Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32342d3234203d3e20323733363833.roa
File:                     3133382e39342e3137362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          CC6jUEx10HlE9CT3TwyElZVUyJvPUqYjMQfGJQdak1M=
Subject key identifier:   F3:D9:9B:17:BC:08:EC:08:19:80:F8:76:39:6D:88:2C:26:66:E6:DF
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       79A2D0CE394AB1D103EB3C5FCF68D7C72228F139
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32342d3234203d3e20323733363833.roa
Signing time:             Fri 04 Oct 2024 04:12:56 +0000
ROA not before:           Fri 04 Oct 2024 04:07:56 +0000
ROA not after:            Fri 03 Oct 2025 04:12:56 +0000
asID:                     273683
IP address blocks:        138.94.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:d0:ce:39:4a:b1:d1:03:eb:3c:5f:cf:68:d7:c7:22:28:f1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  4 04:07:56 2024 GMT
            Not After : Oct  3 04:12:56 2025 GMT
        Subject: CN=F3D99B17BC08EC081980F876396D882C2666E6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:12:73:b8:73:8d:e3:e4:17:64:1e:45:2e:
                    73:5f:0e:16:fe:b7:aa:15:2d:98:36:54:4a:53:a1:
                    0e:48:06:6f:a0:27:37:ae:3c:8e:fc:5f:45:40:db:
                    06:d3:86:ca:aa:89:0f:cd:90:91:15:01:e9:96:20:
                    e9:76:2a:97:a2:2f:37:e5:7a:13:e5:35:8d:e5:5a:
                    ec:87:46:8f:1e:8c:ff:5b:15:cb:22:ac:11:f3:be:
                    ff:3e:a6:f9:a6:eb:6b:88:ac:dc:f8:7f:59:f0:9b:
                    5e:9e:5a:a9:fb:60:9f:8f:02:5d:12:1d:01:da:37:
                    9b:6c:e9:42:17:7c:97:56:a4:09:08:a9:5c:c0:27:
                    35:2b:7e:b2:54:64:62:b9:ac:d1:85:8d:80:2d:20:
                    0c:e9:66:e5:8d:a3:1b:53:1d:80:f8:69:52:d5:07:
                    4e:b6:f2:61:c2:25:f6:00:37:65:e6:8a:d6:a1:7a:
                    de:08:78:7e:c0:57:4a:dc:95:f4:22:5d:81:48:8d:
                    2b:db:c8:78:be:dc:3a:6a:3c:e4:57:8c:9c:31:e5:
                    a8:13:97:e4:38:e8:a4:7d:d3:39:4a:11:4a:aa:7e:
                    75:45:16:8f:66:49:a7:36:ae:9c:4a:34:72:b4:68:
                    86:3b:78:5b:e9:02:96:ae:a6:79:1e:f5:bc:10:59:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:9B:17:BC:08:EC:08:19:80:F8:76:39:6D:88:2C:26:66:E6:DF
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:96:f2:57:9d:d5:99:c7:f8:0c:33:f1:08:90:96:d6:e6:c2:
         3c:d8:66:48:0f:70:c4:00:d7:36:65:52:e5:06:fa:d3:92:63:
         ee:57:0c:df:21:33:d1:1a:9e:1d:c8:54:76:aa:11:98:89:e1:
         d2:51:88:58:16:73:3a:6f:e3:29:4e:26:b8:d2:6e:3d:03:b1:
         10:ff:de:63:e8:76:af:39:b7:b1:e1:80:7a:f2:2b:23:60:ed:
         e5:2e:b3:3c:ac:ca:07:af:6c:56:10:6c:48:dc:54:56:30:fc:
         7b:4a:ec:0e:3a:b4:23:7a:85:69:90:60:7b:ae:21:70:a1:3a:
         82:cd:ee:78:72:ec:b0:ae:c4:46:77:f5:2d:46:ac:41:3b:b0:
         13:b1:88:38:d8:c2:3c:00:36:31:17:96:da:b2:fc:30:71:95:
         b3:fe:4e:1a:90:17:32:bc:2a:ec:8e:bd:59:c1:97:69:19:b2:
         23:7e:ed:16:d4:3d:c3:34:72:23:48:1a:a5:e8:3a:53:24:1d:
         93:06:25:5b:20:32:65:b9:00:4d:0a:3c:0f:2e:d7:cf:e0:f2:
         9c:67:bf:be:88:22:a8:18:4f:d9:86:97:58:15:0c:bf:11:08:
         59:5d:26:b4:f9:e2:d9:17:dc:b2:23:4a:e4:04:59:78:df:09:
         15:56:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:19:16 2025 by rpki-client