Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          AfbQRnRRxbVYCUFT4iYukSZZVa0Xtv8t/e+MBpTgZp8=
Subject key identifier:   6B:BD:12:36:9F:91:25:C6:A3:94:8A:C3:80:DD:B3:F7:B2:88:C5:2E
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       49E36C729D11D1415F74762D3A752BEB5C950087
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     263994
IP address blocks:        138.255.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e3:6c:72:9d:11:d1:41:5f:74:76:2d:3a:75:2b:eb:5c:95:00:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=6BBD12369F9125C6A3948AC380DDB3F7B288C52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:eb:1a:32:60:23:fb:b2:89:eb:f4:17:8f:
                    7b:04:c9:4b:cb:81:05:37:e8:32:05:6d:b4:03:ce:
                    03:97:8a:5e:39:36:28:5f:04:9f:d9:0e:51:fd:77:
                    01:7c:ae:6e:19:97:8f:a8:e7:98:0d:86:1d:bf:9c:
                    8e:7e:4d:e1:d2:8e:85:07:be:b9:ab:4e:e8:fc:bd:
                    37:42:f6:5b:66:61:67:c1:d9:99:b0:52:d5:b5:e5:
                    75:c4:eb:b5:75:23:d8:3e:44:15:9b:d2:ee:27:a5:
                    64:d0:68:18:ed:f0:4d:ff:3b:73:cc:43:20:a3:5e:
                    ca:c5:ef:30:94:71:79:62:69:52:63:5f:1b:b1:71:
                    e7:37:d5:32:76:43:a8:4e:a7:a1:07:fd:be:7c:11:
                    2e:64:6c:06:5c:12:9b:cd:11:58:09:03:ab:76:3f:
                    44:17:63:eb:eb:90:5d:32:83:d8:0d:61:5a:de:f1:
                    82:be:fd:4e:38:8b:f1:f0:97:53:f3:31:23:15:76:
                    bc:4e:89:0f:83:9a:0b:be:89:2d:e7:6b:82:4b:91:
                    77:c3:49:35:36:ee:e5:33:7d:d1:6d:62:8a:c0:d0:
                    8b:a6:81:63:3b:0e:14:70:d3:60:85:e8:57:c0:79:
                    44:79:87:bb:e0:59:dd:89:cb:ba:0d:af:cb:40:ed:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:12:36:9F:91:25:C6:A3:94:8A:C3:80:DD:B3:F7:B2:88:C5:2E
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f1:10:39:e6:2a:73:9b:be:55:5c:e0:5e:42:7d:8a:e2:44:
         49:18:2a:73:76:a9:3a:6c:50:c2:26:1f:97:68:32:7d:90:73:
         b4:b6:df:25:bf:58:95:80:7d:ba:79:5b:31:37:67:11:2d:5a:
         bc:40:38:12:3b:ef:bf:6e:f1:ff:f8:b8:c9:5c:90:64:eb:db:
         d4:de:b5:c8:f3:7c:10:f4:27:f8:77:85:a1:86:78:03:85:07:
         f4:2b:b7:9a:6a:d4:c4:5b:3e:ed:f8:c6:52:2b:43:04:6e:7f:
         3c:16:29:36:7f:2a:b4:97:03:f3:12:22:72:4c:1e:75:d9:6c:
         97:17:2c:12:36:02:3f:ba:4f:c4:3f:ab:09:a8:0a:17:43:cc:
         6d:e9:3a:55:3d:4d:0d:45:2e:ed:cc:6a:9f:0a:5c:4c:78:65:
         09:be:31:56:54:21:6c:fb:4e:bf:8c:e8:8e:09:64:a2:07:fb:
         1b:39:4b:9a:52:67:17:b7:e2:21:d5:7a:1b:e1:5f:7f:d3:88:
         ec:3e:34:c0:ff:0b:88:7a:b7:af:dc:fd:64:83:b7:b2:2d:63:
         b0:18:5d:09:70:f8:3d:e3:4e:f6:96:e5:c9:3b:37:25:17:6f:
         34:25:d5:6f:2f:db:da:bb:c8:41:24:af:4c:bf:29:d2:44:82:
         98:27:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:44:17 2025 by rpki-client