Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232332e302f32342d3234203d3e20323634323039.roa
File:                     3133382e39372e3232332e302f32342d3234203d3e20323634323039.roa (raw, json)
Hash identifier:          7p++LYZpkQD3OKvlWyEk5O0A9fN0+PF5wLwAnp/GYy8=
Subject key identifier:   58:A4:47:98:95:86:05:59:99:68:F9:54:E5:97:41:FF:4F:3C:0C:BF
Certificate issuer:       /CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
Certificate serial:       0BD94C2A627CBB9E96BB1D3C716E0B0A6956BD0F
Authority key identifier: 12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232332e302f32342d3234203d3e20323634323039.roa
Signing time:             Wed 17 May 2023 21:32:44 +0000
ROA not before:           Wed 17 May 2023 21:27:44 +0000
ROA not after:            Wed 15 May 2024 21:32:44 +0000
asID:                     264209
IP address blocks:        138.97.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:4c:2a:62:7c:bb:9e:96:bb:1d:3c:71:6e:0b:0a:69:56:bd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
        Validity
            Not Before: May 17 21:27:44 2023 GMT
            Not After : May 15 21:32:44 2024 GMT
        Subject: CN=58A44798958605599968F954E59741FF4F3C0CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:55:bf:24:ed:a3:24:a8:d9:b5:3b:9a:46:
                    b1:7e:f1:21:f0:30:1c:03:72:c3:33:87:c0:a9:4b:
                    5d:04:69:3b:e7:55:1c:cd:52:fd:d2:58:af:e7:b1:
                    f9:ed:8a:00:02:c9:d0:95:b5:d4:db:bc:a9:98:22:
                    89:b5:81:42:6f:b2:0c:0a:05:a6:90:23:fd:30:97:
                    c1:9d:8b:74:3d:3f:ec:d1:a2:92:67:f1:60:10:79:
                    e4:b9:82:50:d9:c5:8d:43:ab:35:48:7c:9d:f1:1e:
                    7c:2d:f5:3f:58:f2:05:74:38:4b:57:29:0f:bc:11:
                    0b:23:35:35:14:c8:66:c2:77:18:9c:63:2a:b3:4f:
                    f1:ac:3e:b8:33:57:4d:17:10:ed:0e:a5:39:47:a0:
                    92:22:66:32:49:d6:7b:81:68:64:55:7a:f0:2a:13:
                    a0:25:72:56:aa:37:11:1e:d5:7f:cd:2e:1a:f8:1c:
                    4c:67:72:50:71:36:17:1d:df:8a:9c:db:90:13:5e:
                    af:7a:38:f6:84:c3:4c:a8:a5:0f:08:cd:67:5b:b4:
                    ae:4b:a3:af:03:89:64:15:47:c5:c3:60:e3:fd:d0:
                    04:3c:b4:1c:c1:88:e3:49:48:54:11:d6:97:2e:a3:
                    aa:15:16:8a:5d:ca:48:cd:ed:6d:27:93:71:da:a7:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A4:47:98:95:86:05:59:99:68:F9:54:E5:97:41:FF:4F:3C:0C:BF
            X509v3 Authority Key Identifier:
                keyid:12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232332e302f32342d3234203d3e20323634323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:1a:ff:af:6c:ea:8f:17:19:df:ab:3e:c6:05:37:5a:28:
         af:df:50:e5:61:3f:c8:71:b7:3a:ec:87:4b:0e:11:c2:e9:ae:
         b0:21:44:e4:f1:2c:07:3f:72:d7:5b:68:c6:61:fb:96:91:72:
         2b:c6:01:37:b2:00:97:80:e9:2e:7b:1e:15:15:86:94:25:21:
         7c:0c:50:cf:e4:ea:3e:df:a4:5f:79:79:de:5a:8a:89:c3:d6:
         72:6c:80:f0:1e:d3:0c:04:33:e9:6b:a6:32:70:d6:09:5e:61:
         02:ae:2c:59:1d:4b:d4:59:98:b5:97:4b:95:b4:64:12:a7:66:
         7d:6f:82:ca:d5:1c:b4:e6:56:87:d9:13:7d:81:ab:eb:34:57:
         86:e1:0c:9b:f8:e3:f9:42:5d:c5:a6:ed:69:c4:77:df:88:f9:
         37:ac:a0:37:15:9e:42:54:73:af:eb:c6:1d:26:21:33:41:6f:
         fb:1e:6f:51:36:86:3b:d2:e9:d4:e7:73:d5:50:1f:08:5b:a3:
         7d:ad:4f:68:fb:31:e6:6e:5b:00:00:c6:f1:d5:31:a3:3c:41:
         71:49:7b:1d:56:f1:8b:c1:99:62:38:c0:e9:ef:1e:8d:c8:e1:
         0e:8f:12:74:af:25:14:e6:fa:48:fb:db:2b:0f:cf:a0:de:10:
         7d:07:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:05 2025 by rpki-client