Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa (raw, json)
Hash identifier:          x0B/i5FQvBth3kf9vKuhTQ56rPxOZue+h3zUO4mF7fY=
Subject key identifier:   1B:2A:43:3C:48:EA:B2:06:7D:03:B1:67:4A:79:38:01:3A:23:3C:3E
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       330E087B28116D216DF9CFA6BAC05145C0194BB1
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     264311
IP address blocks:        138.122.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0e:08:7b:28:11:6d:21:6d:f9:cf:a6:ba:c0:51:45:c0:19:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100CE3D2450DB73298806DD0939742CCF7F92AF87E46527F06D736E610A2E4904CCE270DF123146D8956E4FFD1F19D7365C3A9BC2FA3E0CCD9FAC232D6B9256A0E267D469857E5DD55A4B3BC1DF11D01A6FB2E0CFA76B3374A51F5128C4DDCBA8956BB26842C483652100634A8D217D35B1A65F592482E895E4233E46C697F296C058D4A6D02E2DAA810F5004DC05D75B41022B9848D42E39EDFA6781D99BE190A0929DBEA0693EBF8144377143CFF57C89F7EC2E23FC3FAD9B59285BB16124AF258F606F1CFD12495F26541262B0D7ADC9EFB91C1E04481E1FBE6D0BE9F9B81A74D7515508B0C639DFBE070E2CDA8AE4E2CD10CF24D5757599CFDDD654070C78690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:24:50:db:73:29:88:06:dd:09:39:74:2c:
                    cf:7f:92:af:87:e4:65:27:f0:6d:73:6e:61:0a:2e:
                    49:04:cc:e2:70:df:12:31:46:d8:95:6e:4f:fd:1f:
                    19:d7:36:5c:3a:9b:c2:fa:3e:0c:cd:9f:ac:23:2d:
                    6b:92:56:a0:e2:67:d4:69:85:7e:5d:d5:5a:4b:3b:
                    c1:df:11:d0:1a:6f:b2:e0:cf:a7:6b:33:74:a5:1f:
                    51:28:c4:dd:cb:a8:95:6b:b2:68:42:c4:83:65:21:
                    00:63:4a:8d:21:7d:35:b1:a6:5f:59:24:82:e8:95:
                    e4:23:3e:46:c6:97:f2:96:c0:58:d4:a6:d0:2e:2d:
                    aa:81:0f:50:04:dc:05:d7:5b:41:02:2b:98:48:d4:
                    2e:39:ed:fa:67:81:d9:9b:e1:90:a0:92:9d:be:a0:
                    69:3e:bf:81:44:37:71:43:cf:f5:7c:89:f7:ec:2e:
                    23:fc:3f:ad:9b:59:28:5b:b1:61:24:af:25:8f:60:
                    6f:1c:fd:12:49:5f:26:54:12:62:b0:d7:ad:c9:ef:
                    b9:1c:1e:04:48:1e:1f:be:6d:0b:e9:f9:b8:1a:74:
                    d7:51:55:08:b0:c6:39:df:be:07:0e:2c:da:8a:e4:
                    e2:cd:10:cf:24:d5:75:75:99:cf:dd:d6:54:07:0c:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:43:3C:48:EA:B2:06:7D:03:B1:67:4A:79:38:01:3A:23:3C:3E
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:71:4f:80:de:56:73:5a:4b:b9:98:a9:d2:30:4b:6f:a8:9a:
         f8:58:19:29:0e:4c:86:ec:39:b7:e3:0a:10:51:36:bc:a0:74:
         01:c7:4a:ce:8f:88:67:d5:ac:c7:56:46:68:c3:2d:26:46:7b:
         d9:9a:b9:5e:73:52:c8:b7:17:af:7f:97:91:95:de:37:c0:6b:
         22:ed:58:11:7a:da:8c:f4:56:db:2c:69:98:fd:69:18:f5:44:
         85:67:15:6b:20:3f:a5:39:28:79:ed:65:e2:47:a8:ca:00:4d:
         a4:00:65:ef:4a:e3:05:2f:de:69:a3:be:6d:e5:26:bf:b0:69:
         4b:55:75:8c:0b:a2:c0:2e:9d:d7:58:a4:70:33:82:97:a4:77:
         a4:6b:38:63:7b:3e:e0:10:7a:88:27:0e:84:1a:9a:05:4d:fb:
         ff:03:74:fb:ac:a2:61:93:b3:e0:06:57:f1:f2:26:6f:d5:30:
         b2:b1:68:13:2e:ea:4d:29:47:ea:a4:f3:21:14:9f:29:ca:de:
         51:b3:87:eb:ed:e1:0e:3c:04:88:59:c7:fd:f2:4c:18:cc:a0:
         65:92:7f:39:9c:f3:00:5f:8d:47:2d:55:6c:34:ce:b5:0d:7e:
         d6:85:2a:d0:03:ef:a4:38:2b:03:10:29:0e:8c:91:96:77:df:
         fe:02:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:16 2025 by rpki-client