Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
File:                     3133382e3138362e33362e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          UKzvo1NYMUnuw1735UXr4kXt/HvM6gfjUpK6bfbKlPg=
Subject key identifier:   48:E1:4E:E8:03:E8:40:EA:C3:7F:3E:41:39:5E:81:16:96:55:41:A0
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       76AAC86880FAD4E6D24D993C4C54EC7FFD16F9F2
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:45 +0000
ROA not before:           Tue 23 Jul 2024 11:50:45 +0000
ROA not after:            Tue 22 Jul 2025 11:55:45 +0000
asID:                     53080
IP address blocks:        138.186.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:aa:c8:68:80:fa:d4:e6:d2:4d:99:3c:4c:54:ec:7f:fd:16:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:45 2024 GMT
            Not After : Jul 22 11:55:45 2025 GMT
        Subject: CN=48E14EE803E840EAC37F3E41395E8116965541A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:3d:20:6c:4f:b0:66:5c:3c:33:78:40:1f:
                    88:45:4b:b9:27:fd:3a:79:c7:ef:04:b6:08:4b:65:
                    1b:54:37:e1:7e:e2:26:3a:a7:8f:e9:8e:66:35:70:
                    90:b1:c2:ba:3d:26:31:0a:35:35:af:32:f6:8d:49:
                    03:41:5e:bb:bc:65:ab:0d:2f:fe:63:2e:af:de:38:
                    c3:89:83:2c:06:9a:15:32:fe:4e:56:2c:66:3f:9a:
                    2a:13:81:f0:0c:d1:b4:2c:d4:2b:30:f5:46:a9:3b:
                    79:73:ab:34:85:6c:61:dc:91:1d:56:07:d5:31:02:
                    dd:73:98:31:87:11:9b:66:e5:25:8d:f7:11:1e:d1:
                    61:c8:49:94:ec:98:ac:2f:72:43:b5:f4:59:62:54:
                    aa:52:4e:bf:f6:ea:f2:ed:1f:34:5c:9a:8e:c1:2d:
                    4f:c3:f3:38:e1:39:45:24:b7:62:87:52:94:a6:97:
                    22:c6:60:d6:23:c0:72:cc:5f:fb:be:59:e9:52:2d:
                    29:d6:d3:a1:1e:cd:fd:20:b7:98:bb:38:7e:d2:05:
                    51:73:25:84:5b:5c:bf:ba:da:fe:06:c8:58:40:07:
                    a2:66:53:dc:33:e1:3d:30:5e:00:6c:c9:f2:de:ca:
                    8e:e8:50:ea:3d:e8:69:d0:62:cb:a3:a3:7f:17:eb:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E1:4E:E8:03:E8:40:EA:C3:7F:3E:41:39:5E:81:16:96:55:41:A0
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:c5:b9:8e:d9:25:7e:4d:6d:a3:48:09:2b:d6:98:cc:b2:
         39:93:e2:70:26:d5:63:15:d7:28:77:8e:9a:4e:bf:a2:b3:af:
         89:4b:3c:82:f8:9c:a0:11:db:31:7d:54:aa:ea:a1:47:77:a3:
         a9:50:4c:34:de:28:df:50:e4:4f:50:ba:d3:98:26:b1:48:04:
         0b:16:14:b0:ca:fb:c3:3a:a8:92:85:ca:aa:40:e8:4e:3f:80:
         98:a9:08:bb:e0:a4:ad:8d:0d:59:50:f0:5a:4f:04:d0:d7:59:
         c4:d5:50:5f:18:1b:1e:c3:ba:b0:c2:e7:b3:20:a3:81:b5:1f:
         a1:ef:ae:04:de:d7:a8:cf:54:f9:0a:64:51:81:2b:3a:a1:ca:
         51:bf:75:1c:47:50:e0:4e:1b:ea:21:6b:70:49:6a:2b:91:cf:
         28:16:bc:46:94:80:07:21:39:de:ec:04:cd:7c:5e:b6:c0:8b:
         19:50:78:40:f7:1b:4b:b7:1c:46:ff:0c:0f:e3:ca:13:52:d6:
         fc:77:7d:89:57:ac:af:88:83:47:98:c9:f3:31:d7:9e:b3:75:
         94:80:45:d9:36:be:45:f4:52:46:b9:f6:d2:0c:63:7d:db:ab:
         77:06:1f:4c:64:3a:a5:97:6d:5c:83:db:61:94:65:0a:69:17:
         d0:e8:a5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:44 2025 by rpki-client