Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          jUba/Hpu+KTnTBD2icCbW6wyEYAw7x0M7lerkWvs/xU=
Subject key identifier:   FA:AD:F5:F9:7C:FE:D0:96:C7:6B:FA:56:73:03:2D:0B:1A:27:BD:13
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       1F8982420563265229EF8CD7D9D93E7D5A3DF645
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        138.121.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:89:82:42:05:63:26:52:29:ef:8c:d7:d9:d9:3e:7d:5a:3d:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=FAADF5F97CFED096C76BFA5673032D0B1A27BD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:52:ed:7f:c7:03:f1:8b:63:56:94:32:88:
                    8d:ad:8a:ec:34:f5:30:66:23:48:0f:3d:c6:1c:59:
                    4a:f5:b3:ab:71:ce:ba:02:e7:44:1b:7d:e4:8c:e6:
                    9c:b0:2e:e4:c8:d6:50:11:15:84:a7:f4:72:38:c8:
                    53:2b:fd:99:34:d2:8c:1d:ef:c5:76:50:94:cc:f6:
                    48:65:90:8b:b5:ee:0f:87:13:7c:be:ee:d0:38:42:
                    c0:d2:8e:76:67:6e:d6:de:fa:41:ef:e8:4e:94:7f:
                    5c:74:5c:61:20:4e:97:e8:97:80:1d:22:c1:08:59:
                    8f:c5:6e:cc:92:54:2c:37:5a:d7:d7:01:01:89:bc:
                    2d:14:a6:92:9d:54:06:c5:a7:8b:7d:dd:15:95:50:
                    a2:f4:f1:94:d0:5e:06:63:d1:f1:21:1f:ad:26:2f:
                    57:f0:5d:d1:f5:1b:eb:f6:ee:6a:ce:d2:b2:23:d6:
                    d2:aa:34:aa:54:40:2e:32:60:4c:84:b6:68:5d:01:
                    97:b2:95:2d:71:9d:13:d7:0f:20:3d:06:13:6f:a3:
                    78:0d:c5:e3:57:56:79:13:b8:ec:4a:48:c6:78:fc:
                    01:cd:af:fc:1a:3b:2f:64:25:a3:8f:b0:3d:d1:71:
                    e9:7a:e5:d9:f5:47:fb:cc:33:d4:a9:17:51:04:1c:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:F5:F9:7C:FE:D0:96:C7:6B:FA:56:73:03:2D:0B:1A:27:BD:13
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:d0:ee:22:42:3a:1f:b7:0f:24:22:bc:ee:a2:8a:47:58:
         22:f0:4c:5c:4b:b8:05:e3:2f:9b:2a:ae:3b:b7:0b:fd:9f:b5:
         55:aa:e0:4f:02:a6:b4:ff:96:03:e4:49:34:ac:a9:bd:53:b2:
         3f:bd:31:d8:f3:3c:81:29:0d:2a:c1:9b:01:be:8c:d1:00:9c:
         3c:1f:83:76:7f:de:90:69:e2:a6:34:1a:14:86:06:c7:87:ad:
         e6:2c:87:60:9c:29:35:58:53:2f:f6:4d:00:e2:7c:2d:2b:72:
         37:e8:5a:2c:39:ee:f8:03:56:c8:98:ae:66:fd:08:4e:25:cf:
         20:4d:e6:fe:5c:b9:62:65:35:cf:f6:cf:ce:9d:32:94:c9:60:
         26:b0:d7:a4:41:42:e3:a2:97:df:db:95:3d:14:15:2e:27:fb:
         04:58:d2:ff:db:fc:e2:22:3d:90:9e:ca:bc:6d:88:24:48:0e:
         2d:ae:42:5d:61:d5:22:f2:a8:53:e7:8b:01:b6:7f:42:ec:4e:
         3d:15:ed:9b:5d:22:86:05:75:6c:ae:08:74:32:06:9d:bf:f0:
         15:03:ac:7b:bb:7d:2a:c6:3c:c2:d4:f5:c3:fb:01:03:4b:44:
         b2:e6:82:4c:23:65:1e:4e:9a:08:b1:eb:af:65:96:f3:df:3b:
         d5:c9:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:01 2025 by rpki-client