Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
File:                     3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          XTNgTlKzEKHoY+AwjfuuNLdshdaPumsontRzci1tGcE=
Subject key identifier:   38:B7:5E:D6:21:BD:9D:EC:5E:F0:6D:73:67:B8:6A:3F:AA:C0:61:B6
Certificate issuer:       /CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
Certificate serial:       54A80A139950940590923F2E0123D214F6E3C563
Authority key identifier: AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
Signing time:             Thu 06 Mar 2025 09:00:08 +0000
ROA not before:           Thu 06 Mar 2025 08:55:08 +0000
ROA not after:            Thu 05 Mar 2026 09:00:08 +0000
asID:                     263903
IP address blocks:        138.204.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a8:0a:13:99:50:94:05:90:92:3f:2e:01:23:d2:14:f6:e3:c5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
        Validity
            Not Before: Mar  6 08:55:08 2025 GMT
            Not After : Mar  5 09:00:08 2026 GMT
        Subject: CN=38B75ED621BD9DEC5EF06D7367B86A3FAAC061B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:6f:35:77:34:94:96:75:77:0e:0f:73:c7:
                    af:11:22:e6:96:c6:1f:ad:5d:7e:d8:f0:c9:44:99:
                    19:f2:27:28:a3:27:ec:cb:21:2b:49:77:d2:f8:b9:
                    a9:68:84:25:a2:8b:09:cc:eb:08:e5:a6:26:9c:66:
                    93:e9:9b:fd:c4:f8:74:52:6e:43:22:6c:b0:e7:af:
                    cb:c0:e2:a8:cd:05:4b:6a:10:79:ed:82:a9:23:38:
                    46:43:56:47:26:53:44:66:e1:79:7b:0c:20:5c:62:
                    78:bf:8b:85:04:19:66:62:27:11:8b:03:b5:4a:bd:
                    c6:33:a6:5c:e3:79:e1:10:ce:1c:b2:0f:c6:02:2f:
                    8c:da:2e:93:cf:c7:1e:7e:db:ef:35:d0:75:17:fd:
                    d2:6b:05:1d:43:e6:f1:f3:0d:64:a9:31:29:07:92:
                    eb:5b:5d:ff:32:f2:4d:56:c6:a2:c7:3a:47:7f:5d:
                    44:03:5c:62:c8:bd:ff:d9:d8:30:46:07:02:9d:27:
                    60:22:16:7c:15:10:2d:e2:b6:d7:ff:e8:e1:05:9b:
                    7c:60:c6:8e:37:89:e8:8c:c0:ad:ce:67:ae:b1:80:
                    5f:af:07:c9:6b:08:95:9a:b4:7a:20:f1:98:30:0e:
                    67:ba:9f:e9:fc:46:9e:8c:a6:6f:ae:3b:29:97:1e:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:5E:D6:21:BD:9D:EC:5E:F0:6D:73:67:B8:6A:3F:AA:C0:61:B6
            X509v3 Authority Key Identifier:
                keyid:AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:e3:e7:78:c6:38:07:d0:fb:16:e8:e8:fd:aa:b6:64:58:
         a1:89:fd:1d:5d:85:b9:d0:c8:73:83:c5:2b:09:36:b0:5a:14:
