Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          gFG5J9TFUd6OmT7cJMVuEOOh8RRDkMKRRfRHoNQkz6w=
Subject key identifier:   64:CC:A2:09:C2:BE:7C:E8:DC:B1:25:CD:3D:9C:55:C4:23:EF:62:72
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       527D0552D09788B2315138A4C7FE65259B551F37
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa
Signing time:             Thu 06 Mar 2025 05:07:23 +0000
ROA not before:           Thu 06 Mar 2025 05:02:23 +0000
ROA not after:            Thu 05 Mar 2026 05:07:23 +0000
asID:                     262518
IP address blocks:        138.122.172.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:05:52:d0:97:88:b2:31:51:38:a4:c7:fe:65:25:9b:55:1f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Mar  6 05:02:23 2025 GMT
            Not After : Mar  5 05:07:23 2026 GMT
        Subject: CN=64CCA209C2BE7CE8DCB125CD3D9C55C423EF6272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:11:73:5d:d0:d9:3e:fc:d3:99:c9:d6:06:
                    54:e7:2d:d2:b1:d2:8c:8b:92:71:5e:7f:a2:2c:62:
                    92:e4:ef:e4:e2:7b:88:bc:3c:b6:2c:c7:5b:5d:42:
                    40:97:1d:b9:cd:dc:7a:95:be:cf:fb:9f:ea:ba:92:
                    48:72:71:9f:ab:84:93:86:a7:db:01:cf:c9:ef:0a:
                    4e:70:28:81:8c:9a:7f:b6:28:9e:f5:2b:ac:86:5f:
                    93:00:f8:18:da:40:08:4f:8b:e5:8f:ec:c3:d9:c5:
                    1c:67:6f:79:c2:0d:4e:ee:99:5b:a6:08:f9:37:ed:
                    f7:be:f6:13:eb:27:2a:76:61:15:89:94:bc:1e:19:
                    98:50:b6:0e:ca:f7:ef:81:90:b2:96:81:ae:38:1e:
                    ee:d5:4b:c5:b6:c2:af:a1:46:6e:d2:6b:c6:33:e1:
                    90:98:3c:51:af:4a:e8:0e:cf:aa:39:16:92:3d:11:
                    74:3c:86:b5:96:c6:f8:78:1c:ef:71:1d:dd:3b:e6:
                    8c:d5:4e:7e:48:fb:87:cd:e3:46:dc:9c:57:38:f0:
                    1b:53:b3:10:f2:80:be:b6:74:88:2d:2f:5d:68:b1:
                    43:a6:f7:b5:3f:2d:7b:5a:98:16:dd:54:82:11:32:
                    b4:7c:a0:e6:34:fa:c6:7f:2c:71:a4:f8:89:ce:e8:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:A2:09:C2:BE:7C:E8:DC:B1:25:CD:3D:9C:55:C4:23:EF:62:72
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:39:a7:85:1c:0c:15:5a:ca:14:ac:f8:78:b6:ee:76:3e:
         f6:e8:4d:22:60:d6:3b:09:fc:5c:e4:b5:59:0d:51:d3:9e:3b:
         5d:e5:b3:73:af:54:88:9a:8d:4c:ef:dc:1b:37:08:77:b0:0b:
         56:2a:05:cd:ad:90:e1:99:d0:87:c1:ea:c5:e0:c6:16:6e:cb:
         ec:0c:83:3a:b4:d9:9d:6e:1d:ae:e6:7f:a3:ca:09:71:ab:ff:
         a6:80:6d:12:34:33:3b:37:da:69:a3:60:48:3e:b1:92:a8:d1:
         53:17:91:3a:7a:d8:ee:71:22:8c:95:9b:06:33:8e:3d:bc:dd:
         79:cc:a0:b5:e3:64:3d:e9:97:52:75:46:d9:5a:26:dc:e6:0b:
         a8:c3:62:66:cc:36:05:04:c7:20:e4:55:ca:40:1a:62:f7:4c:
         a5:47:2b:0d:00:30:e9:80:b8:be:4b:d2:8a:f8:6d:1d:b3:7c:
         4e:69:e0:9e:91:aa:92:09:2f:9c:62:f3:6c:dd:e7:84:3c:c8:
         a8:20:ab:65:44:17:31:37:3d:c6:84:ed:c5:ae:e2:ab:af:0c:
         9b:b9:7d:7c:dd:10:6d:97:bb:92:3b:a6:5e:b0:57:22:27:2e:
         f3:39:f4:c5:47:d4:c1:3c:d5:6b:23:cb:50:fe:55:3f:6d:0d:
         56:b0:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:24 2025 by rpki-client