Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa
File:                     3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          FO/Ct7fbd3fKpHeHlk+ALxP20EHRwFuCFEqgB5Xx2Yg=
Subject key identifier:   BC:63:91:A8:66:CE:B3:31:FE:94:4E:10:38:4D:77:D3:67:08:B8:19
Certificate issuer:       /CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
Certificate serial:       1366CF6C68E7DCA33E16124FCDB8C349873321E0
Authority key identifier: 4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 20 Mar 2025 20:30:28 +0000
ROA not before:           Thu 20 Mar 2025 20:25:28 +0000
ROA not after:            Thu 19 Mar 2026 20:30:28 +0000
asID:                     263444
IP address blocks:        138.36.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:66:cf:6c:68:e7:dc:a3:3e:16:12:4f:cd:b8:c3:49:87:33:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A518310DD6B72E134A4AFB53DBA5727F57D5D9E
        Validity
            Not Before: Mar 20 20:25:28 2025 GMT
            Not After : Mar 19 20:30:28 2026 GMT
        Subject: CN=BC6391A866CEB331FE944E10384D77D36708B819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:01:b8:c2:09:f6:18:5f:4b:66:80:b9:42:
                    3e:5c:b8:60:a9:e2:36:e7:ec:2e:82:d5:6a:78:d6:
                    e0:1e:31:84:0b:7d:55:39:cf:e7:f2:42:0b:73:11:
                    e8:9f:70:9b:18:8a:7d:9c:e8:53:48:af:1e:aa:df:
                    f1:42:a5:b7:05:8c:04:84:f6:df:81:c3:c5:0e:91:
                    3a:36:7d:31:7e:7f:4d:28:f3:5f:89:16:14:4e:10:
                    fe:ff:8c:90:11:99:61:01:22:d5:50:7e:c7:54:09:
                    72:8b:40:26:c6:93:b7:2f:78:00:4b:83:97:d0:a2:
                    ba:18:2b:4c:ab:d7:14:cb:b8:59:e7:0c:db:14:f2:
                    24:6a:31:c9:e6:a4:f8:70:0f:72:86:78:91:3c:10:
                    a2:39:0e:f7:23:1c:67:8f:ae:2f:e8:bc:63:d6:74:
                    d5:fe:92:5a:4b:46:09:70:00:57:ec:d5:de:f7:04:
                    95:13:ca:42:38:a0:f0:4b:e8:1d:54:60:ee:3c:79:
                    b9:5f:8f:82:a2:b7:46:1e:87:b8:b9:78:84:b9:96:
                    d7:a1:87:df:7a:09:4c:1c:4f:43:f0:ef:1f:f6:bd:
                    8e:53:04:61:f8:12:12:42:5f:c4:81:e7:d2:05:2c:
                    44:ef:e9:85:9f:25:fc:66:4a:22:15:ae:d3:0c:20:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:91:A8:66:CE:B3:31:FE:94:4E:10:38:4D:77:D3:67:08:B8:19
            X509v3 Authority Key Identifier:
                keyid:4A:51:83:10:DD:6B:72:E1:34:A4:AF:B5:3D:BA:57:27:F5:7D:5D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A518310DD6B72E134A4AFB53DBA5727F57D5D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:de:af:58:c8:c9:c0:99:a0:66:16:de:01:e1:68:15:aa:
         7e:0d:8f:4a:f2:b5:e0:ad:89:31:a1:71:42:dc:b3:cf:6d:1e:
         fa:9f:0b:db:9c:68:e7:94:c6:79:c3:63:f5:d6:f1:46:7c:88:
         81:e3:fd:b7:0c:b1:c0:72:6b:c7:91:84:3b:1a:37:93:d7:79:
         ca:e9:57:75:0d:f4:12:f3:8e:ed:80:7d:fd:3e:99:56:1a:ca:
         41:c2:2a:f2:9b:74:ef:2f:bc:8d:6f:7d:d3:88:5b:e0:34:1d:
         1e:a8:40:af:47:2f:c1:c5:34:43:af:ab:e9:2e:f7:5c:c1:c0:
         bc:d5:1b:9c:12:c8:b0:2c:b6:53:a5:82:41:a7:09:82:f4:61:
         6a:7c:b9:9e:e2:99:8b:64:3b:cb:41:51:3c:e0:2b:c6:3a:0a:
         1d:55:f4:63:74:ee:a0:e9:ca:a8:a2:76:2e:b5:b1:de:c4:1f:
         d2:81:0d:98:1c:5c:66:77:52:d5:b4:d4:38:e0:6e:97:6e:88:
         14:ba:8d:ce:89:f3:76:1a:25:4d:06:29:e7:93:7a:ae:8a:d3:
         71:17:c4:67:75:7c:a3:6a:7f:73:01:bc:20:7a:c5:63:30:ab:
         70:1e:da:bf:18:2f:ac:e2:92:a7:77:66:62:2c:29:a3:ca:7e:
         69:f6:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:10 2025 by rpki-client