Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          pnYUKlWxd0YjjzNgoR5SpSX+5O5EUUbfC4/CWlSUbi8=
Subject key identifier:   29:6B:6F:91:F5:DA:AE:93:8D:D3:BE:56:5A:EA:21:80:FD:7A:78:ED
Certificate issuer:       /CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
Certificate serial:       24FF3B4C6FAB07D810342F33A38DAEB102C87018
Authority key identifier: 94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
Signing time:             Mon 16 Sep 2024 23:45:28 +0000
ROA not before:           Mon 16 Sep 2024 23:40:28 +0000
ROA not after:            Mon 15 Sep 2025 23:45:28 +0000
asID:                     263920
IP address blocks:        138.185.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ff:3b:4c:6f:ab:07:d8:10:34:2f:33:a3:8d:ae:b1:02:c8:70:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
        Validity
            Not Before: Sep 16 23:40:28 2024 GMT
            Not After : Sep 15 23:45:28 2025 GMT
        Subject: CN=296B6F91F5DAAE938DD3BE565AEA2180FD7A78ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:2b:d6:4b:83:43:ff:78:f2:33:33:07:4f:
                    32:cc:34:73:54:31:0b:68:75:05:93:e6:6a:67:01:
                    f0:1c:56:7f:8d:17:87:0e:56:4a:2b:c4:0d:86:b2:
                    b3:f1:6f:41:42:23:c1:7d:4d:a8:4c:45:f1:2d:6b:
                    d9:dd:f5:2b:b3:f6:03:19:b6:5b:6d:eb:89:43:39:
                    18:46:67:52:4f:3c:37:fd:69:2c:14:51:2e:0c:ab:
                    c5:76:1d:32:02:3e:d6:12:d2:c6:b9:b7:c3:07:1a:
                    dd:8a:f2:36:2b:87:37:25:e1:e0:7e:22:bf:ab:7e:
                    ca:a0:96:25:0c:76:85:0d:56:07:f1:77:22:7b:df:
                    57:e6:a7:f8:62:21:2e:62:35:03:30:d7:d8:6d:cc:
                    c5:a5:3a:8c:df:40:fb:8a:9f:a6:05:fe:5a:85:d3:
                    5d:67:33:e7:e0:06:04:e0:93:30:c0:cb:3c:3d:09:
                    7e:96:dc:3d:ee:2a:e6:35:4a:31:36:de:3c:2f:7b:
                    ac:aa:34:48:c1:45:be:a0:77:54:2b:77:55:36:83:
                    9b:a0:0b:1e:58:4b:ce:d3:0d:67:e5:3f:61:da:f8:
                    51:cf:0a:9e:0c:27:6f:da:a2:0e:1c:9f:a6:87:e3:
                    55:75:97:fa:07:1a:30:cf:87:47:e4:a6:57:e6:f1:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:6F:91:F5:DA:AE:93:8D:D3:BE:56:5A:EA:21:80:FD:7A:78:ED
            X509v3 Authority Key Identifier:
                keyid:94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:47:14:2f:a2:7d:75:94:1c:c2:9d:f8:6f:75:1b:91:86:d7:
         02:a9:ac:f7:0f:e9:fb:73:b5:a0:06:f3:e3:82:63:29:96:20:
         0b:db:20:6c:a6:c1:ae:f2:cc:63:b0:56:56:54:d9:17:e5:15:
         82:0b:77:75:04:84:b9:39:a7:d3:81:da:14:02:be:6a:25:28:
         2a:52:96:d2:5f:c7:f0:9b:28:3c:89:32:97:32:bd:8b:92:69:
         7d:a0:be:23:a3:f9:db:18:a8:9f:27:39:79:04:98:d2:64:54:
         91:1e:86:08:4f:aa:85:6c:2a:7d:1e:51:84:16:44:51:c5:44:
         15:62:ba:c2:fb:f1:37:8e:78:47:1a:42:e8:e2:75:2d:44:af:
         e5:e4:00:13:71:0e:9f:ce:d4:1f:e1:b4:39:47:37:7d:41:8b:
         1b:36:46:1f:d6:f7:ce:18:61:76:90:b0:18:f1:80:0d:38:97:
         1a:4e:f3:54:fd:cc:21:e4:c8:ea:3b:33:d7:80:6a:78:80:30:
         da:e9:23:b9:bd:4e:90:26:4c:86:d4:e3:f4:14:bc:0a:da:02:
         ef:c6:63:89:99:c0:ef:13:72:b9:7b:c3:7a:0d:4e:3e:0c:2a:
         11:18:69:40:2f:3c:64:81:1a:4e:ec:a8:60:48:e1:57:04:22:
         c0:58:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:42 2025 by rpki-client