63:
                    c2:78:09:01:9a:e9:af:6e:d3:e2:5f:9b:91:69:7a:
                    16:a8:89:f2:1a:81:c9:b7:21:29:23:dc:6e:0e:36:
                    87:30:1c:2f:51:a3:b5:8b:58:14:86:d6:98:3b:a2:
                    74:a2:d6:87:87:f1:a3:e9:cf:de:5c:f5:52:b7:cb:
                    a3:c6:66:28:ec:b4:f8:f5:f0:57:2a:a2:30:3b:6e:
                    53:25:8c:87:6d:d8:d9:52:df:68:5c:72:5b:fc:eb:
                    66:43:dc:bd:87:b8:da:9d:78:03:67:9f:91:7f:ba:
                    28:aa:f7:ec:e6:5f:3f:0e:9b:6a:d6:30:24:4b:a0:
                    e2:cd:ce:a4:78:b0:2c:a7:04:fb:04:26:e0:cf:78:
                    cc:05:c5:f2:ad:94:1f:86:91:1f:ae:44:2a:17:ba:
                    13:61:4f:ec:61:03:b0:20:aa:06:68:68:28:a3:57:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:CD:3C:19:71:5C:B5:1A:10:79:6D:47:A1:16:AE:C9:FE:96:A5
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e39342e3138312e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:93:4a:06:59:82:60:a5:0b:29:7c:42:92:6d:d0:c7:d5:af:
         68:64:19:0f:94:0d:a0:24:20:5d:16:b0:56:8a:d8:2f:83:40:
         5c:04:1f:85:6b:af:f8:ea:10:a0:bf:06:3c:d7:3c:5f:0c:65:
         53:32:30:0d:c1:29:e3:15:e2:b8:cc:04:a7:90:86:34:24:0d:
         23:ef:f5:2c:f4:10:b3:4a:4e:fb:d6:01:cc:6f:ce:6b:0d:78:
         92:3c:da:63:46:72:c7:6f:cd:2a:a9:d8:ac:89:2b:2d:41:89:
         f3:92:30:78:d4:f8:05:56:fb:39:51:9d:b9:81:59:97:b1:d6:
         40:ed:81:1c:74:4e:89:50:a0:c2:26:6f:00:bf:af:86:e2:f2:
         69:00:c5:ed:8c:c6:e2:2f:3a:86:87:54:23:75:1a:de:4b:87:
         81:7c:0e:2e:2c:01:c4:36:b4:d1:80:3a:e3:fd:25:0e:35:c8:
         84:1f:99:76:51:99:a3:9c:39:96:c8:ea:3b:e3:87:7e:b1:fb:
         26:f4:14:44:74:0e:e8:1d:c2:ed:e5:62:14:9a:8d:30:b5:1c:
         85:ad:e1:f1:b8:87:1d:e7:fe:85:ea:7f:e4:9a:0d:b5:66:a1:
         18:d1:4e:b6:30:0b:34:f5:b8:34:2e:8f:33:30:a4:79:7d:ff:
         c8:17:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:22 2025 by rpki-client