Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa
File:                     3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa (raw, json)
Hash identifier:          qHgIIcci4AqHxLp4GrtqGnCFUwgRqBkzsiqsJ2ZuRtY=
Subject key identifier:   98:F5:49:1C:68:6E:B8:E2:B3:1E:A2:44:78:C8:F5:2B:3C:2B:5D:7E
Certificate issuer:       /CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
Certificate serial:       1EABB551DFB9F1A8F4B3CBBABDC99DB0091EC634
Authority key identifier: 00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa
Signing time:             Wed 17 Jul 2024 23:31:46 +0000
ROA not before:           Wed 17 Jul 2024 23:26:46 +0000
ROA not after:            Wed 16 Jul 2025 23:31:46 +0000
asID:                     264192
IP address blocks:        138.97.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ab:b5:51:df:b9:f1:a8:f4:b3:cb:ba:bd:c9:9d:b0:09:1e:c6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006D9C0C7B1A094EAEF0DFE61C6F2E004336858F
        Validity
            Not Before: Jul 17 23:26:46 2024 GMT
            Not After : Jul 16 23:31:46 2025 GMT
        Subject: CN=98F5491C686EB8E2B31EA24478C8F52B3C2B5D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:e3:a8:11:71:a1:09:bf:df:1e:7b:24:2e:
                    0d:cb:2c:19:8f:8e:69:33:c3:2f:58:42:6d:96:cd:
                    48:e9:a5:b1:87:62:e0:9d:07:24:f9:5d:bb:db:9a:
                    f3:44:dd:55:51:3d:ce:75:e4:17:1e:95:2e:0a:15:
                    2c:6b:be:a9:d6:18:b6:5e:6f:c8:eb:0c:6e:b3:0c:
                    31:cc:eb:20:fc:b0:8f:ee:af:ba:24:73:82:97:25:
                    e2:f8:ad:10:7b:18:7e:6d:d0:a5:7f:2f:63:3e:68:
                    ed:d3:e1:96:8d:d1:b4:58:de:c1:5c:64:8f:da:2a:
                    5f:55:20:de:c7:50:73:c1:5e:87:e9:1d:62:32:14:
                    c2:79:b3:51:87:1f:73:80:30:e8:03:fc:51:64:13:
                    0c:1f:c1:e4:9d:10:9a:8d:3d:c8:22:76:21:a1:1b:
                    8f:1e:e1:aa:2e:e8:6d:b5:69:3a:b2:dd:ce:1f:0f:
                    4c:9a:67:64:4d:f5:72:8e:5f:98:fa:49:a7:77:a5:
                    83:cb:e9:da:9e:8d:7c:b9:ea:20:e7:d3:3c:af:bf:
                    cc:22:cd:36:8a:d1:23:79:ee:98:d7:30:7a:ab:f0:
                    66:b6:21:b9:1f:05:e3:e8:1e:6a:fa:e3:76:2b:b4:
                    99:e2:22:eb:06:fe:94:33:fa:8c:e3:8e:9e:b7:9a:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F5:49:1C:68:6E:B8:E2:B3:1E:A2:44:78:C8:F5:2B:3C:2B:5D:7E
            X509v3 Authority Key Identifier:
                keyid:00:6D:9C:0C:7B:1A:09:4E:AE:F0:DF:E6:1C:6F:2E:00:43:36:85:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006D9C0C7B1A094EAEF0DFE61C6F2E004336858F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3332203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:b5:62:48:d5:f0:4a:0d:1e:df:d7:81:d7:47:28:6c:8e:5f:
         79:b9:9b:fa:da:2b:75:55:71:69:ff:9e:da:4c:f3:7f:98:ee:
         05:31:58:da:7c:b5:0d:c9:e9:75:48:7b:e1:b9:a7:66:76:59:
         72:77:a3:5a:ec:7a:cf:63:20:ff:b6:82:fa:ea:a2:fc:68:7b:
         29:4a:f6:9d:ac:9b:e8:46:29:a4:a5:b7:8b:fa:4b:2f:ec:e2:
         1d:82:94:f6:66:93:91:16:18:d0:e0:8a:7c:d1:e3:7f:38:89:
         03:2a:b5:af:22:63:0a:5f:c8:31:06:37:12:c5:1c:6c:ca:47:
         8e:c0:c1:81:62:cb:6d:1d:26:ed:d1:a4:f1:8e:4c:ea:99:86:
         78:0e:ac:03:5f:cd:87:ac:4d:fb:d3:e8:9d:30:6e:00:01:d5:
         ef:5f:ba:0c:3b:80:5a:b6:89:ed:3b:a0:a3:05:13:c9:6a:d8:
         6b:ca:0c:1e:f1:3d:cd:ed:60:50:72:58:a1:ac:9f:65:f9:06:
         91:ba:a1:7c:7e:8f:6f:8f:28:e1:55:27:3b:f2:3a:10:e1:f4:
         c7:5a:e7:ab:46:d6:4e:e8:99:b6:e0:63:bf:ff:a5:95:cd:cf:
         7e:c7:e9:91:c9:84:a0:99:82:2f:6b:96:fd:d3:fd:9d:59:8c:
         f3:c6:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:32 2025 by rpki-client