Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
File:                     3133382e39392e34322e302f32342d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          5ODGSMGL7CPBdBb0PqDlrgEO5LOQCGRDI+N8lZ8j1I4=
Subject key identifier:   7B:13:BA:5E:15:18:55:D1:79:5B:C3:39:2E:8F:46:1C:13:D4:D9:7D
Certificate issuer:       /CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
Certificate serial:       314CA954B5A2ECBF9BDCC2833CD55CEAF05E839D
Authority key identifier: 1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa
Signing time:             Tue 07 Mar 2023 22:21:31 +0000
ROA not before:           Tue 07 Mar 2023 22:16:31 +0000
ROA not after:            Tue 05 Mar 2024 22:21:31 +0000
asID:                     263086
IP address blocks:        138.99.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4c:a9:54:b5:a2:ec:bf:9b:dc:c2:83:3c:d5:5c:ea:f0:5e:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B
        Validity
            Not Before: Mar  7 22:16:31 2023 GMT
            Not After : Mar  5 22:21:31 2024 GMT
        Subject: CN=7B13BA5E151855D1795BC3392E8F461C13D4D97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:10:84:1c:c5:7c:63:12:ae:b5:b6:fa:21:
                    10:e5:2e:da:40:9c:20:38:2f:58:52:f4:e5:e3:97:
                    25:fd:58:f2:14:01:d9:60:a9:d8:e8:df:29:34:0d:
                    d8:12:3f:e3:15:13:67:66:bb:4d:72:e9:26:8a:5e:
                    e7:e2:3e:60:23:b6:df:49:ed:51:0a:57:ee:2d:bb:
                    40:86:4f:da:a6:d9:29:82:b5:8b:96:6d:95:dd:1a:
                    50:14:53:c3:4d:b9:7f:a7:04:a2:bc:ec:8b:93:05:
                    39:4e:36:4e:f4:3f:62:ba:fc:4d:db:38:50:e8:3c:
                    50:f4:e7:88:08:70:f0:58:7e:f9:fe:68:6e:4d:d6:
                    b3:88:d0:f1:1b:8c:ab:ac:f1:11:4d:73:19:57:85:
                    2a:03:90:d2:c6:51:18:a7:91:5e:c7:3e:4d:c5:f5:
                    e0:9f:c8:4a:f6:57:4b:62:e7:a3:7b:f2:c5:97:c1:
                    51:00:a7:5f:36:44:6e:13:4b:75:d4:77:e7:6f:36:
                    d6:22:65:75:7f:ae:98:21:4a:db:28:25:65:56:47:
                    91:f3:73:b3:2a:ab:b7:e3:1d:ac:2e:87:c1:fb:37:
                    82:74:0e:c8:57:b4:01:ae:e2:f6:a0:c4:5f:a6:8a:
                    cc:f6:fd:ea:d7:2f:2e:e5:a8:00:73:df:e4:78:73:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:BA:5E:15:18:55:D1:79:5B:C3:39:2E:8F:46:1C:13:D4:D9:7D
            X509v3 Authority Key Identifier:
                keyid:1C:5F:E8:A7:A5:CA:F8:C0:33:2E:DF:71:1A:BD:C0:80:5B:20:8F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5FE8A7A5CAF8C0332EDF711ABDC0805B208F9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3133382e39392e34322e302f32342d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:18:4e:4d:d1:90:20:40:40:1e:21:0e:15:04:51:1f:1d:4a:
         6b:28:dd:44:31:c2:03:52:10:6e:8b:23:39:6c:8e:9e:c0:a5:
         8c:fc:db:c4:d7:3a:13:fe:8a:2a:d2:0d:d1:f4:9e:40:e7:73:
         86:81:2d:5d:b9:54:dc:60:e1:13:0f:c8:3b:2d:8d:9d:97:ba:
         04:66:96:7e:71:06:f0:1c:71:cf:48:39:fc:7e:72:1e:77:a7:
         78:aa:a1:c5:0c:30:6e:a5:53:1d:b5:f0:c3:80:72:33:29:cc:
         81:89:cb:56:c6:31:ec:21:e9:bd:e4:a5:69:2b:ea:21:84:11:
         85:3f:93:61:fb:91:d9:f4:bf:09:bd:de:49:b3:95:00:dc:b1:
         a1:ee:79:7d:76:9b:01:54:ce:bb:4f:ff:9a:19:aa:f5:8c:07:
         c5:83:5b:4e:98:2c:ff:d1:33:70:35:18:e2:f5:91:97:86:73:
         4f:28:e1:21:92:78:c8:92:6a:64:cd:03:54:10:99:14:5a:1b:
         97:c6:8a:f9:06:e8:01:00:a7:00:04:38:bd:87:dc:1b:9a:4d:
         90:92:f7:e6:d9:40:dd:20:c4:94:3e:15:00:95:c7:d6:87:d9:
         6f:53:fb:8c:ea:6d:ff:23:6e:7f:18:a9:c2:fe:f6:51:97:be:
         5c:d0:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:09 2025 by rpki-client