Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3332203d3e20323634313830.roa
File:                     3133382e39342e3136342e302f32322d3332203d3e20323634313830.roa (raw, json)
Hash identifier:          OrsooVpFGzXJqf+0jdPxWGrOgM99/H7vyS3v8djSUNQ=
Subject key identifier:   2E:1C:C9:2F:D7:7E:A5:7D:AD:6E:16:68:6A:BE:E4:9C:0F:DB:89:7C
Certificate issuer:       /CN=20978143409405A4B1DFF217030B764B01282086
Certificate serial:       050140D277EEA38B77EAD07BCA8F846D0BD4C419
Authority key identifier: 20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20978143409405A4B1DFF217030B764B01282086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3332203d3e20323634313830.roa
Signing time:             Mon 16 Dec 2024 20:45:02 +0000
ROA not before:           Mon 16 Dec 2024 20:40:02 +0000
ROA not after:            Mon 15 Dec 2025 20:45:02 +0000
asID:                     264180
IP address blocks:        138.94.164.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:40:d2:77:ee:a3:8b:77:ea:d0:7b:ca:8f:84:6d:0b:d4:c4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20978143409405A4B1DFF217030B764B01282086
        Validity
            Not Before: Dec 16 20:40:02 2024 GMT
            Not After : Dec 15 20:45:02 2025 GMT
        Subject: CN=2E1CC92FD77EA57DAD6E16686ABEE49C0FDB897C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:72:c4:8b:b1:a3:51:f8:55:f3:f5:2d:51:
                    89:6a:d6:d1:75:81:b6:16:52:6b:58:60:ad:46:0b:
                    84:7c:54:7f:d3:bc:e9:91:a6:b0:55:13:97:b3:04:
                    81:49:01:97:7f:44:3e:0b:bb:06:96:df:dd:de:91:
                    76:35:cd:be:2a:bf:c9:5a:fd:4d:1d:9b:cf:98:8a:
                    89:77:7d:ad:e8:37:ae:2b:c4:97:60:c6:9d:74:d5:
                    9d:b0:47:ca:fe:6d:63:49:28:bd:1f:94:78:62:ef:
                    40:da:61:84:73:33:d0:32:aa:e1:37:69:c4:e2:e9:
                    0a:f7:b7:84:ba:42:97:8c:d2:9b:d1:c8:16:5f:cb:
                    3d:4a:6f:04:fa:b2:39:af:4a:47:d0:9d:4c:e3:6f:
                    63:b2:07:db:35:4a:4d:63:c4:23:1f:e3:3c:50:60:
                    af:54:06:6f:2c:20:29:91:ee:6c:60:34:b4:cc:84:
                    6c:70:6e:84:9e:d8:3b:42:60:66:b4:12:d4:06:52:
                    ee:2c:c5:e0:7a:d7:9b:d9:3e:c8:84:a7:b3:1b:4e:
                    4f:0a:6a:71:f4:6c:6f:dd:c9:b1:21:49:e3:97:9e:
                    85:9f:6d:88:95:cf:f5:4b:09:bf:7b:8a:9e:82:ed:
                    32:34:ba:4b:72:36:e7:96:33:38:b4:d9:5b:c5:eb:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1C:C9:2F:D7:7E:A5:7D:AD:6E:16:68:6A:BE:E4:9C:0F:DB:89:7C
            X509v3 Authority Key Identifier:
                keyid:20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/20978143409405A4B1DFF217030B764B01282086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20978143409405A4B1DFF217030B764B01282086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32322d3332203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:0b:21:a5:d6:af:23:0c:22:fc:a9:05:a7:e2:bc:a5:50:
         2b:ae:fb:e2:0c:36:2f:74:7e:68:bf:5a:59:37:33:1e:76:a0:
         49:95:de:ae:99:89:01:d8:2c:33:c2:06:84:e4:ba:a7:f6:09:
         29:27:41:a6:f1:fc:d6:63:7c:8c:29:0c:f2:5b:e5:d7:e6:75:
         32:38:6d:d5:a0:60:5c:dc:95:ab:59:48:5b:10:e1:ed:cc:a2:
         f5:55:24:0a:e8:22:b0:b5:d2:bf:62:24:84:dd:d7:ed:25:3b:
         5b:71:dd:1a:93:6f:36:44:95:5f:da:2a:9a:2c:c4:ba:d5:6b:
         f5:bf:40:2c:7d:2a:fc:89:8a:00:73:38:f3:8d:ae:36:1e:81:
         10:bb:3d:b0:96:7a:54:6b:b9:29:3b:42:c5:3b:d8:93:53:75:
         ad:9b:f5:ed:08:fa:0c:87:ad:2e:a3:db:a7:56:bc:a6:27:8b:
         d4:25:4b:eb:cb:b2:03:c2:fd:eb:c1:3b:bb:3a:d3:be:61:21:
         84:12:51:b8:a8:5e:c3:2c:65:1a:8c:d8:b4:ba:6e:9c:5b:02:
         1e:61:8d:e9:ad:85:bd:f3:2d:87:87:22:be:e8:3f:11:87:e7:
         5f:64:27:55:3f:f9:87:0f:e9:fa:7f:b2:a7:dd:7c:56:bd:74:
         70:b0:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:08:53 2025 by rpki-client