Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa
File:                     3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          KRLdbapQDwCRgKOY4ext/uyB3oWtd5VvO47wijMY7G4=
Subject key identifier:   89:25:51:85:07:04:8A:AB:AA:BE:13:F1:CB:F6:40:B1:FE:54:8F:26
Certificate issuer:       /CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
Certificate serial:       1ECCFA5488676C0D14B469C9886A956A69C4B7B3
Authority key identifier: E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa
Signing time:             Wed 27 Nov 2024 17:36:07 +0000
ROA not before:           Wed 27 Nov 2024 17:31:07 +0000
ROA not after:            Wed 26 Nov 2025 17:36:07 +0000
asID:                     270870
IP address blocks:        138.59.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cc:fa:54:88:67:6c:0d:14:b4:69:c9:88:6a:95:6a:69:c4:b7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E639161CD5EFFE22EB2260353F5BC3F13358E8C3
        Validity
            Not Before: Nov 27 17:31:07 2024 GMT
            Not After : Nov 26 17:36:07 2025 GMT
        Subject: CN=8925518507048AABAABE13F1CBF640B1FE548F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:df:08:2b:04:cc:de:fe:25:51:c4:2b:08:
                    14:2a:5e:d1:56:49:25:c1:a0:f9:c1:7b:11:b2:04:
                    e3:93:1e:c2:e3:af:49:cb:b0:af:67:6b:50:b3:1b:
                    71:de:e5:61:2b:31:8e:be:3e:21:97:5d:22:dc:07:
                    16:41:07:60:1b:9a:73:0a:91:8a:08:66:58:ce:b7:
                    c4:ff:bf:72:86:08:91:b9:ec:bb:55:3f:aa:85:28:
                    c0:c4:e2:f3:fa:54:f6:48:e0:42:9b:d5:cc:8d:bc:
                    01:cd:ab:7b:4e:6f:6a:1b:b8:44:af:fd:0c:f2:9c:
                    82:84:b4:7c:96:5b:fd:17:7e:a2:3b:f6:58:61:bf:
                    2d:bf:3a:18:2c:a9:88:62:af:3e:db:8a:62:49:b5:
                    d2:e4:b6:03:3b:e8:29:50:7f:fe:b4:5e:d6:14:f9:
                    c6:92:08:58:87:96:9f:1d:7c:9a:24:9a:bb:11:e0:
                    61:2d:45:71:38:d7:f3:06:a2:bc:40:3a:e7:ef:a5:
                    6d:a5:e9:e4:de:05:dd:08:20:bf:00:7b:69:c7:70:
                    60:f7:b9:09:2c:5f:5d:66:c8:84:27:30:6d:11:49:
                    93:d6:c6:d3:8e:07:5f:78:5e:18:c8:70:fa:13:61:
                    c0:eb:00:ae:a4:db:c7:d5:ef:4f:e4:e8:9c:76:65:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:51:85:07:04:8A:AB:AA:BE:13:F1:CB:F6:40:B1:FE:54:8F:26
            X509v3 Authority Key Identifier:
                keyid:E6:39:16:1C:D5:EF:FE:22:EB:22:60:35:3F:5B:C3:F1:33:58:E8:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E639161CD5EFFE22EB2260353F5BC3F13358E8C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135342e302f32342d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:46:a4:27:a7:20:d2:4c:82:4f:bb:a2:ba:04:1b:bb:13:c3:
         c8:4b:c8:9c:ce:17:9f:8f:06:53:10:0f:56:08:82:17:8a:85:
         f1:a5:00:51:41:f7:dd:cc:ce:2b:b4:7c:21:49:78:d1:0e:43:
         56:9d:bf:70:ce:72:83:ab:be:e2:2b:99:32:42:df:49:4f:d7:
         30:1d:55:37:79:da:06:f3:97:8c:88:b6:a8:86:80:c4:88:3d:
         3c:7c:93:d6:33:0f:03:1a:6d:f6:0f:95:e9:21:71:1a:d6:05:
         82:b6:45:4e:76:77:de:75:3d:31:5f:b9:de:99:56:ff:be:42:
         19:cb:94:07:b2:e7:77:80:eb:6d:bc:08:0c:59:62:12:bb:0d:
         19:9b:ac:8c:2b:db:08:60:3c:01:f1:80:b3:65:cf:9a:56:fc:
         ea:e7:f9:f8:e9:b6:61:1b:f6:88:ed:9a:ca:13:8c:0c:a0:a0:
         0b:19:d0:1c:ee:87:b9:25:61:2d:69:a2:e6:3a:cc:d3:9d:92:
         be:a7:17:28:6c:bd:f2:bf:7f:1d:b0:d6:24:b1:7b:ba:37:50:
         8b:d9:bf:88:58:ba:03:07:c3:80:7d:34:fb:d6:85:f7:80:b5:
         6f:3e:eb:23:74:82:94:4d:3b:a8:7c:95:34:83:e3:d7:d5:15:
         0f:74:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:55 2025 by rpki-client