Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3234203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier:          kHY3vbdhbmOtvprC7VWoRr34UYrhO4Kyel43v0JKVMs=
Subject key identifier:   DF:8A:6F:D8:45:84:BC:37:5C:C7:EF:B5:02:30:28:F7:D5:AA:51:BB
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       2A92BAF2BF47656A854F7AE12AE32DFB24A4DD0E
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3234203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:38 +0000
ROA not before:           Wed 31 Jul 2024 22:20:38 +0000
ROA not after:            Wed 30 Jul 2025 22:25:38 +0000
asID:                     28165
IP address blocks:        138.204.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:ba:f2:bf:47:65:6a:85:4f:7a:e1:2a:e3:2d:fb:24:a4:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:38 2024 GMT
            Not After : Jul 30 22:25:38 2025 GMT
        Subject: CN=DF8A6FD84584BC375CC7EFB5023028F7D5AA51BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:57:e9:98:60:06:13:88:58:ad:68:4a:aa:
                    e4:92:3d:88:9d:d6:bc:0e:f5:74:57:c4:20:60:47:
                    62:dd:9f:c9:2a:8c:f6:ec:fc:89:66:67:f0:7c:ac:
                    92:5a:3e:2d:57:4d:06:62:47:b1:8e:4d:fe:e7:4a:
                    cc:db:e8:5b:6f:f6:64:b8:5d:6f:4f:d2:96:06:d8:
                    2c:a6:9b:77:7f:12:35:36:73:7d:2c:76:7a:73:e6:
                    87:07:d2:93:ff:7b:e3:83:df:31:9b:b7:c0:7e:f0:
                    47:fe:78:45:f8:d7:ec:53:3f:65:e6:c7:05:61:ce:
                    84:8c:d0:32:23:4f:60:ba:5f:e5:81:89:11:e5:71:
                    d5:b5:95:91:0c:d7:4a:09:7d:a3:09:88:2f:35:f8:
                    30:77:29:e0:54:86:35:01:83:7e:e3:e0:9c:ee:92:
                    0c:b4:09:8e:1e:4e:61:ee:96:e6:de:75:12:c5:39:
                    f0:a5:dc:b3:dc:45:85:fd:50:73:da:a3:86:9e:c5:
                    a0:ce:10:74:9d:37:99:64:fd:3c:f4:8a:ab:8c:85:
                    e3:24:b8:33:2a:2a:92:e9:44:c8:9b:b8:98:fe:fc:
                    fc:27:bc:44:df:e3:e5:d0:c3:bf:81:57:0f:68:ce:
                    81:a5:d9:51:e1:92:8f:ad:2c:56:29:6e:b8:57:bc:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:6F:D8:45:84:BC:37:5C:C7:EF:B5:02:30:28:F7:D5:AA:51:BB
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32322d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:b8:18:d2:39:65:97:b7:e2:b8:c6:3f:9d:5d:ea:7e:f1:
         35:66:b2:38:b7:ab:09:fe:b6:c1:03:90:e3:29:eb:17:d2:73:
         4a:00:73:90:b5:62:4d:03:3a:22:d5:a6:bc:61:97:0c:09:a2:
         9b:47:c3:09:03:27:89:38:30:de:b9:94:25:2f:ed:7b:d5:2e:
         8e:e4:49:3c:6b:c1:a2:a8:d5:5f:64:72:37:6b:7d:06:de:b7:
         7d:65:d2:f2:a9:64:4a:58:28:75:18:f3:bd:f9:7e:9c:e7:6d:
         65:94:fe:f5:1f:8f:a9:b4:d6:53:4f:e6:c4:65:97:2a:c6:3d:
         93:d6:cf:db:db:a7:d7:74:83:9f:04:73:50:91:4c:d7:5c:1a:
         fb:a0:19:57:a5:13:1e:5e:ce:77:d6:96:00:b6:ea:54:df:f6:
         e8:d2:84:3b:45:21:e9:10:41:4e:1b:9d:b3:05:7f:57:78:a4:
         5f:90:f9:68:05:9a:2c:5b:c3:4d:8f:b1:e2:d9:57:e5:67:73:
         a0:97:ce:5c:9e:ef:de:64:23:3b:4b:c5:ae:47:32:31:53:ac:
         a4:26:8e:29:56:41:47:cc:bd:14:73:7e:20:00:6f:ce:28:df:
         41:4c:76:74:0b:87:c9:f8:a5:2b:52:98:0b:2e:87:51:21:bd:
         43:a6:2e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:30:49 2025 by rpki-client