Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa
File:                     3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          mmIj65E0kyjnP7bUFrpAZE7zIdmCNx4JSShjnc+c9yI=
Subject key identifier:   92:48:3B:A9:F1:76:92:AE:B6:90:22:9B:37:E0:89:3F:6B:84:9B:AF
Certificate issuer:       /CN=BB31F175410F355458BCA52FD0C920629720C520
Certificate serial:       2B6D56D555144BDDC0E6A2545CB94727E7086717
Authority key identifier: BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa
Signing time:             Mon 01 Jul 2024 02:26:24 +0000
ROA not before:           Mon 01 Jul 2024 02:21:24 +0000
ROA not after:            Mon 30 Jun 2025 02:26:24 +0000
asID:                     263888
IP address blocks:        138.204.132.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:56:d5:55:14:4b:dd:c0:e6:a2:54:5c:b9:47:27:e7:08:67:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB31F175410F355458BCA52FD0C920629720C520
        Validity
            Not Before: Jul  1 02:21:24 2024 GMT
            Not After : Jun 30 02:26:24 2025 GMT
        Subject: CN=92483BA9F17692AEB690229B37E0893F6B849BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:79:c3:53:77:16:86:a4:c6:33:82:34:e6:
                    f1:01:ed:e3:90:cd:c1:13:70:e7:ca:0d:70:f1:15:
                    a9:36:63:43:98:0b:ae:f8:8f:fa:8d:ac:7d:22:0b:
                    77:7e:f9:59:db:0a:bd:47:70:c6:23:03:11:e0:25:
                    47:11:ce:20:fe:10:4c:c1:33:5b:0f:a6:59:64:2d:
                    2a:24:a2:ca:44:89:01:6a:24:7e:74:a0:2e:ef:8a:
                    f2:a6:8b:a8:3a:be:9e:cc:22:a1:58:d2:2f:51:49:
                    12:b5:b3:d3:5e:a3:a3:2d:aa:a7:b2:8a:ca:64:62:
                    f9:81:83:d2:2e:23:39:3c:6b:f9:9a:d2:5e:5d:69:
                    97:f1:66:d0:ec:6d:ce:1b:65:15:51:14:1d:54:4f:
                    30:1f:e6:1e:e0:55:c6:39:d0:1a:eb:ba:87:f4:0f:
                    3d:e6:ac:53:db:86:5e:6e:28:a4:78:2a:3e:94:9d:
                    48:6c:31:4e:ab:ca:2f:50:38:f3:49:fb:bc:c6:e3:
                    59:2c:43:ba:98:ba:2d:28:19:2e:51:36:0c:6a:11:
                    55:03:a1:dc:62:a8:94:dc:aa:bf:f4:12:87:f2:c0:
                    cd:91:45:e1:5a:c3:4d:49:c6:73:1e:f3:9a:9f:2b:
                    91:00:a5:90:cb:d8:3d:1e:ea:39:b7:3e:41:bb:74:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:48:3B:A9:F1:76:92:AE:B6:90:22:9B:37:E0:89:3F:6B:84:9B:AF
            X509v3 Authority Key Identifier:
                keyid:BB:31:F1:75:41:0F:35:54:58:BC:A5:2F:D0:C9:20:62:97:20:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/BB31F175410F355458BCA52FD0C920629720C520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB31F175410F355458BCA52FD0C920629720C520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32322d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:49:bf:7a:9e:66:1b:ba:4c:b0:22:6e:59:12:04:91:58:
         24:ee:75:b8:da:a5:b7:18:05:82:d1:de:16:1b:51:f7:67:77:
         11:4f:4f:e4:ed:69:d9:f2:99:e6:cd:fe:ce:53:d3:ed:46:fb:
         fe:a6:e6:56:56:8f:77:de:40:68:7d:bc:c9:ce:f7:72:2b:7c:
         18:08:6a:ba:b2:c6:b0:02:05:01:07:1e:9b:cc:e5:66:9c:aa:
         b4:28:1d:ee:0f:0d:36:d2:02:31:18:70:dc:68:1c:9f:64:39:
         83:1b:a6:94:a4:ed:c3:33:56:38:df:f4:ef:ce:5a:82:4c:75:
         2e:a7:09:dd:3a:f0:2c:6c:47:ae:db:a1:4c:34:41:d8:f7:44:
         8a:c3:87:b1:7d:da:1f:d3:28:da:50:53:10:1d:61:20:ad:db:
         e3:57:fa:60:57:41:91:29:c6:3f:86:be:9d:de:5f:44:aa:93:
         aa:5f:0a:be:73:fe:fd:a8:59:64:2b:a1:78:76:3d:ea:31:e5:
         14:b0:7b:82:27:da:24:10:9c:c1:1f:f1:26:5e:66:06:1d:41:
         65:e1:ad:c3:ce:34:c5:b2:6c:ce:6f:8c:8d:01:4f:90:31:b2:
         06:44:e2:bf:72:78:a8:9d:67:2f:ca:02:3e:46:a2:1f:14:aa:
         38:0e:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:13 2025 by rpki-client