Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa
File:                     3133382e33362e32382e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          L2y9rJ45JLGPCfVhTxhqVKly/fLpe4p9J5wCdTAe6q0=
Subject key identifier:   46:D0:C2:04:36:DE:94:A0:5D:8A:02:09:00:0A:F6:6F:47:B9:14:B9
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       3F193B249580856EA4A660705748192E391260BC
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa
Signing time:             Fri 29 Nov 2024 06:28:01 +0000
ROA not before:           Fri 29 Nov 2024 06:23:01 +0000
ROA not after:            Fri 28 Nov 2025 06:28:01 +0000
asID:                     273683
IP address blocks:        138.36.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:3b:24:95:80:85:6e:a4:a6:60:70:57:48:19:2e:39:12:60:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Nov 29 06:23:01 2024 GMT
            Not After : Nov 28 06:28:01 2025 GMT
        Subject: CN=46D0C20436DE94A05D8A0209000AF66F47B914B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:66:f3:ba:78:7b:fa:1c:eb:00:67:75:94:
                    e8:9f:c1:ce:51:af:6a:4e:e2:3b:e7:e2:b5:d8:ad:
                    b6:a1:e3:29:60:f9:5d:2e:6e:05:c2:a5:d3:59:b0:
                    65:d6:4f:22:8e:5c:b0:25:3d:53:8b:a7:9d:4a:ad:
                    13:f5:e5:e4:dc:20:88:17:17:8f:d0:e8:ac:42:9c:
                    a2:6d:8f:df:ab:a9:85:93:45:64:bc:d9:8e:1e:cd:
                    6d:44:ce:63:3a:cb:1e:cb:c9:95:b2:59:e4:d4:fa:
                    f5:54:ec:0e:0b:75:4d:cc:12:76:93:42:6e:fd:48:
                    83:26:5d:d0:75:8e:08:a5:11:e0:5f:95:41:6e:71:
                    8d:3b:88:a9:c9:6a:50:5d:95:c8:99:ed:80:b1:83:
                    0b:09:4b:c3:78:a9:76:06:da:10:28:04:95:02:61:
                    07:5d:92:ee:b4:a8:da:3c:17:d1:00:f5:b7:95:25:
                    a2:45:04:1d:f1:25:17:bb:0f:2a:e6:3b:38:b9:d7:
                    0d:b3:e7:34:5e:74:e8:f3:b2:7b:5a:04:85:5e:a5:
                    f2:a3:bc:6b:47:01:39:97:0b:c3:11:d4:9f:db:f9:
                    c2:1f:39:52:08:1b:4b:40:af:ad:6f:d3:2d:c0:da:
                    b9:a1:79:24:67:26:46:53:20:09:09:6d:3c:dc:5d:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D0:C2:04:36:DE:94:A0:5D:8A:02:09:00:0A:F6:6F:47:B9:14:B9
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e33362e32382e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:fe:4d:17:55:4f:31:d2:f7:0c:0d:a6:93:be:02:cd:82:7f:
         2d:d2:c7:92:4c:7d:3e:71:1f:d9:d3:c1:30:73:26:42:d3:31:
         8e:ac:84:9a:5e:dd:b2:2b:83:39:e4:51:be:09:ff:9b:14:6a:
         5d:3f:8d:8a:16:ba:69:80:fd:f1:22:78:32:37:de:26:b2:39:
         18:75:62:01:ec:30:49:6c:e6:82:0b:bb:c9:23:e2:e6:66:5c:
         85:b4:17:68:32:c5:50:9b:77:b7:91:bf:be:af:b8:7e:66:e4:
         c3:8c:17:34:3f:64:a7:e5:44:b6:17:db:87:34:5f:3f:26:a6:
         e2:3a:e2:11:40:ca:da:a2:58:fc:cc:b1:22:b4:b5:03:4a:4a:
         1a:d1:95:6c:25:63:44:b4:4c:52:76:f1:d4:03:f6:f9:79:4f:
         b3:27:da:4f:6c:e3:60:d5:db:07:a4:82:74:58:79:9a:ea:32:
         a7:e7:b0:e2:c1:5d:17:7f:39:c3:e9:73:d6:c2:fa:5f:8c:3a:
         e5:96:82:5e:5f:f4:4e:69:42:a4:cc:fc:36:e6:c3:20:33:84:
         dc:00:f5:0b:61:88:b1:b1:be:d4:b3:90:d2:19:0b:17:1b:6f:
         ac:6a:82:14:03:79:d3:e2:93:15:bc:76:14:b9:10:38:98:62:
         99:6a:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:12 2025 by rpki-client