Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32322d3232203d3e20323632353930.roa
File:                     3133382e3132322e3234382e302f32322d3232203d3e20323632353930.roa (raw, json)
Hash identifier:          tgybN6UaKZhfthLkI0gFpMb9mA+w781T2AIDjo38FVw=
Subject key identifier:   7E:70:42:CF:99:73:9B:78:58:8D:13:3B:98:00:DC:79:FC:4A:86:9C
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       139BAD9A60614B23CAE4C01B4AD036E91CCA887F
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32322d3232203d3e20323632353930.roa
Signing time:             Sat 08 Feb 2025 00:51:03 +0000
ROA not before:           Sat 08 Feb 2025 00:46:03 +0000
ROA not after:            Sat 07 Feb 2026 00:51:03 +0000
asID:                     262590
IP address blocks:        138.122.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9b:ad:9a:60:61:4b:23:ca:e4:c0:1b:4a:d0:36:e9:1c:ca:88:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:46:03 2025 GMT
            Not After : Feb  7 00:51:03 2026 GMT
        Subject: CN=7E7042CF99739B78588D133B9800DC79FC4A869C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:d3:1f:c8:56:9f:4d:7c:90:51:3e:c6:fe:
                    b9:b2:77:27:34:1a:d0:6f:e0:32:a9:07:2e:93:29:
                    c4:52:64:a8:81:d8:f0:e9:48:f4:15:34:45:45:41:
                    ba:2f:ea:22:f3:df:6f:27:71:56:12:d4:bf:5c:d9:
                    a1:56:ee:c2:bf:2f:16:c5:8c:ba:90:df:c5:71:69:
                    b0:af:f4:0a:40:a6:be:33:db:db:79:71:63:99:bf:
                    18:11:fe:93:a3:a6:32:47:5f:1c:f0:8c:a2:32:7a:
                    10:a0:3b:4c:80:32:cb:94:da:b4:ca:05:19:4c:03:
                    08:e2:42:96:21:15:65:c5:47:24:d9:b9:67:cf:5b:
                    8b:27:c5:ee:86:14:d2:fd:d6:3f:ad:c0:b9:5c:32:
                    31:44:6d:53:3a:0d:77:12:2f:0b:77:3d:dd:94:16:
                    ba:c9:c4:a0:a0:55:c5:c1:ed:db:bd:92:85:85:51:
                    b9:78:42:08:f8:9d:19:66:73:c0:9a:4a:b4:b5:1a:
                    65:b6:c2:5e:3c:28:58:ea:4f:87:bd:6d:71:dc:b7:
                    5a:f5:33:0c:9b:8d:8f:67:ab:cd:bf:55:08:ae:78:
                    75:3c:fc:4f:4a:b8:9d:96:cf:83:82:5e:ff:33:4c:
                    97:d9:ad:ce:a5:22:11:29:55:80:47:b7:40:72:41:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:70:42:CF:99:73:9B:78:58:8D:13:3B:98:00:DC:79:FC:4A:86:9C
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32322d3232203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:45:d0:e9:35:1d:ef:a9:1d:a7:8e:e5:17:59:08:b2:27:e2:
         2f:da:b7:17:b8:bd:ef:b9:f8:06:12:49:f3:29:b0:18:36:60:
         ad:9f:8b:13:ca:9f:62:01:74:e4:9b:18:ad:a5:6b:51:91:74:
         f1:86:9b:8e:e7:e9:25:d1:93:55:5c:4d:bc:fa:1e:a2:28:09:
         b8:81:42:d7:61:e4:94:5f:3b:cc:3e:28:7d:a8:ab:59:da:38:
         ef:ff:ea:9e:c1:e8:28:42:fb:67:b9:ea:26:10:a0:ab:34:ed:
         d6:20:be:4a:a7:20:34:c4:1a:77:95:9a:54:12:b7:96:07:d9:
         0a:31:7c:b0:15:33:fe:ea:7c:7b:a6:ce:e2:ea:4f:a2:fd:aa:
         03:cc:9e:54:f8:f4:49:de:9e:3d:e4:47:67:ac:03:12:41:ec:
         4f:b8:2c:06:5e:fa:91:85:fc:e4:f2:be:a4:ca:21:f8:a9:78:
         10:5f:d1:d7:cb:aa:d4:d0:98:7b:d2:2f:b5:65:a0:b7:e0:fc:
         f2:50:02:ff:fb:03:58:dc:bc:7c:15:4c:73:84:a1:ab:bc:c6:
         a9:f3:ba:33:7f:38:77:e8:20:4b:9e:8a:a6:fe:72:f3:39:29:
         5d:60:33:21:7b:92:fe:71:2d:55:4c:29:e6:35:93:29:94:47:
         3a:6f:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:46 2025 by rpki-client