Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32342d3234203d3e20323733333039.roa
File:                     3133382e3132322e31362e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          thmF/cXbmx+M0BCuRo/STe26BFJKFXxvXKRnIMDaiN0=
Subject key identifier:   09:18:DC:65:35:72:F8:07:66:5B:5F:96:55:4B:4B:7C:F3:E9:5F:4F
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       1AD3E522E4C71D5DAD1459F1796B59DDF04F1D6B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 22 Jan 2025 18:51:55 +0000
ROA not before:           Wed 22 Jan 2025 18:46:55 +0000
ROA not after:            Wed 21 Jan 2026 18:51:55 +0000
asID:                     273309
IP address blocks:        138.122.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d3:e5:22:e4:c7:1d:5d:ad:14:59:f1:79:6b:59:dd:f0:4f:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Jan 22 18:46:55 2025 GMT
            Not After : Jan 21 18:51:55 2026 GMT
        Subject: CN=0918DC653572F807665B5F96554B4B7CF3E95F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:6b:92:54:70:ca:73:86:6d:42:9e:09:13:
                    5d:7b:02:c6:0e:28:2b:c1:22:c1:a9:5d:2c:4a:0b:
                    49:4f:e6:52:b2:03:d1:bc:89:89:39:87:72:88:23:
                    fc:c0:66:84:3e:58:77:77:60:10:ec:59:eb:34:87:
                    cd:0d:44:1a:71:c1:56:72:c8:30:3d:cc:91:a5:e4:
                    ea:ea:f5:17:af:95:b1:61:52:de:1f:4b:bf:c1:4f:
                    5f:7a:06:38:26:55:be:2d:65:a5:10:01:7a:bb:1c:
                    57:9a:6a:96:5f:7c:65:cc:c3:66:52:cc:db:ee:60:
                    2e:70:70:96:21:59:07:c9:e5:8d:c3:41:55:e7:45:
                    d7:c0:f7:fd:2a:56:c6:44:cb:ed:62:16:1e:25:86:
                    15:92:6b:31:c8:7f:d5:7d:7b:5e:8f:11:e5:ab:49:
                    2f:74:c0:84:27:5a:d2:72:8b:bc:ff:b7:9e:ef:82:
                    5e:e7:98:bf:4c:3b:cb:cf:91:52:ef:82:06:75:36:
                    f4:1e:8e:82:18:61:06:b2:ec:7a:11:4a:cf:e4:ad:
                    77:5e:a4:a1:de:fa:80:b8:34:33:67:ab:1c:88:eb:
                    f8:66:28:47:7f:d2:e8:fd:9c:aa:4d:7c:27:a8:59:
                    eb:82:89:07:be:17:cc:f8:99:6e:f2:d1:18:18:29:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:DC:65:35:72:F8:07:66:5B:5F:96:55:4B:4B:7C:F3:E9:5F:4F
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31362e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:b0:7b:b6:bf:77:4e:78:01:ad:ac:13:78:f3:4a:75:5a:
         d8:91:f0:40:fa:92:00:0d:52:bd:a8:8a:c2:d5:f2:68:56:d6:
         ef:01:ba:3b:03:1b:72:dc:87:a7:0c:1b:6f:02:65:b4:7d:5d:
         44:2c:31:aa:51:c6:6c:da:b9:73:f7:fd:e7:d1:3a:c6:bf:6e:
         d9:61:06:12:3e:fb:2a:83:9e:38:a2:e5:49:1e:8b:55:7b:0f:
         49:94:c5:31:1d:04:a4:ba:ef:5a:75:2d:47:e7:0b:7a:d9:c2:
         9a:71:84:c5:2c:ee:de:d9:ab:73:78:4a:c3:fc:fd:7c:48:49:
         cd:ea:06:48:3f:3d:12:8a:b9:2e:87:23:82:f1:28:8b:f0:74:
         b8:c9:59:35:b7:16:6e:79:b0:b5:77:f5:40:06:3c:5e:67:d8:
         ca:7f:78:38:89:b0:04:36:e8:c8:f4:e2:07:a1:c2:79:1b:14:
         55:40:db:92:2e:12:cc:d2:f6:d0:f1:2b:b6:27:79:79:1c:7a:
         79:58:3d:fd:5d:35:ee:8b:68:9b:ce:97:58:57:77:ad:fa:af:
         62:6e:4f:90:67:d4:1b:91:c2:b5:8d:8a:ef:b8:bb:5b:cd:4e:
         05:a6:a6:6b:0d:a4:d3:65:1e:71:52:23:ce:a8:b1:cb:88:6a:
         2b:5e:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:33:09 2025 by rpki-client