Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139322e302f32342d3234203d3e20323634313333.roa
File:                     3133382e35392e3139322e302f32342d3234203d3e20323634313333.roa (raw, json)
Hash identifier:          zKvTvSh0HCOdUXx0qHoDw23kGYd68aH6mE7p4LoumKc=
Subject key identifier:   98:CA:9E:18:6B:CC:B2:FA:A5:F3:23:F7:0E:BF:EA:B0:28:1A:8E:11
Certificate issuer:       /CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
Certificate serial:       1CCD534734697EAE698BA81AEA920D29C2C349B3
Authority key identifier: 7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139322e302f32342d3234203d3e20323634313333.roa
Signing time:             Tue 06 Feb 2024 17:08:03 +0000
ROA not before:           Tue 06 Feb 2024 17:03:03 +0000
ROA not after:            Tue 04 Feb 2025 17:08:03 +0000
asID:                     264133
IP address blocks:        138.59.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:53:47:34:69:7e:ae:69:8b:a8:1a:ea:92:0d:29:c2:c3:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
        Validity
            Not Before: Feb  6 17:03:03 2024 GMT
            Not After : Feb  4 17:08:03 2025 GMT
        Subject: CN=98CA9E186BCCB2FAA5F323F70EBFEAB0281A8E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:eb:de:a4:e9:84:5e:61:98:78:9f:e1:c3:b1:
                    52:88:2b:cf:c4:b4:b5:3b:be:c2:91:9c:dc:8f:c7:
                    4c:a1:2a:ac:f7:e3:d4:4b:48:0b:cc:47:1d:df:67:
                    0f:24:44:69:fa:64:88:1f:0a:03:ae:da:59:7e:cf:
                    8c:24:23:5f:10:ce:8a:f0:09:09:e6:9c:97:2c:53:
                    4d:f5:e4:4b:d5:8e:60:08:8e:c6:0b:43:6d:d0:c6:
                    d0:90:00:5e:2e:9f:78:d5:48:57:04:53:66:1f:8c:
                    49:8c:0b:2e:08:9b:31:22:8e:57:90:4a:c3:e7:32:
                    bc:06:3c:64:67:9b:79:b4:74:d4:64:6d:d4:7f:f8:
                    8f:24:73:19:42:70:0a:6b:37:64:b3:f5:7b:1c:45:
                    01:12:0c:53:0d:e9:03:c8:aa:73:fb:a4:ea:21:bf:
                    9b:b9:65:18:9f:07:23:17:49:6d:38:5a:5d:70:a6:
                    9e:67:ab:4f:54:f4:70:0f:ac:55:5a:57:81:3e:60:
                    4b:12:e7:35:37:76:de:a1:03:bd:62:7f:3e:a4:45:
                    91:50:c1:b3:81:d7:56:31:4a:5f:ce:63:ec:41:e6:
                    2f:71:c1:1c:3d:e5:4f:2b:3d:bf:ad:b8:0b:6b:8a:
                    62:c2:06:ae:c8:0c:fb:de:ae:85:77:44:40:5e:02:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:9E:18:6B:CC:B2:FA:A5:F3:23:F7:0E:BF:EA:B0:28:1A:8E:11
            X509v3 Authority Key Identifier:
                keyid:7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139322e302f32342d3234203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ea:4a:e1:e9:02:6e:22:8c:36:b3:36:1e:a8:0b:d8:9f:5b:
         ee:65:fa:bd:3a:8a:7b:85:ab:38:df:17:e2:0f:90:80:79:db:
         89:b5:b7:d1:55:dc:14:14:2f:0c:65:ea:3c:88:b0:18:cf:87:
         4d:61:57:a4:45:26:d8:3b:fb:3f:3c:78:00:a7:a5:37:31:a8:
         4b:f1:97:dc:a0:43:8c:d2:6f:34:aa:8a:91:7c:72:4a:f0:9e:
         60:87:6d:b0:65:d5:c5:18:88:7a:4a:8c:00:21:1d:71:a9:4d:
         c6:a5:62:aa:87:dd:01:8f:e0:a3:a4:89:be:03:83:5d:87:3e:
         47:f2:01:91:93:e0:56:23:73:0a:52:3b:be:bd:b2:32:45:5c:
         39:ce:97:ea:8a:b4:53:f8:c3:0b:c7:4e:6a:7f:a1:36:0c:e0:
         6d:c0:9d:ba:80:f1:24:54:d8:8d:c7:0b:d6:f5:03:e7:ca:1b:
         19:05:18:3e:75:30:04:a7:ce:29:34:ef:1f:7e:48:72:05:b3:
         ef:5c:d3:a6:55:e4:aa:37:63:cc:92:91:ae:a5:70:be:4f:ec:
         cb:5c:c2:6e:ff:8c:09:41:51:7c:d1:ac:60:e0:86:91:c8:98:
         f9:71:8a:ee:7c:58:85:48:70:d2:bf:9b:86:6d:c2:d6:70:5e:
         74:68:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:57 2025 by rpki-client