Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32342d3234203d3e20323634333030.roa
File:                     3133382e3132312e3133322e302f32342d3234203d3e20323634333030.roa (raw, json)
Hash identifier:          k2SbepHsqeLgaDZtd2ffo9c3htySyJHpWFVE9AgE7XA=
Subject key identifier:   EF:8D:20:33:EF:AA:B0:5A:3A:A8:78:43:61:CB:0F:1B:AC:7E:0B:8D
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       6E0B2A6126D593F4046049496D5C48E0EB136A50
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32342d3234203d3e20323634333030.roa
Signing time:             Thu 26 Oct 2023 02:50:25 +0000
ROA not before:           Thu 26 Oct 2023 02:45:25 +0000
ROA not after:            Thu 24 Oct 2024 02:50:25 +0000
asID:                     264300
IP address blocks:        138.121.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:2a:61:26:d5:93:f4:04:60:49:49:6d:5c:48:e0:eb:13:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 26 02:45:25 2023 GMT
            Not After : Oct 24 02:50:25 2024 GMT
        Subject: CN=EF8D2033EFAAB05A3AA8784361CB0F1BAC7E0B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:d9:c2:27:d0:d6:7f:e9:50:03:4d:de:0a:
                    5c:51:32:52:0f:65:98:c4:18:95:8a:e7:c9:fc:74:
                    cf:4f:18:4d:d5:3f:9a:2d:ed:64:a7:63:c0:e4:01:
                    f0:c6:f7:6b:ce:2c:9f:0c:4f:10:5d:41:a2:4d:4e:
                    b8:ca:bd:d3:ad:06:ca:0e:7f:3b:8d:93:a6:64:35:
                    61:a3:64:b5:23:53:46:c9:2e:53:37:14:29:85:8e:
                    51:77:e6:3c:c0:ba:a2:51:6f:14:97:d1:9e:66:dc:
                    fc:4c:8d:94:04:ca:01:d9:a2:6d:e2:7d:9a:95:40:
                    8c:df:0e:4a:04:51:f9:30:c0:e5:4e:8b:c1:de:12:
                    e2:d2:a3:cd:12:7f:85:5c:59:18:d6:9b:be:bf:9b:
                    b9:fe:dd:fd:72:f3:e9:13:c3:19:ba:af:df:96:02:
                    92:37:5a:06:b9:23:b1:da:2f:45:6c:7b:7b:ec:af:
                    cb:bc:a1:51:e6:61:35:3b:35:7f:a0:60:74:e2:09:
                    da:14:2d:0e:b4:5a:93:84:ce:20:eb:b4:b0:bb:b7:
                    34:91:1d:0d:6c:a8:16:45:70:40:2a:d9:82:77:43:
                    89:9f:e9:3b:6e:d6:c2:63:4f:82:a2:af:b4:d1:93:
                    91:3f:51:3a:17:2f:30:ef:21:27:92:af:2a:0d:5f:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:20:33:EF:AA:B0:5A:3A:A8:78:43:61:CB:0F:1B:AC:7E:0B:8D
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32342d3234203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:27:ea:ef:4c:8f:0c:de:ef:61:3f:4c:bf:3c:34:ab:58:06:
         45:bb:ae:bf:79:6e:dd:01:28:51:a6:1e:8b:9e:31:d0:9b:15:
         f8:26:cb:64:c3:62:00:1e:37:d1:da:78:ab:0e:a9:9d:ae:f2:
         9f:7c:a4:f5:76:70:bd:f5:3e:b0:f6:2d:20:93:31:15:40:d0:
         bd:12:74:46:0c:c0:76:f7:2d:f3:c3:3b:e8:43:42:ea:e9:cb:
         e5:64:fa:95:51:ac:b9:54:83:68:ae:1e:58:ba:16:21:75:5c:
         57:1a:f1:b5:74:90:a8:33:b4:e1:f3:ac:14:01:1d:25:00:cf:
         ab:2b:12:a7:76:89:4e:5c:fe:89:c6:c4:f6:08:05:54:2c:96:
         9a:8b:94:63:9f:db:8a:af:34:67:48:6e:5a:56:30:d6:32:e4:
         79:10:9e:f1:0b:a6:4f:9f:65:e7:8e:0f:04:65:7c:dc:57:fd:
         04:4c:43:2f:ed:2c:83:fb:c0:fc:a5:ce:9f:f6:7c:0f:67:ad:
         a3:a9:ef:6e:1c:3f:6e:eb:39:34:97:a3:63:58:b1:19:48:3b:
         b2:e0:f7:4b:ce:96:62:fc:2b:79:50:7d:87:1f:20:87:46:92:
         f3:f9:a6:94:9e:f5:ed:82:10:5f:7f:92:b3:de:11:40:07:bf:
         81:40:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:47 2025 by rpki-client