Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          087F0YBy/XQsmvCGX8tsGOoib8FMYExX+dMccviF7/I=
Subject key identifier:   A9:D1:A9:0F:1E:BF:78:76:DA:9A:05:B6:F6:71:39:FE:62:97:7A:E8
Certificate issuer:       /CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
Certificate serial:       62C19A0BC233BB40EC6EE6812EA57A2BDFBBCB59
Authority key identifier: 94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa
Signing time:             Mon 16 Sep 2024 23:45:29 +0000
ROA not before:           Mon 16 Sep 2024 23:40:29 +0000
ROA not after:            Mon 15 Sep 2025 23:45:29 +0000
asID:                     263920
IP address blocks:        138.185.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c1:9a:0b:c2:33:bb:40:ec:6e:e6:81:2e:a5:7a:2b:df:bb:cb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94BA0E6865AC49E4A0F8B14840F321B5573AF88D
        Validity
            Not Before: Sep 16 23:40:29 2024 GMT
            Not After : Sep 15 23:45:29 2025 GMT
        Subject: CN=A9D1A90F1EBF7876DA9A05B6F67139FE62977AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:b9:b1:e3:2a:56:a1:01:c1:02:d8:7b:f2:
                    79:94:23:df:61:9d:ef:f5:be:55:de:31:8f:f0:31:
                    ed:71:ca:e1:90:7f:5f:1f:0f:98:c6:be:24:3a:09:
                    fe:12:9c:af:80:a7:4e:4e:96:2a:50:90:52:dd:d6:
                    db:de:f9:26:00:46:df:3b:c5:d3:72:83:5d:7d:62:
                    14:fc:51:23:89:66:84:04:b6:4d:73:0a:4a:3f:0e:
                    91:fe:68:35:82:de:23:01:eb:c1:92:33:19:1b:96:
                    e7:30:45:1a:c2:5e:c4:de:55:c5:38:71:07:80:df:
                    6f:3c:c6:d1:9f:e0:19:5f:8f:58:64:01:b8:c0:d7:
                    03:c7:6d:f8:91:d0:f5:29:57:f2:39:cf:76:5f:ee:
                    02:f5:e5:ad:e3:7a:60:c4:e8:7f:4e:b2:9f:0b:d2:
                    c2:b9:30:2f:5f:d5:2a:14:7c:dc:5b:1d:22:bd:9d:
                    32:b0:93:0f:7d:cc:d0:b9:d1:eb:a1:c7:01:35:fb:
                    62:14:c6:74:83:0c:6d:8f:e1:7a:80:92:14:31:dd:
                    96:59:5a:2f:aa:39:ca:c7:f0:8e:1c:60:16:6e:df:
                    e9:b6:31:44:fa:da:e4:87:b9:06:62:a0:eb:66:de:
                    b5:3c:91:47:db:90:c4:30:ed:7b:3e:a1:f8:e7:5d:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:A9:0F:1E:BF:78:76:DA:9A:05:B6:F6:71:39:FE:62:97:7A:E8
            X509v3 Authority Key Identifier:
                keyid:94:BA:0E:68:65:AC:49:E4:A0:F8:B1:48:40:F3:21:B5:57:3A:F8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BA0E6865AC49E4A0F8B14840F321B5573AF88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234332e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:27:96:0b:7c:37:a2:44:8a:79:19:b3:37:f6:81:69:6a:
         2a:92:0a:a5:da:b6:e4:2e:de:01:be:1c:da:ba:30:b9:07:0c:
         1b:15:74:d7:f7:e6:72:8b:10:1a:f1:ed:41:1f:6c:9a:71:2e:
         34:7b:ee:57:a2:7b:bc:80:7d:f0:6b:db:12:9e:df:7d:70:a6:
         54:ba:4c:7c:17:bf:33:55:96:ab:cf:60:d1:d9:0c:ec:8a:e7:
         1e:a0:b2:95:41:05:05:8e:a0:50:21:d8:91:b4:4d:f5:61:e7:
         61:92:75:de:00:e4:08:c8:da:b8:f0:c1:8a:f1:84:87:6b:0e:
         96:6c:e8:e2:9c:8e:81:e2:fa:6d:a1:26:d4:53:f8:d4:1b:83:
         85:28:55:78:d6:a1:98:68:7e:39:ca:da:af:6a:dd:8f:e3:af:
         23:88:05:f9:b4:f9:13:20:57:4c:5f:a2:c4:9c:82:06:a3:40:
         f3:e2:ab:10:5b:73:96:19:4d:75:2b:6e:a3:5d:3c:19:4b:75:
         93:71:c3:f5:e7:7d:80:7b:86:86:b5:5f:72:e9:70:80:fa:58:
         47:bc:99:7c:32:95:35:f0:88:76:4f:8b:ce:f5:71:76:4a:bf:
         63:fa:46:4c:48:1a:1a:36:a3:d5:7b:86:ff:9d:f8:0a:b1:ce:
         a2:97:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:24 2025 by rpki-client