         3b:6c:3a:b4:df:dd:73:b0:ab:75:01:e7:02:49:94:d9:f5:84:
         cf:8e:85:bf:ae:03:da:00:be:cc:63:f8:7b:ce:8a:1d:95:f4:
         a5:26:7b:ab:6e:78:b5:28:c3:73:34:e5:fa:dd:b5:ca:0a:49:
         43:28:f8:9a:a8:b0:20:28:24:f9:04:31:f7:d6:c3:29:4f:c8:
         69:43:af:df:a5:4f:2c:46:13:24:ac:ea:fb:36:ba:24:c1:96:
         09:88:e7:4d:df:bf:95:d3:3d:a2:e5:4a:ed:a1:55:74:89:a5:
         86:31:3e:a8:30:04:51:94:13:74:8f:d0:29:3a:6e:98:ce:a1:
         22:a4:c7:b5:5d:13:39:c0:e5:b2:7d:36:ac:25:d2:1e:ba:2c:
         65:7d:7b:a9:fd:3b:76:72:a3:49:de:8b:2d:57:11:91:86:36:
         86:d9:7b:2e:1a:7a:31:5c:ce:9c:30:14:fd:cf:da:91:d0:4b:
         50:3d:87:04:a5:c6:e6:0c:51:42:c8:0a:02:56:29:48:28:c6:
         cf:9b:3f:d2:e1:05:ae:b2:8a:35:41:04:90:8b:e1:0e:ff:6f:
         d7:c2:9f:5f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVKgKE5lQlAWQkj8uASPSFPbjxWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxQzA1ODkwOTgyNkU4RURGMTNDNTU0Q0FBODU4RUM1
OUNBMTQ1NTAeFw0yNTAzMDYwODU1MDhaFw0yNjAzMDUwOTAwMDhaMDMxMTAvBgNV
BAMTKDM4Qjc1RUQ2MjFCRDlERUM1RUYwNkQ3MzY3Qjg2QTNGQUFDMDYxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lm81dzSUlnV3Dg9zx68RIuaW
xh+tXX7Y8MlEmRnyJyijJ+zLIStJd9L4ualohCWiiwnM6wjlpiacZpPpm/3E+HRS
bkMibLDnr8vA4qjNBUtqEHntgqkjOEZDVkcmU0Rm4Xl7DCBcYni/i4UEGWZiJxGL
A7VKvcYzplzjeeEQzhyyD8YCL4zaLpPPxx5+2+810HUX/dJrBR1D5vHzDWSpMSkH
kutbXf8y8k1WxqLHOkd/XUQDXGLIvf/Z2DBGBwKdJ2AiFnwVEC3ittf/6OEFm3xg
xo43ieiMwK3OZ66xgF+vB8lrCJWatHog8ZgwDme6n+n8Rp6Mpm+uOymXHqYHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOLde1iG9nexe8G1zZ7hqP6rAYbYwHwYDVR0j
BBgwFoAUrhwFiQmCbo7fE8VUyqhY7FnKFFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng1MWlucWhnYmhiQjlTd2R1RjE2eVpmSFBacmtLWmJFZGZzUnlZNkRL
QWUvMS9BRTFDMDU4OTA5ODI2RThFREYxM0M1NTRDQUE4NThFQzU5Q0ExNDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMUMwNTg5MDk4MjZFOEVE
RjEzQzU1NENBQTg1OEVDNTlDQTE0NTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4NTFpbnFoZ2JoYkI5U3dkdUYxNnlaZkhQWnJrS1piRWRmc1J5WTZES0FlLzEv
MzEzMzM4MmUzMjMwMzQyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMjDANBgkqhkiG9w0BAQsFAAOCAQEAP6Lj
53jGOAfQ+xbo6P2qtmRYoYn9HV2FudDIc4PFKwk2sFoUO2w6tN/dc7CrdQHnAkmU
2fWEz46Fv64D2gC+zGP4e86KHZX0pSZ7q254tSjDczTl+t21ygpJQyj4mqiwICgk
+QQx99bDKU/IaUOv36VPLEYTJKzq+za6JMGWCYjnTd+/ldM9ouVK7aFVdImlhjE+
qDAEUZQTdI/QKTpumM6hIqTHtV0TOcDlsn02rCXSHrosZX17qf07dnKjSd6LLVcR
kYY2htl7Lhp6MVzOnDAU/c/akdBLUD2HBKXG5gxRQsgKAlYpSCjGz5s/0uEFrrKK
NUEEkIvhDv9v18KfXw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:13 2025 by rpki-client