Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3234203d3e203238323130.roa
File:                     3133382e3230342e3133362e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          CyIlzeeCGVVSEV61ZNLtzpFVgNFgeWWMa0hZ8aNhTmI=
Subject key identifier:   25:40:00:8A:D4:5E:E9:51:38:DA:66:C2:29:12:B9:E9:19:09:64:05
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       64B95241130BAFE791D36863BD14289022614CFE
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:17 +0000
ROA not before:           Sat 04 Mar 2023 16:03:17 +0000
ROA not after:            Sat 02 Mar 2024 16:08:17 +0000
asID:                     28210
IP address blocks:        138.204.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b9:52:41:13:0b:af:e7:91:d3:68:63:bd:14:28:90:22:61:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:17 2023 GMT
            Not After : Mar  2 16:08:17 2024 GMT
        Subject: CN=2540008AD45EE95138DA66C22912B9E919096405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:b9:a0:d2:3e:1b:53:71:cb:09:7b:e2:84:
                    7b:14:9b:70:57:3a:13:19:32:5b:44:b1:fa:12:56:
                    94:a6:e2:ca:88:79:9e:2c:50:e4:39:05:cc:3f:fe:
                    26:9e:43:2d:1f:0b:8d:a4:09:99:a7:65:0b:a6:f0:
                    0d:68:ed:97:fd:f2:cd:a6:4e:44:ed:26:a9:66:b9:
                    a2:e6:a8:5f:3e:80:f3:6a:24:6a:d0:58:ef:1d:84:
                    17:fa:9e:b7:f0:2c:95:e7:a2:41:80:02:ca:a9:49:
                    c7:90:43:0c:ad:79:31:d9:45:ac:50:87:bb:f9:02:
                    6f:9a:fb:9b:9e:6f:d9:ab:84:ee:c4:ec:62:3e:be:
                    5c:59:59:54:5d:16:8c:73:e9:e0:91:4d:c0:10:aa:
                    49:12:32:ff:fc:ec:4e:78:44:5d:4b:7d:31:77:64:
                    d5:40:64:61:c4:2a:85:ea:f5:61:2f:9e:e1:3b:84:
                    80:06:1e:3e:0f:55:9b:66:80:37:2a:c5:3b:89:00:
                    dd:c4:b3:7e:58:ec:6b:cd:c7:bc:c0:f8:9e:5a:a7:
                    c9:88:01:b3:19:ea:5d:4c:08:63:42:92:83:c1:9f:
                    89:7c:ce:e3:bb:5e:ae:af:ce:ac:cc:7c:c4:6e:08:
                    ca:1a:fd:51:f8:33:98:8b:10:62:11:5b:9d:46:41:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:40:00:8A:D4:5E:E9:51:38:DA:66:C2:29:12:B9:E9:19:09:64:05
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3230342e3133362e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:4f:a2:bf:fa:c5:ba:eb:d4:0d:05:9e:37:80:4f:36:a5:
         fb:f3:f8:7f:0e:7b:35:b6:68:70:66:32:7b:a2:3d:af:88:fe:
         00:d3:f7:24:ba:b2:7d:85:b3:26:b2:14:fc:e1:e7:b1:96:d2:
         f3:a7:2f:31:57:85:28:2a:b9:42:5f:91:3e:e4:10:41:fc:ee:
         2c:21:5a:23:72:f7:22:b3:6b:1d:d1:5a:5e:10:0e:c9:5e:85:
         c2:0e:0b:4f:e8:33:23:be:32:bd:04:5a:52:7c:8b:85:d1:f1:
         6d:2c:45:cc:a4:e5:05:3e:78:a8:78:5f:31:1b:fb:5d:04:15:
         cf:0f:18:18:c7:04:ee:dc:22:0f:fa:99:85:e0:34:01:ba:7e:
         42:01:7a:c9:e0:1f:15:d2:cd:10:7a:eb:96:c2:ea:ab:00:4a:
         d3:94:19:2b:bf:0e:67:11:17:2b:4d:bf:45:a6:54:a0:27:85:
         67:37:9a:ac:ef:59:c1:66:1e:b8:ac:18:4c:82:64:94:15:c4:
         85:1d:52:ae:2a:29:5e:7d:55:a4:f6:d9:bc:a3:85:d2:b8:1c:
         60:9c:96:60:9e:3d:1e:22:83:b0:a6:bb:ce:c8:7c:c1:d1:f7:
         d9:10:13:3f:a2:8e:28:52:25:fb:90:32:ad:89:60:a2:75:ab:
         33:a2:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:53 2025 by rpki-client