Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3232203d3e20323634313335.roa
File:                     3133382e39342e36342e302f32322d3232203d3e20323634313335.roa (raw, json)
Hash identifier:          fWdfMZ82uJXBqSJ7TQY93kZiFTnKWVMqzE7Zk3noxGc=
Subject key identifier:   75:9D:7B:92:8B:01:57:5A:E8:FE:0A:3A:A5:7E:E2:67:21:52:A0:9E
Certificate issuer:       /CN=8810214D39049DAE584E4DE0958ABBECE36C9558
Certificate serial:       5EE754FDFC0B7A3E2CAD42D49E45CCAB7DC5C75B
Authority key identifier: 88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3232203d3e20323634313335.roa
Signing time:             Fri 21 Feb 2025 23:52:40 +0000
ROA not before:           Fri 21 Feb 2025 23:47:40 +0000
ROA not after:            Fri 20 Feb 2026 23:52:40 +0000
asID:                     264135
IP address blocks:        138.94.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e7:54:fd:fc:0b:7a:3e:2c:ad:42:d4:9e:45:cc:ab:7d:c5:c7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810214D39049DAE584E4DE0958ABBECE36C9558
        Validity
            Not Before: Feb 21 23:47:40 2025 GMT
            Not After : Feb 20 23:52:40 2026 GMT
        Subject: CN=759D7B928B01575AE8FE0A3AA57EE2672152A09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:df:4f:52:14:06:94:40:27:d6:51:4e:4f:
                    35:b0:67:92:10:6f:7a:5d:5a:b2:42:f5:91:7b:dd:
                    4a:bc:ef:46:6e:cb:55:93:1a:b4:61:d0:40:35:a9:
                    42:9b:a6:54:2b:15:64:7b:0c:12:35:9c:2e:72:ba:
                    8c:af:ac:fa:48:02:f8:82:9b:16:4f:56:03:f1:ac:
                    c2:05:93:a6:26:ae:00:1a:48:d9:cc:35:52:1b:b9:
                    e7:00:45:0e:50:bd:68:39:41:90:d5:e5:49:de:7b:
                    5d:69:51:3b:80:67:e1:63:76:54:5f:32:e8:bd:96:
                    64:59:62:6c:1d:f7:4f:82:76:33:a3:3a:50:e2:93:
                    1b:56:1d:c1:4f:4a:d1:c6:86:f0:04:57:fe:d4:5f:
                    c2:81:47:3d:c6:87:6c:9d:5a:57:be:0d:71:66:46:
                    d8:30:1b:42:f7:f5:70:69:9e:a8:ab:9e:0e:65:4a:
                    e2:76:78:7c:bf:ed:8c:38:4d:7a:c4:6e:12:da:36:
                    0a:9b:81:47:c9:c7:b4:4c:16:48:d0:cd:6c:46:ac:
                    ca:35:6d:76:a3:c7:43:b1:fe:c7:53:82:fc:c5:20:
                    d0:2f:1f:b8:ee:7b:af:ec:60:a9:cb:a6:d8:6f:72:
                    e9:be:5c:64:3c:1a:b5:8e:9d:7d:22:23:74:6d:02:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:7B:92:8B:01:57:5A:E8:FE:0A:3A:A5:7E:E2:67:21:52:A0:9E
            X509v3 Authority Key Identifier:
                keyid:88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3232203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:17:f4:a3:bf:f8:f8:8e:a8:44:36:23:b9:45:13:4e:12:15:
         ad:bf:d5:24:bc:d5:9e:9f:d5:30:6b:e9:0d:53:1d:73:e8:7a:
         72:0f:00:82:df:9f:94:d0:de:a1:f3:f8:65:e8:30:8b:03:d0:
         0c:82:d5:9c:2f:0b:66:5f:ef:d0:17:ef:d5:17:e6:b9:d2:31:
         37:eb:6b:36:4c:2e:ca:b8:9c:f9:3c:90:c0:7c:df:b3:e7:2d:
         be:75:a5:6c:c0:35:21:79:49:bc:40:cd:c0:46:17:b9:0c:15:
         92:b3:8c:dd:63:48:08:a9:16:17:e5:c5:e1:7b:49:65:e6:fd:
         7f:8a:ca:61:04:61:2a:2b:da:66:19:80:eb:18:d8:43:a5:2e:
         e3:35:da:f9:bd:6f:fc:7a:2e:80:f9:de:7a:04:f7:34:b8:51:
         3a:6e:a8:c2:a3:98:b0:96:d4:55:2a:23:cb:e4:6d:9c:31:e0:
         ba:d8:78:e8:44:46:1c:a5:4e:7c:78:e9:69:31:01:2b:b1:91:
         ef:22:27:17:8a:2a:5f:f7:44:76:f2:12:d5:0c:30:66:c3:d1:
         2f:4f:bd:ae:ec:ce:9d:06:a2:37:0a:b6:99:f6:c7:51:1d:13:
         29:a5:c8:81:ef:e1:de:e6:eb:90:44:e1:54:42:38:c6:b3:e0:
         0a:d8:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:16:15 2025 by rpki-client