Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa
File:                     3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          59tTL1ei0w0leGPlSBMlxljRWkvkrELKtzuTqlFYnlE=
Subject key identifier:   B0:52:48:A8:D1:58:F1:84:52:05:9B:A3:26:55:43:78:00:AC:BD:98
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       51F62FDA5D42D459BC2BD466F45622B3EB240A04
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 22 Jan 2025 18:51:55 +0000
ROA not before:           Wed 22 Jan 2025 18:46:55 +0000
ROA not after:            Wed 21 Jan 2026 18:51:55 +0000
asID:                     273309
IP address blocks:        138.122.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f6:2f:da:5d:42:d4:59:bc:2b:d4:66:f4:56:22:b3:eb:24:0a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: Jan 22 18:46:55 2025 GMT
            Not After : Jan 21 18:51:55 2026 GMT
        Subject: CN=B05248A8D158F18452059BA32655437800ACBD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:6b:18:af:c6:8b:16:15:fd:7d:e6:6b:11:
                    97:5a:ab:b4:88:74:a7:89:9d:e8:17:cf:06:20:c5:
                    c1:4b:20:82:17:22:56:b4:c8:28:0f:ca:b7:61:17:
                    60:34:ba:1b:04:cb:bd:a9:4b:7d:07:65:0b:29:9c:
                    08:8c:1d:f7:6b:b3:2b:35:58:22:7b:83:10:ba:a8:
                    d3:97:b3:69:2d:69:74:ec:56:0e:e4:3c:24:c6:ca:
                    b6:98:59:45:7f:12:8a:09:d9:38:b8:9a:bb:ab:78:
                    68:57:5c:ac:c4:05:a3:81:b8:86:30:50:be:a7:4d:
                    6e:7c:25:77:cd:2f:c0:36:95:d7:b9:81:e7:93:6f:
                    78:d6:ad:0d:45:a1:ba:cc:fb:73:09:d6:b0:04:f5:
                    38:ee:ae:c9:53:b7:44:c1:55:9c:34:f3:c8:3a:9b:
                    a9:30:df:27:6a:4f:f7:3f:fa:07:42:93:12:3d:1c:
                    7d:7c:be:45:84:36:a4:f8:ce:62:46:01:8b:22:4f:
                    92:08:c8:d2:6d:c5:0e:6d:36:16:40:10:2f:c8:40:
                    09:4b:5e:c4:d4:2c:d5:11:3f:96:f9:df:a2:72:6a:
                    77:6c:12:13:0b:e2:d1:de:df:20:62:ca:80:b2:b3:
                    99:13:6f:ba:dd:26:09:2e:c4:1f:f4:fe:d6:93:26:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:48:A8:D1:58:F1:84:52:05:9B:A3:26:55:43:78:00:AC:BD:98
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31372e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:4e:b3:c3:2d:9b:9b:57:16:06:37:ba:0e:5f:12:ed:0d:
         0c:70:d5:4e:d4:a9:81:8a:7f:de:30:eb:3b:2a:71:fd:15:5f:
         73:70:09:ff:f9:c8:c0:ae:8c:9d:8a:db:6a:ff:59:c0:a9:41:
         07:2c:69:19:09:57:1a:7b:e6:ad:4c:e4:51:aa:50:40:26:a9:
         bb:3b:bd:3d:da:76:97:d1:e3:2b:7d:65:36:3f:f4:78:7e:f9:
         47:97:61:54:01:f3:37:a7:f3:62:f4:86:19:be:a6:36:1e:90:
         ee:77:0a:15:45:31:b8:eb:28:cb:66:41:93:d7:ca:78:a8:ec:
         02:de:89:33:d2:85:ff:cc:d8:11:c0:88:04:42:85:c6:e4:6a:
         d6:23:a9:3e:36:44:de:ab:e8:02:53:d8:63:a8:df:32:50:23:
         bf:1b:0d:9e:13:64:a6:1d:b0:7c:b9:37:2e:33:79:1c:f1:fe:
         14:33:1a:eb:dc:57:4d:3c:2d:a1:8c:6e:63:77:8c:8f:62:b8:
         64:d9:82:ea:8f:cf:09:c7:15:e0:e0:2c:4b:ed:94:4b:51:e2:
         46:d2:cb:be:6d:8b:b4:06:68:aa:13:aa:8c:c4:35:aa:27:3a:
         fe:f1:09:62:52:bc:7b:a3:9c:51:41:5d:3b:25:21:60:e9:6e:
         bb:14:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:34:01 2025 by rpki-client