Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dLzW6bh3NQwJmMWzZbjPKPXnw1pXenZGDm5FZZedswf/0/3133382e39372e3235342e302f32342d3234203d3e20323634323133.roa
File:                     3133382e39372e3235342e302f32342d3234203d3e20323634323133.roa (raw, json)
Hash identifier:          KxDwowHbj13HwRkcC1Sjbcn/UszscmsSn5w+muuGmYo=
Subject key identifier:   A2:02:66:49:60:9F:F4:F6:F7:2A:B6:B3:0A:C8:E1:74:A9:23:4B:92
Certificate issuer:       /CN=6F4C63A4D0FB6DBE584E4E8C7C088B83DD2C6C89
Certificate serial:       61535DFD2DA7D34F279063C38EB48849472FAB5D
Authority key identifier: 6F:4C:63:A4:D0:FB:6D:BE:58:4E:4E:8C:7C:08:8B:83:DD:2C:6C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4C63A4D0FB6DBE584E4E8C7C088B83DD2C6C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dLzW6bh3NQwJmMWzZbjPKPXnw1pXenZGDm5FZZedswf/0/3133382e39372e3235342e302f32342d3234203d3e20323634323133.roa
Signing time:             Tue 18 Jan 2022 17:58:04 +0000
ROA not before:           Tue 18 Jan 2022 17:53:04 +0000
ROA not after:            Tue 17 Jan 2023 17:58:04 +0000
asID:                     264213
IP address blocks:        138.97.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:53:5d:fd:2d:a7:d3:4f:27:90:63:c3:8e:b4:88:49:47:2f:ab:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F4C63A4D0FB6DBE584E4E8C7C088B83DD2C6C89
        Validity
            Not Before: Jan 18 17:53:04 2022 GMT
            Not After : Jan 17 17:58:04 2023 GMT
        Subject: CN=A2026649609FF4F6F72AB6B30AC8E174A9234B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:75:16:37:3b:71:ee:c6:9b:56:a2:1a:92:
                    8d:82:65:b9:01:70:c2:a7:e5:b4:f7:97:a8:93:11:
                    08:e7:e3:98:b8:aa:38:b9:e8:1a:27:4d:25:02:7f:
                    4e:88:18:75:40:92:50:61:f6:80:28:38:7f:42:0e:
                    7e:ce:80:a5:36:80:b0:70:14:75:e7:c2:54:37:80:
                    63:4a:4d:bd:2e:0d:99:14:17:ae:70:11:5c:7a:43:
                    e7:a7:12:d8:75:c2:53:fa:39:a9:82:d5:16:0d:47:
                    75:d0:9d:15:34:7f:31:8d:68:c8:33:e1:58:c2:65:
                    1b:3f:e6:f9:21:b6:5c:6f:2e:0e:4c:20:d6:7d:24:
                    22:18:b8:91:a6:f2:a4:e1:ba:cd:17:e3:3f:ca:ed:
                    97:37:d9:a6:dd:a7:3b:49:ff:9a:db:14:06:d2:9a:
                    90:3e:46:42:e9:41:b7:12:11:c2:e6:f0:25:74:b5:
                    58:34:84:b7:24:de:5a:d9:4b:25:c6:b0:20:bf:5a:
                    a9:c9:6a:08:90:5d:2e:75:f4:19:5d:e0:78:f2:a4:
                    d1:06:86:dc:5b:7a:e7:2f:e6:de:55:36:9c:56:9c:
                    03:61:ed:1a:12:94:69:d4:00:78:3d:45:20:86:ea:
                    81:39:11:97:84:78:a9:99:be:32:36:bb:27:46:b0:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:02:66:49:60:9F:F4:F6:F7:2A:B6:B3:0A:C8:E1:74:A9:23:4B:92
            X509v3 Authority Key Identifier:
                keyid:6F:4C:63:A4:D0:FB:6D:BE:58:4E:4E:8C:7C:08:8B:83:DD:2C:6C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dLzW6bh3NQwJmMWzZbjPKPXnw1pXenZGDm5FZZedswf/0/6F4C63A4D0FB6DBE584E4E8C7C088B83DD2C6C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F4C63A4D0FB6DBE584E4E8C7C088B83DD2C6C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dLzW6bh3NQwJmMWzZbjPKPXnw1pXenZGDm5FZZedswf/0/3133382e39372e3235342e302f32342d3234203d3e20323634323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:85:52:49:aa:79:5f:39:8b:aa:36:1e:cf:86:1d:20:d5:
         08:f9:dd:87:c8:61:5d:00:d3:01:60:bb:c0:4e:d2:2f:ee:af:
         f3:74:90:df:1e:2c:99:2d:19:18:a9:35:9e:9e:c2:f9:50:6d:
         2e:6f:f0:fc:bd:23:6c:06:df:72:f3:32:4c:50:8b:12:44:73:
         68:d1:38:4d:a2:9f:3a:bf:04:dc:da:46:ac:f4:0f:93:f4:aa:
         e2:54:f5:be:b3:db:de:d2:c7:84:54:ef:1b:81:88:b6:9a:78:
         d6:b6:88:bb:1b:5b:2b:d2:45:86:fd:45:f5:c9:0f:ac:31:13:
         3c:62:c4:52:1f:aa:73:ed:e2:fe:d8:f0:3e:35:bc:58:c2:7d:
         06:f3:8f:f5:4f:6b:80:98:0e:64:54:c1:17:4b:4c:46:47:ae:
         ad:bc:7f:49:d9:29:89:6b:43:43:37:a7:bf:8a:05:45:e5:42:
         6a:31:c8:65:43:ca:c1:b8:12:61:3c:0e:c8:08:65:9b:41:4b:
         c9:40:4b:ad:e1:d0:dd:10:08:ae:2a:a1:c4:87:a2:97:94:1d:
         12:c7:1d:06:10:05:44:fe:be:b5:3e:7e:23:b0:1f:40:9b:f2:
         d0:53:b0:85:af:c7:5a:03:cb:d9:3c:b6:c1:ab:ae:b9:c0:99:
         70:2a:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:56 2025 by rpki-client