Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/3133382e3138352e3135322e302f32322d3332203d3e20323633383435.roa
File:                     3133382e3138352e3135322e302f32322d3332203d3e20323633383435.roa (raw, json)
Hash identifier:          87YhrgVzLzoHtV46HCu7AnuFqO3H1FvbeEF17dwkJDY=
Subject key identifier:   1E:F3:50:D9:CE:B2:B1:C9:D6:47:AE:A1:2F:73:30:8E:64:DD:1E:3F
Certificate issuer:       /CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
Certificate serial:       2933279E20F5509D237BE2C9A0AEFE32875523FF
Authority key identifier: 76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/3133382e3138352e3135322e302f32322d3332203d3e20323633383435.roa
Signing time:             Fri 08 Sep 2023 14:08:27 +0000
ROA not before:           Fri 08 Sep 2023 14:03:27 +0000
ROA not after:            Fri 06 Sep 2024 14:08:27 +0000
asID:                     263845
IP address blocks:        138.185.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:27:9e:20:f5:50:9d:23:7b:e2:c9:a0:ae:fe:32:87:55:23:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768804CE7849439F80A6B8BA27FDF31913FB5B00
        Validity
            Not Before: Sep  8 14:03:27 2023 GMT
            Not After : Sep  6 14:08:27 2024 GMT
        Subject: CN=1EF350D9CEB2B1C9D647AEA12F73308E64DD1E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:ca:90:48:4e:a7:2f:4d:93:1b:e5:b8:02:
                    73:c4:11:5a:6a:70:76:54:66:5a:bc:ee:3d:9a:16:
                    47:9b:e3:e2:05:29:53:30:6d:77:af:5d:89:6f:b3:
                    68:80:c0:13:7d:0f:6c:08:4d:b6:48:9c:c0:36:87:
                    74:32:96:f7:dd:8e:60:c3:57:c3:78:74:ab:f8:af:
                    fb:dc:ac:2f:71:09:f6:de:d8:c1:a9:69:af:4c:b0:
                    32:c9:f4:29:d2:5c:8a:43:1f:2e:0d:12:0e:d4:2c:
                    77:89:e6:69:26:8b:24:21:eb:93:72:ce:e5:af:0c:
                    73:e0:f2:c3:ab:e9:4b:2f:cb:9f:ab:5b:86:27:34:
                    bf:fd:3a:d1:58:09:54:1f:38:a3:f6:8e:0a:a1:ad:
                    e3:04:bd:35:49:fe:03:06:cf:15:64:53:b7:af:43:
                    5f:14:00:7a:5a:2f:75:70:95:02:02:8b:13:75:d6:
                    ac:4e:e1:b8:af:db:9c:39:11:53:fb:52:7b:97:7e:
                    d3:d0:55:41:d6:8b:eb:a9:86:d7:29:14:60:10:15:
                    93:29:2b:00:53:97:ba:01:2f:2e:1d:a0:93:25:9a:
                    56:a7:78:53:ef:c2:1c:04:d2:9e:da:fd:37:bd:93:
                    ee:f5:2f:20:d0:da:d7:1e:c3:8c:ac:11:89:06:c1:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F3:50:D9:CE:B2:B1:C9:D6:47:AE:A1:2F:73:30:8E:64:DD:1E:3F
            X509v3 Authority Key Identifier:
                keyid:76:88:04:CE:78:49:43:9F:80:A6:B8:BA:27:FD:F3:19:13:FB:5B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/768804CE7849439F80A6B8BA27FDF31913FB5B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArftGgvC7WsLTgmQXsBCyp1Pwrw7yKbqTR9LTMyUpKQs/0/3133382e3138352e3135322e302f32322d3332203d3e20323633383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:fc:47:0d:64:33:46:d9:3e:f4:5a:98:3e:a0:a2:64:66:
         2e:75:a7:01:52:fd:23:d9:8f:66:ec:29:08:f7:70:27:b7:b7:
         40:bd:a9:45:e8:cf:5d:f7:9c:5c:cd:0b:c8:c1:80:2b:cc:c9:
         68:e3:fa:04:5d:ea:bd:ae:77:dc:39:f3:76:b8:3a:23:cf:88:
         ac:c6:b8:f8:a3:45:70:0a:ee:90:73:fa:e3:f7:e6:7b:0f:23:
         02:6c:77:fb:90:02:68:1c:ba:7b:1c:ae:49:19:32:f6:49:b2:
         77:15:2b:04:86:2c:86:c7:68:b8:e8:ac:74:66:7c:21:a8:17:
         1a:1a:2e:42:ea:84:a4:66:2c:88:6b:a1:48:20:c8:0b:c7:76:
         0a:a9:88:01:e1:55:4a:aa:55:18:e2:65:44:82:ce:a2:64:72:
         fe:6d:f4:cd:62:f9:8f:e9:f7:3f:00:e6:ca:c7:9e:ef:36:48:
         57:6e:92:ca:75:83:2b:43:d2:89:94:32:96:d9:c3:ed:d2:bb:
         05:2e:db:84:8b:a4:bc:25:15:ad:e5:93:30:b5:50:9a:b0:f3:
         82:5e:1d:ce:39:89:27:56:60:22:76:4e:cb:c6:01:12:f3:88:
         bc:5c:0a:27:1e:45:e1:10:5a:a9:fe:b5:cc:03:ef:fa:60:0d:
         9f:47:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:12:11 2025 by rpki-client