Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130392e302f32342d3234203d3e20323632323933.roa
File:                     3133382e39342e3130392e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          I+wMVnYbsmx1dHfr+nGX9FqBhhZ5fRfvvVnkyxsKANc=
Subject key identifier:   2D:F3:37:45:69:D3:64:08:A4:BE:BD:52:AF:E6:EE:F4:E7:DB:C1:92
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       1D358931004005A617588F62A899F8921AD50764
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130392e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:32 +0000
ROA not before:           Tue 02 Jan 2024 21:11:32 +0000
ROA not after:            Tue 31 Dec 2024 21:16:32 +0000
asID:                     262293
IP address blocks:        138.94.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:35:89:31:00:40:05:a6:17:58:8f:62:a8:99:f8:92:1a:d5:07:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:32 2024 GMT
            Not After : Dec 31 21:16:32 2024 GMT
        Subject: CN=2DF3374569D36408A4BEBD52AFE6EEF4E7DBC192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:9b:1f:cc:56:60:c4:c7:fc:97:c6:32:4b:
                    77:eb:c4:0d:71:53:99:97:7e:c3:f6:53:c9:04:4b:
                    f5:06:5d:87:6d:f0:bc:96:ad:f9:4a:43:68:70:31:
                    f6:07:2b:eb:b1:ee:27:e5:bc:64:1a:a7:a0:84:62:
                    c3:60:89:c2:d0:ba:b2:14:47:da:31:5c:fe:7e:b5:
                    24:5b:2f:ed:f2:45:08:55:2c:74:89:9a:56:10:5b:
                    29:ff:a6:68:69:bf:ae:63:6f:89:d8:65:ac:51:31:
                    8f:2e:67:2e:da:16:cc:8f:31:f8:2c:4b:5a:96:7e:
                    b4:2b:b6:67:7b:20:3a:cf:2d:e8:1c:c3:d6:30:ff:
                    a7:ab:a9:10:4f:c9:05:37:fb:ed:ef:d8:83:f5:96:
                    87:13:37:fd:63:35:26:1c:10:6c:17:40:17:5e:03:
                    92:63:a3:ab:e4:1d:51:c2:ba:b4:2d:92:e3:91:67:
                    b0:4d:ea:cb:9d:4d:85:63:82:b2:e9:bc:d4:6d:c2:
                    3d:02:d0:e9:a0:e9:06:c9:0d:99:64:f6:f8:e8:21:
                    17:71:eb:40:29:96:97:e0:57:26:6a:f1:3e:f4:1f:
                    e0:8f:9a:d7:ab:22:b0:96:bb:c9:a7:8b:4e:14:74:
                    1c:89:0e:4d:72:aa:08:1a:f0:15:5a:36:7b:57:d9:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:37:45:69:D3:64:08:A4:BE:BD:52:AF:E6:EE:F4:E7:DB:C1:92
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130392e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:41:14:6a:5f:cf:d7:a3:dd:0e:ee:48:dd:28:c9:3a:a5:79:
         f7:0c:f1:64:5c:fb:4f:36:1b:14:3d:55:17:80:a4:43:36:54:
         90:21:fd:b2:f5:52:22:ed:52:fc:7a:e5:83:76:36:eb:b6:b1:
         2f:6e:c3:34:df:c3:cb:bb:eb:5b:31:a1:78:e9:4e:66:f6:c4:
         d0:21:4f:59:b7:7f:01:27:2c:30:43:49:06:c5:32:52:b5:7b:
         c7:78:43:c7:f0:39:40:cc:88:2f:f9:72:77:68:25:9b:e9:3d:
         e1:a4:9b:8d:06:d8:09:9b:8f:b2:89:62:b5:20:b9:22:e0:9a:
         b2:46:24:da:3c:fc:47:64:ca:6a:15:d3:92:bd:3a:79:e3:c7:
         83:91:85:6c:67:26:a7:3a:85:a3:2c:19:61:c1:68:b0:21:7d:
         6e:2c:25:53:c8:55:98:d7:34:f0:39:fc:81:b9:0b:5c:d5:f1:
         d1:77:71:8c:18:a5:30:bf:3e:48:af:77:db:dd:43:9a:84:cb:
         2c:10:40:ee:6f:46:6a:b8:ae:56:4d:26:9a:c2:7d:f6:d9:a9:
         e8:a3:75:e8:81:e5:79:f8:e4:7e:39:fd:1a:6b:56:6f:24:53:
         24:08:27:2f:50:f4:84:32:b7:8a:a3:07:87:db:8d:d7:6c:e2:
         61:78:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:46:15 2025 by rpki-client