Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          XGsz+Lp9PRJRCJuOBQsAjUZmNgsvg0J7c2oP+tdyhng=
Subject key identifier:   46:22:EA:95:C3:BA:04:2C:05:03:63:7C:A9:EF:6A:9B:C2:36:96:A3
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       3B1FE770DDE9B946F789836AA6DB6E2950816B35
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:26 +0000
ROA not before:           Wed 02 Oct 2024 14:53:26 +0000
ROA not after:            Wed 01 Oct 2025 14:58:26 +0000
asID:                     264344
IP address blocks:        138.185.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1f:e7:70:dd:e9:b9:46:f7:89:83:6a:a6:db:6e:29:50:81:6b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:26 2024 GMT
            Not After : Oct  1 14:58:26 2025 GMT
        Subject: CN=4622EA95C3BA042C0503637CA9EF6A9BC23696A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:26:9b:71:f2:6d:83:42:1b:d1:3a:bc:d0:
                    47:91:e7:59:ad:20:c0:72:48:2b:75:2b:6c:8c:9c:
                    ff:67:66:5b:99:98:35:b8:9e:3b:47:a5:37:71:bb:
                    12:d9:1a:27:37:0e:fd:1a:17:f9:b0:db:07:27:6d:
                    76:1b:c1:e2:6c:af:aa:95:0e:e8:bf:2e:ab:1b:aa:
                    25:71:cf:04:8c:8c:13:ba:4a:c5:82:f9:65:29:4c:
                    8f:ce:c4:ab:54:b6:8f:5d:2e:13:10:05:40:bd:32:
                    d5:fa:53:03:d4:42:ac:94:41:f9:4d:52:28:4f:66:
                    e4:3c:e6:5b:62:c7:92:e7:9a:06:42:ae:39:4e:23:
                    29:fd:a0:e0:c3:f3:47:c2:95:3a:d5:9d:74:43:db:
                    07:92:15:c1:f4:e5:83:de:dd:a3:b1:1e:8d:6b:7f:
                    cd:37:e2:01:e9:4f:fb:6b:73:35:47:1f:c4:2a:4c:
                    d7:a1:d7:59:75:4b:28:24:e8:a0:23:f1:45:50:09:
                    36:db:1e:be:2d:70:ac:bb:85:03:02:6b:4f:f0:0c:
                    bf:06:55:2f:13:ec:1c:d9:b5:97:d4:3a:1c:fa:fd:
                    d8:50:a5:bf:43:95:56:79:14:65:f2:fa:ce:e6:00:
                    02:bc:fd:08:dd:01:61:5b:33:75:33:fb:7b:7a:e3:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:22:EA:95:C3:BA:04:2C:05:03:63:7C:A9:EF:6A:9B:C2:36:96:A3
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:43:63:7a:77:78:c7:36:ec:c7:3a:01:ad:8b:8c:56:e9:
         0e:98:64:3a:8b:15:46:1b:4e:91:39:dc:d5:6c:cd:41:d7:bc:
         fd:2a:44:04:85:e8:29:13:39:84:f7:b3:ee:f2:a7:f5:fa:ae:
         19:15:01:ef:05:a3:80:61:6b:fd:2b:f6:ac:ef:61:e8:94:7a:
         b5:53:08:5e:98:20:8e:e3:dd:21:1a:5b:05:77:f4:15:16:34:
         a3:1f:89:39:06:18:11:54:ce:32:99:29:a5:36:5d:f7:b4:1e:
         a4:0c:fc:59:f8:9c:5c:3b:07:19:db:21:88:7a:cc:47:b4:e4:
         77:5d:dc:37:ee:2c:2f:2a:4c:b6:d3:c3:e8:c6:22:f2:54:c7:
         9d:99:07:56:7f:51:ff:fe:18:80:f5:17:4a:4a:12:16:25:b8:
         33:c9:9c:86:ad:a8:f6:4e:4c:79:88:c3:ad:70:cc:bc:ae:f5:
         a7:b3:8c:49:90:47:f9:16:63:1a:1e:17:98:28:88:7f:eb:4b:
         81:4c:1f:83:26:1b:6a:da:91:3d:d7:d9:65:9e:b6:51:06:30:
         45:52:8b:03:9b:a9:81:79:96:2a:41:10:50:ad:ae:56:12:48:
         27:43:7c:62:4e:4d:25:63:09:9f:23:66:e1:52:8b:b1:1f:de:
         22:a6:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:35 2025 by rpki-client