Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa
File:                     3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          oIhEND0PSS1wM9RCDhuNcrtB7xhqY0iKkYo0AxOYL6c=
Subject key identifier:   69:4C:F1:93:63:00:D6:54:9C:AD:79:38:C0:D6:56:ED:4A:40:05:4C
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       4D8576CB1612603A42DE4F22BE8681A6D0C2FF9D
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa
Signing time:             Wed 04 Sep 2024 13:17:36 +0000
ROA not before:           Wed 04 Sep 2024 13:12:36 +0000
ROA not after:            Wed 03 Sep 2025 13:17:36 +0000
asID:                     267388
IP address blocks:        132.255.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:85:76:cb:16:12:60:3a:42:de:4f:22:be:86:81:a6:d0:c2:ff:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Sep  4 13:12:36 2024 GMT
            Not After : Sep  3 13:17:36 2025 GMT
        Subject: CN=694CF1936300D6549CAD7938C0D656ED4A40054C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:21:41:f3:09:af:9b:95:70:09:60:a4:6a:
                    1b:c1:16:0a:2f:75:d5:ca:8f:23:40:bd:9d:5e:1e:
                    9c:51:14:27:5f:5c:87:56:7e:38:85:8a:6a:aa:93:
                    df:48:fb:30:81:c9:2b:09:72:24:f0:c5:aa:82:32:
                    22:b2:24:e1:12:96:5e:74:8f:99:21:28:72:9e:e4:
                    c9:2a:9e:b1:38:39:54:1f:16:02:da:b0:dd:2b:18:
                    a4:08:8b:c1:9d:93:ae:a1:6c:88:a8:b1:32:07:e3:
                    18:da:00:5e:0c:c9:13:d7:b5:c1:be:f9:89:23:5a:
                    03:e7:90:15:9c:e5:92:e3:65:9c:a1:f0:4a:91:bd:
                    7e:d7:a3:bb:cf:3c:22:a9:9e:4d:1e:72:44:d7:2f:
                    6f:f5:55:a0:85:b5:7a:0e:cc:5e:a6:6e:83:89:37:
                    35:81:ce:fa:c7:2e:54:d7:a1:45:19:f0:e7:26:9b:
                    9f:42:e5:0d:5d:d5:13:45:bf:1d:a8:d7:10:70:82:
                    a5:b7:fb:a1:92:f9:79:8c:5e:a6:6a:a4:76:02:d5:
                    a6:96:ab:60:44:9b:c8:74:e3:d4:50:50:b6:1e:25:
                    91:99:e0:4a:72:00:33:7c:af:f7:23:f8:7d:94:b4:
                    ea:31:11:63:eb:14:8e:74:a9:63:d3:dd:42:a3:85:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:F1:93:63:00:D6:54:9C:AD:79:38:C0:D6:56:ED:4A:40:05:4C
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:d0:3c:8a:ae:a6:d4:d5:5c:70:c5:34:12:d8:69:2b:33:
         9e:64:00:17:48:d5:88:0d:5b:26:8b:38:e7:b8:d1:f6:84:c5:
         b3:cb:46:1d:96:05:5b:9b:6e:28:51:5b:17:51:e2:43:37:e0:
         9b:07:dd:1e:d8:17:11:f3:61:d8:c8:61:34:14:7f:25:c9:9f:
         db:56:18:c2:02:08:1f:66:31:d6:5b:38:2e:f0:d5:61:82:e1:
         70:e7:a6:56:c6:e4:83:01:1e:fa:43:2f:aa:36:6f:37:ce:ea:
         c5:6b:21:88:1f:17:3a:38:db:27:62:40:62:90:1a:a7:51:86:
         25:97:57:7d:1c:05:b7:8d:27:30:db:05:c9:2e:54:5d:41:5f:
         aa:68:41:b1:97:14:6c:83:2c:21:6e:80:f9:ab:b9:2f:a0:53:
         f6:c5:bf:97:b5:ca:94:34:67:dd:f0:c9:61:ce:58:0c:eb:60:
         5c:35:39:46:6f:f1:6d:a2:5c:22:cf:be:d9:63:c5:dd:c5:d6:
         91:89:25:6d:eb:ff:73:08:15:29:a7:6f:17:2c:b2:07:52:28:
         01:ef:e9:e5:8b:85:d9:6b:53:c2:3b:22:95:1d:89:22:1c:99:
         fd:da:fb:39:36:11:ea:8c:c6:0f:b9:db:51:e0:17:20:a0:f8:
         37:5d:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:28 2025 by rpki-client