Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa
File:                     3133382e302e3131342e302f32332d3233203d3e20323634353434.roa (raw, json)
Hash identifier:          ugYRSpFEBSprRmFoDWAOtd//MRzvMD5T8mtOg6tTBQI=
Subject key identifier:   EB:E5:F2:10:A4:74:C8:CC:26:F4:B3:B3:AB:90:88:5D:5A:99:15:AB
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       25701F41DB26AE36DE03831B655E58AC676E083B
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa
Signing time:             Tue 04 Feb 2025 02:44:08 +0000
ROA not before:           Tue 04 Feb 2025 02:39:08 +0000
ROA not after:            Tue 03 Feb 2026 02:44:08 +0000
asID:                     264544
IP address blocks:        138.0.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:70:1f:41:db:26:ae:36:de:03:83:1b:65:5e:58:ac:67:6e:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Feb  4 02:39:08 2025 GMT
            Not After : Feb  3 02:44:08 2026 GMT
        Subject: CN=EBE5F210A474C8CC26F4B3B3AB90885D5A9915AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:52:34:5a:c6:67:04:b5:a3:44:cd:75:fe:
                    a6:a3:28:40:5f:20:f8:b6:f4:73:e4:cb:85:34:97:
                    53:13:3c:27:80:ab:ef:63:0a:69:fa:73:37:47:d3:
                    59:1d:99:2f:fc:41:91:b9:75:3c:5d:7f:9e:64:e9:
                    91:2a:7e:1f:fd:23:77:f2:23:4b:1d:91:81:bd:83:
                    59:3a:4f:4e:e0:d6:1a:d5:42:cd:5b:b5:87:e8:d2:
                    a6:e7:44:12:f5:3f:0f:3e:97:f2:75:e5:af:3a:6b:
                    b1:73:69:10:c4:a1:68:42:25:4c:42:58:8b:a1:24:
                    db:5b:3d:bc:61:2a:e9:e6:ce:62:d9:15:75:3b:3b:
                    86:35:7e:b1:06:51:70:c0:0a:ba:83:fb:21:f3:7f:
                    d3:b9:71:4f:b1:80:5d:bf:48:35:26:44:e7:4f:f5:
                    76:18:a5:d8:64:b0:1b:cf:42:a3:f0:57:59:ea:b6:
                    eb:6a:42:4d:aa:e9:c5:9a:56:b7:14:c5:8d:d1:05:
                    09:10:e0:4d:14:af:a8:66:b6:7d:27:e1:a8:6c:9d:
                    b9:c2:47:07:ea:cf:b2:9e:4d:9f:04:4f:1d:cb:eb:
                    42:42:42:c4:94:1c:ce:4d:a0:32:0a:7b:67:8c:db:
                    3e:69:cb:e7:79:d6:61:44:30:56:66:74:21:5e:78:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E5:F2:10:A4:74:C8:CC:26:F4:B3:B3:AB:90:88:5D:5A:99:15:AB
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131342e302f32332d3233203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:41:4b:af:e7:ac:91:d1:d9:da:24:8b:97:29:5e:a4:0a:
         24:b9:3a:77:f5:b6:cf:a8:48:a1:dc:cb:1d:d9:66:de:06:76:
         f2:b3:67:a5:c0:63:7d:c1:9a:8c:b7:a2:de:28:e4:9c:f0:ed:
         de:12:e8:68:7d:40:d9:8d:4b:86:d9:e2:fb:49:3d:51:3f:b9:
         37:09:12:e5:f5:b0:84:ba:61:e6:92:f9:c2:f7:1c:0c:14:cb:
         e1:e4:ca:77:1f:6a:59:e8:e5:f0:2d:6c:bf:8e:5b:24:19:ff:
         0f:03:5f:e4:e5:e9:ab:d7:39:8b:f5:cf:4a:b9:b2:25:a5:81:
         5a:ee:4c:f7:f8:52:af:04:dc:cb:57:e7:7c:93:df:34:de:e5:
         4e:4d:29:18:53:c7:16:96:e1:13:94:9a:30:f9:ba:9b:78:ac:
         19:cb:2a:f7:8c:ad:11:5d:c1:56:ba:7c:d7:ff:4d:26:fe:ee:
         b7:38:a3:96:7d:e2:eb:1b:d5:81:ff:70:c1:9a:69:7d:3a:b5:
         58:d6:f7:bb:e8:78:39:e7:d2:e6:f6:96:26:ce:68:66:55:b3:
         f9:61:05:a5:be:22:18:f3:46:13:89:6a:18:04:a7:5c:86:ba:
         12:34:28:01:fd:fc:a5:a8:37:55:91:2c:59:71:0c:62:b0:5b:
         35:0c:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:39 2025 by rpki-client