Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa
File:                     3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          sF7yb0pXSQih4gHFLNKYsP3wbV5r6ga1RBUMIp6nNmA=
Subject key identifier:   2B:9B:F3:96:49:7C:28:6A:53:26:E3:CC:3A:8E:3E:82:9F:7C:5F:49
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       382A136C3CED81E7EDD022808F5A6BFCB0D95AE1
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 20:53:28 +0000
ROA not before:           Wed 12 Jul 2023 20:48:28 +0000
ROA not after:            Wed 10 Jul 2024 20:53:28 +0000
asID:                     263880
IP address blocks:        138.204.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:13:6c:3c:ed:81:e7:ed:d0:22:80:8f:5a:6b:fc:b0:d9:5a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:48:28 2023 GMT
            Not After : Jul 10 20:53:28 2024 GMT
        Subject: CN=2B9BF396497C286A5326E3CC3A8E3E829F7C5F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:1d:4a:f0:07:c8:8a:9f:c5:c0:cc:bb:35:
                    ed:bb:2a:2d:da:e8:f4:49:c8:dc:e5:c8:bf:03:19:
                    3e:4a:6a:2e:a8:fc:02:41:60:9c:51:1e:db:d5:7e:
                    d8:75:f5:63:95:b9:1f:f9:e3:8a:96:47:48:b4:f0:
                    3f:52:2b:94:d7:ba:ed:4b:50:65:10:62:c2:a9:e0:
                    04:fd:6b:1e:63:d8:f5:9f:e4:18:31:c7:75:30:3e:
                    1b:9d:3b:aa:df:2a:c2:f0:dc:6d:a4:57:9c:6e:f3:
                    04:06:20:6f:ce:f3:fb:58:ed:60:f6:c9:4f:3f:92:
                    f2:a2:56:0a:f9:71:b6:30:81:58:85:1e:31:cb:5a:
                    43:20:97:84:23:b0:22:54:ba:47:7e:a0:2c:b5:f5:
                    7a:eb:65:2e:f4:71:ee:84:88:d1:f3:f8:10:b2:a5:
                    c3:46:a4:95:08:eb:70:1b:64:54:0b:09:20:ae:5d:
                    ee:ed:33:d8:42:cb:29:24:b4:58:a6:b7:65:01:c9:
                    b3:4d:dc:6e:6b:1a:6b:28:2d:5b:25:8a:51:3b:43:
                    f9:3e:bd:ce:bc:6b:27:2f:7e:a8:f8:36:9a:3b:32:
                    d5:49:cb:a4:30:83:9f:34:6b:5a:2e:84:a6:06:cb:
                    66:7e:56:78:ec:45:ae:4c:5a:bd:35:b1:97:12:b2:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:F3:96:49:7C:28:6A:53:26:E3:CC:3A:8E:3E:82:9F:7C:5F:49
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3230342e36382e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:44:a5:45:b2:95:85:67:14:d9:bd:b3:99:90:1d:df:f7:c7:
         6b:31:9d:c4:99:34:41:93:64:2e:37:e8:10:49:38:fc:18:e8:
         7f:35:47:64:73:22:57:6c:8d:4d:a5:b1:86:3c:05:54:85:9f:
         76:2f:52:96:44:98:71:ad:bd:4a:18:eb:b4:52:3c:16:80:72:
         6d:bd:ea:c9:40:a4:17:2f:49:a9:56:b7:51:6b:02:3c:6b:a9:
         88:38:13:3d:4c:69:2b:1b:53:e8:2b:9c:39:a4:81:c8:a9:91:
         20:36:f3:02:7b:0d:56:76:b6:60:2d:59:47:ca:48:db:49:03:
         37:79:75:1d:b2:55:48:be:aa:7b:24:e8:5e:93:f9:35:13:3b:
         72:5e:5b:5c:72:92:13:f3:15:7c:64:ed:f8:1e:c4:df:5f:5f:
         59:e1:99:d7:ba:09:77:d4:18:3f:13:d5:f7:7a:be:d7:eb:ae:
         16:89:07:37:81:f0:33:1d:5a:78:c0:5b:a7:91:fd:9a:ab:a0:
         33:7a:10:db:17:4c:b5:23:3d:85:4f:40:4e:3c:5e:40:1c:ac:
         bb:4d:de:2b:5a:8e:7f:95:e4:4b:b3:1d:7c:d5:6e:dd:86:ca:
         a5:72:23:2d:99:06:e1:61:07:d1:01:29:fc:36:04:ab:4c:35:
         06:26:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:04 2025 by rpki-client