Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33302e302f32342d3234203d3e20323634313030.roa
File:                     3133382e39342e33302e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          94180Mm8kN7IXxuRcH82fqQNbqgRr90kX9spOLONqh4=
Subject key identifier:   59:9B:A6:24:0B:D9:2F:02:0C:9C:2C:36:27:2B:BE:53:74:6E:20:7D
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       6247A61003073E685BDA88A5D3A9A1655DFAE396
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33302e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:07:38 +0000
ROA not before:           Mon 02 Dec 2024 12:02:38 +0000
ROA not after:            Mon 01 Dec 2025 12:07:38 +0000
asID:                     264100
IP address blocks:        138.94.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:47:a6:10:03:07:3e:68:5b:da:88:a5:d3:a9:a1:65:5d:fa:e3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:02:38 2024 GMT
            Not After : Dec  1 12:07:38 2025 GMT
        Subject: CN=599BA6240BD92F020C9C2C36272BBE53746E207D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1f:db:44:d8:32:26:4a:da:38:91:15:c2:44:
                    af:5e:8d:36:63:aa:3c:62:db:46:9b:0d:79:04:75:
                    bf:0e:65:0b:0a:aa:fc:52:a1:15:36:30:c6:e2:a3:
                    54:3e:df:5b:4a:fd:d0:ff:66:0a:9c:68:9f:94:fe:
                    e3:a5:58:5d:36:a6:8f:c5:2c:04:5c:02:0f:78:27:
                    4e:5a:25:bc:f3:97:11:46:cd:c7:06:b6:96:5a:14:
                    32:a8:fa:2b:3c:31:ec:64:bf:b0:e3:9e:8f:5c:2f:
                    10:5a:4e:f8:a5:f2:05:b9:ca:38:ab:df:9e:bc:e9:
                    e1:d7:5e:26:4b:3f:cb:7b:ab:25:70:98:97:4b:88:
                    18:c4:ab:fd:7c:76:16:f2:a9:61:8b:76:3a:01:82:
                    40:3d:cb:a9:2d:83:87:16:a6:33:8e:06:f5:d1:7b:
                    b2:9f:2f:98:4b:c3:f0:1a:f1:a9:98:f2:7f:05:b2:
                    83:1b:61:6e:8e:56:2c:67:d1:6e:8c:b8:51:d3:c2:
                    e4:ff:4e:91:e1:46:24:47:49:88:5b:ac:16:5d:bb:
                    fe:ed:c2:5b:a0:cc:d2:31:64:da:94:5d:96:f5:c3:
                    fc:19:42:18:b9:62:c0:e9:5d:f3:15:e9:21:4c:c7:
                    14:c0:a6:f6:e3:c4:81:df:d8:5f:c8:f3:d1:4f:95:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:A6:24:0B:D9:2F:02:0C:9C:2C:36:27:2B:BE:53:74:6E:20:7D
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3133382e39342e33302e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:47:db:c6:fb:25:9b:b1:10:e3:a2:d0:9b:25:b8:85:84:cf:
         7f:38:fe:e1:37:d5:ad:c9:77:43:49:f3:52:2c:7b:7e:bc:79:
         f9:37:32:34:07:4a:0a:d7:4b:d3:6d:ab:03:76:1c:ba:fb:a0:
         88:b9:d8:23:a9:57:14:5a:bb:ce:21:bb:e9:63:df:bf:ef:41:
         42:48:45:a2:e4:ea:67:67:88:2d:0a:b5:c0:67:10:4f:2a:ea:
         31:79:4d:c8:d6:31:a3:83:41:89:aa:33:2c:75:9b:e3:37:13:
         85:89:3f:eb:a9:61:42:5b:1d:56:10:ba:c2:fd:f3:43:24:70:
         1a:08:e0:2f:d0:ec:3d:d7:58:8c:52:a3:8f:d0:7b:f5:1e:a9:
         f3:a1:31:78:68:16:b5:3e:a6:15:52:9f:30:22:8b:0e:0c:3f:
         25:71:e9:1b:cc:6f:82:cd:8c:98:18:67:ae:67:b3:a5:48:a3:
         12:2f:b2:c1:fe:32:57:48:1a:1c:b2:e5:22:c1:1e:d2:72:17:
         b4:13:2f:1f:9c:aa:0b:02:83:ef:33:33:73:d1:02:f5:0c:a6:
         32:fb:38:9f:cc:d3:3f:ed:ae:a1:2f:dc:65:6c:56:00:ae:69:
         02:c5:89:10:64:50:d4:c2:f2:e7:bc:8a:12:15:bf:59:c3:42:
         76:5d:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:31 2025 by rpki-client