Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          wU+5zeB/Ipq1XG6F8alWHy9t32LKRQRsFYS7T9XYglY=
Subject key identifier:   00:BA:C4:24:C9:37:74:27:B9:FC:C4:5C:5F:FE:49:21:F4:00:89:4E
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       53A6FB58637A508DACE9EE4045A75BBF79350DE6
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:36 +0000
ROA not before:           Sun 14 Apr 2024 02:00:36 +0000
ROA not after:            Sun 13 Apr 2025 02:05:36 +0000
asID:                     262493
IP address blocks:        138.255.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a6:fb:58:63:7a:50:8d:ac:e9:ee:40:45:a7:5b:bf:79:35:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:36 2024 GMT
            Not After : Apr 13 02:05:36 2025 GMT
        Subject: CN=00BAC424C9377427B9FCC45C5FFE4921F400894E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:f2:25:4b:92:96:5a:7e:22:6e:d8:78:5d:
                    74:fb:c7:8c:1e:b2:87:ce:a4:30:cc:1e:ba:e7:ff:
                    15:59:a6:ea:63:19:7b:63:ce:9c:3b:2d:8b:02:18:
                    ba:ce:b1:5c:9b:97:59:9f:91:af:3a:d4:e9:52:2a:
                    57:6b:ad:4d:1f:ba:35:44:d3:6b:8b:a9:cb:43:0e:
                    fb:5b:bd:71:3c:73:0e:a2:08:2c:df:55:05:0e:59:
                    f8:e2:84:71:61:9f:f7:8d:ef:cf:ce:60:e4:f7:db:
                    49:bb:a1:e8:8d:6c:91:85:ff:b1:63:fa:a2:8a:ad:
                    d0:2f:c8:6f:e7:f8:ab:e5:06:04:5a:4d:5a:7c:52:
                    b2:83:63:ce:86:49:9e:28:63:8a:b9:92:51:77:5e:
                    ea:c0:5f:c1:8b:7d:22:9e:65:35:69:64:73:8f:80:
                    e5:cd:2c:5c:e9:fd:f7:b4:42:88:83:6c:40:91:f7:
                    ad:58:00:85:62:5c:2a:41:74:c9:e5:21:94:0d:8d:
                    f1:e4:4d:64:3a:f3:87:99:c2:cc:9a:71:d8:23:38:
                    13:2a:cb:17:0f:ac:03:f7:f0:2b:91:7e:2a:31:73:
                    8d:14:ce:11:c7:31:d7:b2:84:37:83:6c:33:c0:22:
                    ad:be:6b:7c:4d:ac:2f:cb:f3:8e:db:b8:87:95:2e:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:C4:24:C9:37:74:27:B9:FC:C4:5C:5F:FE:49:21:F4:00:89:4E
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231382e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:2f:15:94:09:7b:2f:fb:90:ab:1d:0f:83:4f:8a:b0:37:73:
         88:4a:d6:48:b1:23:d1:d8:bc:5a:36:45:84:2c:5b:d6:5b:07:
         c6:46:07:60:5f:50:20:6f:54:19:3c:b6:b7:c5:bc:ed:14:34:
         ff:6a:fa:56:54:fd:56:57:90:b7:e8:db:a7:f4:fd:1a:e3:4c:
         aa:9f:7a:0f:34:48:fa:04:1b:dd:4e:3a:14:2d:d5:03:bc:88:
         f8:2f:f9:b8:c2:8c:1c:51:d0:2d:f0:59:ae:65:06:e8:76:17:
         34:be:1f:a1:8e:48:1e:7a:e0:0c:4d:68:03:3f:65:a9:01:20:
         4e:82:b1:20:64:75:6e:99:38:91:f2:20:66:f4:74:6b:15:dd:
         8b:4a:4a:d3:02:20:d1:f0:87:bb:23:3f:37:9b:e0:98:14:c8:
         ac:d1:2a:19:92:eb:49:73:50:32:6e:ad:5d:68:a8:f0:20:99:
         cc:8f:04:5e:3b:e6:38:0c:8d:95:ab:d2:45:fa:55:55:a6:3d:
         b4:af:02:8e:77:5f:c3:c0:67:15:da:97:7c:5c:bd:83:24:bf:
         8f:e2:97:16:bd:1e:9f:29:4f:d5:e8:d6:f1:4d:0c:47:cc:1f:
         cd:52:b8:df:d1:4d:41:ce:a2:19:c7:a9:76:3e:ee:30:f1:ee:
         92:6b:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:52 2025 by rpki-client