Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa
File:                     3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          DntJKmcZicE+fHdPN6WjyRfUbl+lUuMrHLgDIYRQBv4=
Subject key identifier:   E2:D4:C4:33:32:9A:41:3D:06:5F:BB:E0:E7:73:44:09:78:16:CD:CF
Certificate issuer:       /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial:       62323C7DB1BACA73C7E3487EAFD854C04DE7F712
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa
Signing time:             Tue 04 Mar 2025 13:33:50 +0000
ROA not before:           Tue 04 Mar 2025 13:28:50 +0000
ROA not after:            Tue 03 Mar 2026 13:33:50 +0000
asID:                     262590
IP address blocks:        138.122.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:32:3c:7d:b1:ba:ca:73:c7:e3:48:7e:af:d8:54:c0:4d:e7:f7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
        Validity
            Not Before: Mar  4 13:28:50 2025 GMT
            Not After : Mar  3 13:33:50 2026 GMT
        Subject: CN=E2D4C433329A413D065FBBE0E77344097816CDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:6a:94:92:b3:f0:5f:54:a3:ba:57:44:ba:
                    94:28:1d:8c:50:c2:66:e2:61:31:0c:4a:99:ec:31:
                    b2:0e:02:09:86:df:7a:97:4e:a5:55:17:b9:96:85:
                    0a:89:18:ed:00:03:5a:ca:36:1b:a7:11:a4:31:f5:
                    9d:fd:f6:cd:6b:60:0d:bb:15:6b:c3:2c:5b:a8:bb:
                    13:0d:05:71:bc:06:3a:1f:d0:23:61:f7:fd:5e:f9:
                    e1:71:08:b7:0c:4a:76:cb:2b:13:25:37:4b:5e:06:
                    5f:eb:81:b6:1e:71:eb:c0:f8:4f:c3:4d:2e:95:42:
                    ad:67:97:b3:91:9e:c9:9a:a7:c0:55:26:c8:20:8c:
                    14:ba:0b:8b:f7:c1:f4:76:04:f9:ce:30:f6:d0:34:
                    92:f0:ca:f1:68:1e:45:c6:28:23:34:9d:c5:20:4f:
                    fd:db:4c:a3:38:2e:0c:a4:9b:03:c7:34:e2:ae:02:
                    b4:3b:c8:de:cc:39:a6:2d:e4:af:f6:ac:89:62:1a:
                    3c:51:fc:1a:03:2d:fe:33:7c:ef:ed:a3:7b:46:59:
                    68:d2:c9:fa:7a:8e:e5:5c:99:7f:11:75:2a:55:1b:
                    53:2c:39:ab:e6:02:3a:79:56:74:20:9e:1d:c7:8d:
                    94:d9:0f:e0:aa:c1:5d:16:c4:23:91:b8:ac:ca:15:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D4:C4:33:32:9A:41:3D:06:5F:BB:E0:E7:73:44:09:78:16:CD:CF
            X509v3 Authority Key Identifier:
                keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234382e302f32342d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:f2:7f:09:05:5f:9e:fe:19:04:ca:e6:64:9b:b4:a7:0f:
         f1:dc:5b:0d:db:6b:5a:63:f0:9c:0a:51:96:9e:6c:8a:2b:34:
         d8:b6:35:1d:65:1c:2f:f8:34:20:b5:4e:b3:34:49:8a:b4:04:
         65:27:09:d0:2f:99:33:a5:63:b9:04:14:24:28:d3:5d:e3:c1:
         75:c0:07:3c:a4:83:ac:7e:a9:0d:51:6b:f6:b1:b1:cf:0d:ba:
         d9:7a:17:e6:98:4e:24:cb:75:c2:9f:2e:34:ca:a1:c9:ee:45:
         23:eb:6f:00:6e:f2:d1:3b:f9:1d:d7:c5:09:49:9d:ad:ba:02:
         44:e0:58:86:db:33:0c:f2:a4:fc:24:85:8f:85:c0:75:98:9e:
         f0:70:de:38:86:06:82:0e:96:a6:e8:34:58:10:d1:e6:70:cc:
         12:62:03:d1:80:2c:56:6a:a0:8f:0b:6f:44:1b:a5:bf:ab:64:
         29:8f:07:37:89:8d:96:8a:4a:f6:d2:bc:03:4b:f9:af:c4:c2:
         cc:30:ec:c8:d8:4e:e6:89:5d:58:9a:c7:49:75:30:a7:78:7b:
         9a:30:12:01:07:c2:a5:47:5d:5d:89:7b:79:a4:c8:a2:21:b8:
         d2:58:8c:25:04:a6:48:5f:9f:36:64:5b:27:07:30:f0:e3:f2:
         68:4a:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:18 2025 by rpki-client