Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/3133382e3235352e3231362e302f32322d3233203d3e20323633393738.roa
File:                     3133382e3235352e3231362e302f32322d3233203d3e20323633393738.roa (raw, json)
Hash identifier:          kVFJ4mdBQKRpWlvutBtndwpT4U8KO54jr0De0AD7csM=
Subject key identifier:   9F:A6:5B:42:CE:AE:6F:5F:38:84:FD:C8:F7:A8:4F:14:11:12:5B:51
Certificate issuer:       /CN=86E046C7E1FC6344480ABA99B7A3962971A7FF0D
Certificate serial:       3C873E706CC4F6E0BE527141DD0D75F3B103D099
Authority key identifier: 86:E0:46:C7:E1:FC:63:44:48:0A:BA:99:B7:A3:96:29:71:A7:FF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86E046C7E1FC6344480ABA99B7A3962971A7FF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/3133382e3235352e3231362e302f32322d3233203d3e20323633393738.roa
Signing time:             Tue 16 May 2023 17:05:57 +0000
ROA not before:           Tue 16 May 2023 17:00:57 +0000
ROA not after:            Tue 14 May 2024 17:05:57 +0000
asID:                     263978
IP address blocks:        138.255.216.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:87:3e:70:6c:c4:f6:e0:be:52:71:41:dd:0d:75:f3:b1:03:d0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E046C7E1FC6344480ABA99B7A3962971A7FF0D
        Validity
            Not Before: May 16 17:00:57 2023 GMT
            Not After : May 14 17:05:57 2024 GMT
        Subject: CN=9FA65B42CEAE6F5F3884FDC8F7A84F1411125B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:41:6c:50:04:bc:be:68:e9:51:a0:c3:be:
                    ae:6e:90:c6:10:a8:ac:7f:5c:23:2c:4a:7e:43:b8:
                    71:9b:30:65:78:c5:b1:64:a6:26:7e:e1:40:bb:d4:
                    03:55:e7:6e:32:c6:ee:67:97:39:0a:a4:7d:a9:59:
                    3c:2e:bc:02:74:5c:28:3f:b4:60:53:35:71:a2:30:
                    ec:e3:03:66:e5:5e:33:2c:08:bb:48:04:a2:cc:9b:
                    8a:33:9a:0e:dd:3d:a1:75:dd:f4:9a:e1:94:21:b2:
                    c7:92:91:be:da:cc:b8:14:23:fd:f3:aa:ae:14:d4:
                    e1:1b:d9:58:9c:a2:b6:ac:8b:4d:10:e4:22:ac:bd:
                    f4:b9:7f:ec:81:c0:b9:f4:b8:13:12:d4:92:eb:72:
                    b7:bd:21:0e:67:05:24:45:98:18:26:92:83:b6:da:
                    99:91:4a:a5:af:31:a6:88:8e:34:b6:45:60:e5:2b:
                    3f:dc:ad:03:96:d5:c7:99:0a:24:18:9f:1c:ad:56:
                    ea:d4:63:c5:54:13:e1:c3:42:1f:8b:59:ca:27:c3:
                    a8:57:b3:ab:90:f7:e8:2f:17:f6:ed:53:b5:3b:4d:
                    78:32:fa:66:c1:a1:d2:06:89:0e:18:2e:ac:11:fd:
                    86:97:28:34:07:6f:fc:a8:56:fe:03:26:ce:72:35:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:5B:42:CE:AE:6F:5F:38:84:FD:C8:F7:A8:4F:14:11:12:5B:51
            X509v3 Authority Key Identifier:
                keyid:86:E0:46:C7:E1:FC:63:44:48:0A:BA:99:B7:A3:96:29:71:A7:FF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/86E046C7E1FC6344480ABA99B7A3962971A7FF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86E046C7E1FC6344480ABA99B7A3962971A7FF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KE5pueBQ2PXfuSTCpWg3YfDn7tbYRwLNDPChspk5cuo/0/3133382e3235352e3231362e302f32322d3233203d3e20323633393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:31:ce:d5:d6:02:9e:86:53:58:25:f8:3e:16:6e:03:77:59:
         0e:f2:10:53:f1:f4:e7:2a:e1:44:67:b9:c7:ce:a7:46:37:6f:
         1f:55:db:2e:26:cf:b5:7f:b6:05:31:63:c3:c8:e8:00:0d:bd:
         ef:63:46:b9:65:fe:e1:06:14:b0:8f:84:ab:2d:01:2c:76:48:
         90:3b:41:8a:51:dc:fe:43:ce:15:05:4d:79:25:7a:c8:14:cc:
         f9:98:ba:e4:4e:14:25:53:38:25:0e:3d:4a:cb:4c:8e:85:50:
         4d:df:21:5a:a5:ef:d1:f3:2e:ae:79:69:b0:e3:bf:d3:ca:47:
         5d:17:75:19:61:e5:1a:63:57:f0:2f:51:7f:33:db:a7:9a:83:
         04:d0:b6:ba:4e:22:14:86:37:4d:89:8d:b0:03:3d:04:6f:07:
         dc:46:22:c7:85:f5:7c:1a:41:ba:17:1c:39:79:c9:c0:1e:c9:
         2a:d5:22:06:85:71:d2:a5:56:e6:87:c4:89:35:59:43:ed:a2:
         de:5b:f0:86:87:60:a5:35:31:44:3b:b5:10:d2:59:cd:5e:e5:
         4f:78:14:14:1e:ac:41:5d:b7:fe:6d:ee:89:50:a9:e5:d8:88:
         9f:6b:2e:e5:fe:97:b8:c9:9c:fd:e6:2d:11:7b:4b:fa:28:a6:
         10:84:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:54 2025 by rpki-client