Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3232203d3e20323633383535.roa
File:                     3133382e3138362e38342e302f32322d3232203d3e20323633383535.roa (raw, json)
Hash identifier:          KxkPuV3FCNBUP8TwkeQPY5x4kUrWwthqF6t4oWVTwPs=
Subject key identifier:   E6:6C:11:02:F7:30:28:BE:78:75:93:C4:1B:CD:AF:F9:BC:1A:EA:C4
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       73F3A49073D9970F37C33FF2910DCAD176A3A5D7
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3232203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:27 +0000
ROA not before:           Tue 26 Nov 2024 18:49:27 +0000
ROA not after:            Tue 25 Nov 2025 18:54:27 +0000
asID:                     263855
IP address blocks:        138.186.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:a4:90:73:d9:97:0f:37:c3:3f:f2:91:0d:ca:d1:76:a3:a5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:27 2024 GMT
            Not After : Nov 25 18:54:27 2025 GMT
        Subject: CN=E66C1102F73028BE787593C41BCDAFF9BC1AEAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:59:64:2b:b5:2a:b3:d3:7b:2a:8a:31:27:
                    34:67:f5:b5:fa:31:98:07:8c:86:4f:03:bd:73:a4:
                    02:49:b4:6c:61:e9:f6:01:66:61:29:45:e8:3b:45:
                    10:ae:79:96:97:e5:c1:cf:8b:d1:01:01:55:ff:0b:
                    d6:7e:65:4f:e0:c9:1c:ec:2e:1c:4c:1c:11:a7:ce:
                    69:30:d4:c5:d7:37:ca:d4:8e:09:1d:df:2a:b2:e2:
                    09:ce:ca:91:77:89:e1:30:75:60:78:5b:2e:2a:35:
                    3c:26:30:97:34:ea:ed:34:79:c1:d5:7e:d4:26:1a:
                    bb:3d:d6:04:f6:1a:7f:60:06:be:96:2e:86:e6:e8:
                    1f:4f:cb:89:88:b3:d5:33:fc:f9:03:6b:a3:46:2a:
                    69:8b:c1:24:a0:bd:3b:65:df:49:73:03:29:ee:57:
                    f9:44:ce:75:37:c3:55:e6:46:fe:9d:17:85:2d:ce:
                    af:e5:7b:94:50:1e:b6:0f:e2:ca:85:bd:d7:3c:0e:
                    0d:e5:b8:e6:ff:40:c6:61:fb:b0:4c:fa:62:f3:86:
                    b9:29:88:5a:28:77:bf:f1:64:2c:c5:21:a3:3f:76:
                    10:93:a6:ee:15:7b:0d:f4:b6:9c:9f:4b:7f:53:66:
                    a3:9a:35:e2:2c:50:21:6d:cb:4a:6b:e1:09:8c:5e:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:11:02:F7:30:28:BE:78:75:93:C4:1B:CD:AF:F9:BC:1A:EA:C4
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3232203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:ba:36:39:92:c8:ef:0b:4d:a7:92:d4:76:f9:bc:b8:8a:
         7a:40:fe:16:82:16:39:7a:56:e8:1b:7d:f4:a3:34:4e:37:62:
         96:8d:66:ae:00:15:48:09:b2:c2:11:61:5d:9a:a3:8a:89:5f:
         69:b4:5b:57:39:12:f9:a7:92:20:a7:c1:25:3d:a2:52:c6:6c:
         e6:cc:af:2e:29:93:5a:76:9e:56:58:73:0e:8a:db:5a:e7:c1:
         76:df:1a:6f:08:36:ca:13:f5:b4:18:0d:73:96:6e:85:6a:3a:
         b9:32:8b:ec:cb:35:8b:17:b5:4f:9b:0d:f0:4b:eb:6f:07:7d:
         a3:b6:5d:2d:9b:76:8e:31:bc:1e:52:67:42:4c:11:b8:91:ce:
         61:e7:6b:b0:78:65:57:ed:a7:62:77:e9:09:63:47:e3:64:7a:
         36:e4:f3:7d:3e:51:4d:c4:04:7d:8b:54:34:40:a3:b2:0d:4b:
         cf:61:5d:a5:a6:4b:5e:4e:8f:e1:f5:e9:0d:ef:21:e7:dc:3b:
         12:ae:0d:a4:d4:a8:43:c3:ec:c7:5a:dd:60:ee:78:14:ad:3c:
         2d:e2:3e:b4:56:28:af:7d:f2:35:6c:6f:41:f9:2e:c8:4b:43:
         96:a4:7e:d0:bb:72:73:94:44:bf:a9:c9:80:c7:da:76:5b:34:
         80:39:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:34 2025 by rpki-client