Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134322e302f32332d3233203d3e20323633393033.roa
File:                     3133382e3230342e3134322e302f32332d3233203d3e20323633393033.roa (raw, json)
Hash identifier:          dHkOJxM+A2atS1sjTtYzAylZD51yf8CfBg0PX0c3wLU=
Subject key identifier:   1B:5B:A1:43:23:98:5E:D9:B0:36:71:00:94:0E:0D:D4:34:C8:BE:A7
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       59F978AF893EB37AA0BD4180358C409F7CEAEFD1
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134322e302f32332d3233203d3e20323633393033.roa
Signing time:             Fri 23 Dec 2022 20:33:19 +0000
ROA not before:           Fri 23 Dec 2022 20:28:19 +0000
ROA not after:            Fri 22 Dec 2023 20:33:19 +0000
asID:                     263903
IP address blocks:        138.204.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:78:af:89:3e:b3:7a:a0:bd:41:80:35:8c:40:9f:7c:ea:ef:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Dec 23 20:28:19 2022 GMT
            Not After : Dec 22 20:33:19 2023 GMT
        Subject: CN=1B5BA14323985ED9B0367100940E0DD434C8BEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:ea:96:03:53:be:b6:4f:1d:28:bd:b5:2b:
                    ca:01:33:d6:4c:b8:4d:c3:59:95:55:1c:a3:ee:4f:
                    72:74:ab:4c:ef:08:86:93:d2:8c:97:38:91:cb:15:
                    83:ee:fa:59:a8:b9:ef:28:0a:a1:60:56:c2:9d:7a:
                    32:66:30:92:80:8d:e1:27:0d:af:46:d1:7d:7e:55:
                    b6:72:c3:fd:2f:d4:4b:b0:c6:fb:cc:3e:6d:1b:60:
                    c0:e3:cb:fa:0d:d4:63:97:dd:97:d8:65:2c:96:3f:
                    af:25:c5:16:80:e3:bc:fa:41:94:2b:54:d8:14:75:
                    62:f9:cb:14:00:18:89:2d:22:fd:40:67:11:c5:c6:
                    a9:e3:e9:fe:f7:c5:df:ae:5e:63:d5:a0:df:68:cc:
                    a6:41:67:49:c5:0a:f0:62:44:37:10:a6:56:71:48:
                    f1:9e:f3:77:78:8a:a1:a2:69:24:1b:35:f6:95:5c:
                    4f:66:de:93:14:d0:98:38:7c:4e:15:b3:76:7e:23:
                    1c:10:62:8d:d0:cf:17:17:23:76:12:46:ba:d8:49:
                    b0:a6:40:0f:7a:46:27:11:cb:a9:de:ef:cd:76:28:
                    94:3e:63:a6:9c:75:e5:bc:a3:56:e6:ed:f8:d6:a4:
                    e1:92:c3:64:61:80:5d:39:2e:58:23:23:21:36:14:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:A1:43:23:98:5E:D9:B0:36:71:00:94:0E:0D:D4:34:C8:BE:A7
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134322e302f32332d3233203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:4f:1c:37:27:6c:9d:64:4e:95:92:bb:25:68:fc:d0:46:
         41:0c:53:d8:d9:96:01:3a:94:83:fd:89:b1:74:97:48:52:1d:
         87:d7:5b:2f:bf:f4:06:54:81:82:39:59:2f:b6:e2:c5:86:47:
         3f:bc:fb:e1:98:23:1c:b4:fd:eb:13:df:68:27:fb:7b:d8:c7:
         c6:fe:33:27:b6:06:bd:62:cc:eb:75:24:b6:e9:8f:26:eb:06:
         be:6c:f4:84:a2:91:17:43:51:7e:f5:b6:98:32:9b:4e:15:49:
         08:c8:83:1b:01:92:e0:69:33:ea:d9:2c:0a:73:8e:b1:60:59:
         7d:f3:05:8f:fa:88:3f:6b:d6:a2:52:4b:b1:44:a2:99:6a:96:
         24:e4:b4:5c:76:d2:80:76:3a:fa:38:04:b8:fb:8b:02:cb:f6:
         13:68:61:84:d4:3c:78:09:64:1d:7c:c7:89:4f:b7:ab:55:26:
         eb:eb:6b:9a:d9:0e:7d:ab:73:1b:ed:f6:40:74:ae:e4:dd:e3:
         24:35:72:27:12:1e:5f:e6:a5:6b:19:38:4f:85:b8:ca:85:9f:
         51:b7:04:a8:40:b4:07:5c:46:d9:8c:90:4d:eb:55:cc:72:a1:
         f3:41:55:cb:b5:70:63:11:57:4b:8b:01:82:46:9a:6a:76:6e:
         39:3d:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:13 2025 by rpki-client