Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa
File:                     3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa (raw, json)
Hash identifier:          T4/RFlzqw6qBE4zxLl2K0HrsfjISJl6zTACpJq8mAEY=
Subject key identifier:   24:D7:A9:78:B6:36:F3:20:94:0E:47:95:B1:39:C8:7B:04:DD:4D:57
Certificate issuer:       /CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
Certificate serial:       7B51B21BFEA03F5685E9D3ADF9128D827A2B7FA5
Authority key identifier: AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa
Signing time:             Tue 04 Mar 2025 13:56:56 +0000
ROA not before:           Tue 04 Mar 2025 13:51:56 +0000
ROA not after:            Tue 03 Mar 2026 13:56:56 +0000
asID:                     262590
IP address blocks:        138.122.250.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:51:b2:1b:fe:a0:3f:56:85:e9:d3:ad:f9:12:8d:82:7a:2b:7f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7596BD33B9167E922BE54B9B004B12EAD19D29
        Validity
            Not Before: Mar  4 13:51:56 2025 GMT
            Not After : Mar  3 13:56:56 2026 GMT
        Subject: CN=24D7A978B636F320940E4795B139C87B04DD4D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:fc:0c:96:84:c5:a7:df:54:2e:17:bc:8c:
                    1f:6d:53:0d:b7:75:26:de:5c:ad:f0:db:86:cf:96:
                    eb:e2:e9:46:b9:8d:9d:5a:af:a2:fd:21:7f:da:14:
                    93:be:36:a8:97:6e:01:6b:a5:cc:ed:40:1c:1a:bd:
                    84:07:d6:dc:35:b4:bb:88:41:20:63:01:98:55:75:
                    5d:92:d4:2c:d1:a0:67:af:1f:a7:d9:30:f3:1f:27:
                    07:b2:4e:74:d1:34:91:03:a2:a7:1a:57:dd:8e:d4:
                    0c:50:c3:c2:73:4f:c5:39:b7:1b:dc:0f:27:e3:bb:
                    0c:33:34:c2:de:51:52:12:05:52:b5:84:a3:13:1f:
                    d8:4f:6a:8d:5d:dc:31:c7:5b:c7:db:c3:97:23:ff:
                    b3:64:2e:a7:fd:c0:76:60:33:45:28:52:2d:3b:b5:
                    64:42:dc:19:5b:b1:46:18:f7:8e:c1:7e:62:4b:94:
                    5d:88:14:f4:62:7c:87:45:b0:a9:72:84:81:e4:dc:
                    fd:fe:0b:7c:b7:ae:d1:01:07:e3:8e:4a:1a:71:74:
                    c4:4b:cd:c1:9f:fc:bf:cd:f3:18:64:39:83:d7:cd:
                    74:87:70:85:9c:96:37:b8:73:50:c0:b1:ac:f5:24:
                    42:0e:0f:e5:fb:b1:a9:ba:dc:11:c4:bb:10:1b:49:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:A9:78:B6:36:F3:20:94:0E:47:95:B1:39:C8:7B:04:DD:4D:57
            X509v3 Authority Key Identifier:
                keyid:AC:75:96:BD:33:B9:16:7E:92:2B:E5:4B:9B:00:4B:12:EA:D1:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/AC7596BD33B9167E922BE54B9B004B12EAD19D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC7596BD33B9167E922BE54B9B004B12EAD19D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3235302e302f32332d3234203d3e20323632353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:00:fb:36:12:34:4f:19:98:28:3c:2d:02:50:40:3a:2d:b6:
         31:3e:83:8a:98:12:77:21:38:d9:7a:8e:e2:bd:af:87:15:e2:
         35:d5:64:e1:1e:71:92:34:9a:a0:4a:c4:b0:d6:fc:61:6d:6e:
         12:18:0d:3a:3a:02:df:d6:4a:b3:e6:dd:37:e8:20:6e:d9:87:
         44:77:b9:c9:f6:df:82:7b:aa:07:90:1a:82:7b:f1:7f:9d:3a:
         69:31:ae:1b:7a:be:4e:2d:09:6b:8e:b7:cc:8d:4f:5b:35:ac:
         a0:6e:35:28:32:eb:e8:90:28:10:ed:65:33:19:e8:fe:f9:9e:
         86:a9:60:d4:71:72:86:44:32:75:c4:04:e6:66:5e:ab:dc:f5:
         31:fb:2f:ec:1c:c4:fb:e9:50:2b:88:54:b9:4c:96:fa:84:95:
         86:8d:5d:25:2b:19:48:3d:cb:92:a1:32:b9:2b:3d:58:8b:f5:
         f4:dd:bc:f8:ed:8e:03:00:13:9a:6c:fb:54:5d:2a:5f:4a:66:
         b1:da:3d:62:8f:99:07:68:37:67:d2:fa:d7:a1:4d:7d:dd:da:
         02:a4:7c:0c:21:d4:dc:1c:4a:d8:1d:13:43:5a:d9:f1:0e:3b:
         08:85:4e:fe:c0:98:b1:62:a2:e4:b1:1d:84:58:f5:10:eb:cd:
         72:42:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:06 2025 by rpki-client