Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa
File:                     3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa (raw, json)
Hash identifier:          vvPiBsQx4ibbYovZfpNO3cIWHbm6csqZFnRWom025CA=
Subject key identifier:   45:02:C1:45:76:84:90:0E:52:3C:43:C5:2F:29:9D:AE:D5:04:62:F6
Certificate issuer:       /CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
Certificate serial:       54B42ADC4111FB57739DA9601E4255EB57D6016A
Authority key identifier: 2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa
Signing time:             Tue 26 Nov 2024 18:54:36 +0000
ROA not before:           Tue 26 Nov 2024 18:49:36 +0000
ROA not after:            Tue 25 Nov 2025 18:54:36 +0000
asID:                     263855
IP address blocks:        138.186.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b4:2a:dc:41:11:fb:57:73:9d:a9:60:1e:42:55:eb:57:d6:01:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAAE9376A44E0C38B3B347DE65243184A2C2242
        Validity
            Not Before: Nov 26 18:49:36 2024 GMT
            Not After : Nov 25 18:54:36 2025 GMT
        Subject: CN=4502C1457684900E523C43C52F299DAED50462F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:77:47:6a:93:aa:47:f5:2c:8d:20:53:96:
                    af:fc:9e:c6:77:05:da:c8:54:86:73:11:98:04:b7:
                    a7:58:73:ca:4c:ee:de:a7:da:c5:1f:60:bb:54:a9:
                    46:29:c4:35:fb:e0:c6:92:11:28:6d:c1:1b:f4:cf:
                    fd:32:45:00:ac:49:aa:0f:51:70:e0:43:19:49:58:
                    4d:e8:9d:d8:49:b5:9a:6b:8b:f5:7f:99:08:0d:3f:
                    bf:d0:69:58:ee:33:8c:70:3a:81:98:52:0a:34:8a:
                    90:bc:b2:49:a1:7b:3e:f4:3c:55:04:75:a9:0b:d5:
                    d1:a5:f7:fc:f9:32:71:fb:5f:02:d1:1b:9a:06:12:
                    2d:3d:d6:8b:c6:4b:56:55:ab:43:5b:80:d0:19:4f:
                    2b:e4:e8:c3:c0:c5:4a:89:31:89:48:ba:9a:e9:70:
                    07:e0:96:60:22:3c:81:c7:a6:56:a2:75:76:3e:f9:
                    8e:5d:e2:67:aa:13:9c:0c:e8:c8:e4:83:4b:d1:cd:
                    6d:c3:fc:34:7c:ff:cc:ae:eb:cf:85:0e:dd:f8:aa:
                    d8:e5:44:ad:58:7e:ef:49:77:a8:a3:29:64:91:95:
                    fa:3b:fa:02:a5:d6:29:fb:4b:83:c4:44:82:0b:7b:
                    d1:f3:cf:75:e3:38:b6:8c:65:87:71:98:b9:d3:8b:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:C1:45:76:84:90:0E:52:3C:43:C5:2F:29:9D:AE:D5:04:62:F6
            X509v3 Authority Key Identifier:
                keyid:2A:AA:E9:37:6A:44:E0:C3:8B:3B:34:7D:E6:52:43:18:4A:2C:22:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2AAAE9376A44E0C38B3B347DE65243184A2C2242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAAE9376A44E0C38B3B347DE65243184A2C2242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:66:15:a8:22:af:52:39:1b:29:be:ac:e8:89:42:a8:0b:
         2d:e1:13:d4:59:17:dd:fc:1c:1d:43:c2:d2:16:b8:dd:fd:cb:
         95:b4:cc:e3:5d:c1:95:a9:e8:9a:83:11:3a:60:25:43:2e:fb:
         56:05:b4:3c:8d:2d:f4:4e:0e:7a:e4:c7:2d:4d:06:4c:64:42:
         8f:36:5e:64:54:d1:36:56:a6:50:1d:ab:e8:00:8e:66:f0:6d:
         f2:d5:c1:04:88:b1:f1:77:50:67:48:87:0b:9a:1a:1e:42:e7:
         8f:e8:58:fe:b8:98:86:84:68:77:1b:31:2b:7a:02:d9:d1:31:
         ee:9b:15:8e:d3:fd:53:74:b2:0b:8c:96:66:66:4b:75:4f:f3:
         32:7b:f0:05:50:24:52:f6:41:0e:fe:4f:40:fa:fe:d9:02:80:
         dd:37:76:3f:6c:69:df:72:84:ba:f9:21:de:45:30:d4:6d:c1:
         5f:58:be:1f:20:ee:27:73:77:ef:28:46:2e:65:5c:06:6f:5d:
         59:6b:61:35:bd:e9:58:71:9e:86:12:0b:20:f0:9f:cd:7a:00:
         08:6c:80:6b:1e:dc:26:a3:2c:bb:f1:59:52:c3:4c:ae:ed:37:
         66:a1:4d:29:85:15:17:64:41:d8:d2:71:1b:06:1c:bf:39:80:
         42:6d:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:35 2025 by rpki-client