Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32342d3332203d3e20323634313830.roa
File:                     3133382e39342e3136342e302f32342d3332203d3e20323634313830.roa (raw, json)
Hash identifier:          Kk2ddBiOkdZaelucQDky8Jzx/qdd80hBAEEuEFMFBYA=
Subject key identifier:   F8:AD:6A:35:33:96:B5:C9:41:76:0B:7D:CE:FE:4D:FB:5D:0A:5C:57
Certificate issuer:       /CN=20978143409405A4B1DFF217030B764B01282086
Certificate serial:       77067A8BA763B58BDF886DCB1E2218C385DABA39
Authority key identifier: 20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20978143409405A4B1DFF217030B764B01282086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32342d3332203d3e20323634313830.roa
Signing time:             Mon 16 Dec 2024 20:46:05 +0000
ROA not before:           Mon 16 Dec 2024 20:41:05 +0000
ROA not after:            Mon 15 Dec 2025 20:46:05 +0000
asID:                     264180
IP address blocks:        138.94.164.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:06:7a:8b:a7:63:b5:8b:df:88:6d:cb:1e:22:18:c3:85:da:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20978143409405A4B1DFF217030B764B01282086
        Validity
            Not Before: Dec 16 20:41:05 2024 GMT
            Not After : Dec 15 20:46:05 2025 GMT
        Subject: CN=F8AD6A353396B5C941760B7DCEFE4DFB5D0A5C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:d4:e0:46:03:41:7d:fe:8f:c5:e9:bd:ed:
                    aa:12:c3:2d:b7:e8:63:e2:57:db:58:fb:dd:40:cb:
                    44:e6:04:8f:3e:86:b4:98:8a:98:e6:51:4e:84:0d:
                    1c:f3:d9:0f:34:49:d4:e0:e6:b0:f3:81:94:25:1b:
                    47:d5:65:12:a4:80:39:5c:dc:49:82:28:9a:1e:80:
                    95:25:7f:de:e2:30:38:50:e6:c3:65:4d:10:15:67:
                    f3:f4:b7:8c:e2:1a:14:51:99:81:75:97:89:28:e9:
                    11:b4:33:23:e3:11:cf:36:e7:a5:db:da:f6:20:01:
                    26:53:c8:5a:3b:73:93:04:50:cf:88:ed:dd:8a:a5:
                    63:c0:ab:d1:df:66:14:da:37:ef:12:03:96:51:63:
                    6f:7a:db:12:0e:cd:a3:f9:6b:45:78:7c:a4:b4:52:
                    03:24:03:56:1e:9d:33:24:5d:4b:99:2a:af:25:a1:
                    b4:76:4b:b3:33:01:11:c6:cc:84:e3:37:df:09:3c:
                    e5:fb:4d:2a:14:7f:d7:56:3a:e7:70:fe:86:17:a1:
                    2a:de:a7:f7:c8:da:31:06:51:3a:82:10:c4:b0:db:
                    7f:6f:8d:17:e9:15:1a:15:d1:e1:e2:14:fb:dd:57:
                    5e:d0:fd:56:c5:71:71:b1:52:1e:59:1c:83:6a:f0:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:6A:35:33:96:B5:C9:41:76:0B:7D:CE:FE:4D:FB:5D:0A:5C:57
            X509v3 Authority Key Identifier:
                keyid:20:97:81:43:40:94:05:A4:B1:DF:F2:17:03:0B:76:4B:01:28:20:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/20978143409405A4B1DFF217030B764B01282086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20978143409405A4B1DFF217030B764B01282086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/3133382e39342e3136342e302f32342d3332203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:71:8d:61:e1:fe:a7:8b:ea:46:85:fb:b6:15:4e:54:6c:
         ee:68:ec:46:dd:63:e4:c5:30:b9:ad:c3:b6:68:27:6d:84:40:
         91:b1:b8:ae:c3:1d:33:7f:1c:af:6e:bb:ef:0e:f1:bf:1f:7e:
         4d:b7:58:5f:c2:46:bb:fa:bd:c6:ab:26:ae:80:6c:c2:fa:7e:
         4c:f5:c2:2f:71:27:94:a2:9a:9c:ed:c9:46:1c:f7:c8:ce:52:
         26:c4:89:69:16:23:b7:be:03:ab:e9:0a:9c:d4:27:86:f8:80:
         c0:83:9b:3a:57:4d:19:f4:ca:2d:e3:3d:36:9c:12:e6:6f:74:
         55:37:5a:2b:38:b8:d4:2f:94:bb:ea:c8:55:80:56:1c:0b:bc:
         2a:a8:45:b2:13:32:90:b7:cc:e7:f0:62:82:ce:c7:68:d3:3f:
         57:51:59:89:b3:6c:e2:64:92:16:14:19:04:9b:dd:ea:89:3f:
         93:4a:15:85:fc:e1:06:2d:a7:b1:b8:4d:f6:18:18:b7:57:58:
         3a:55:04:66:cb:b8:45:e7:02:c8:3e:81:2d:c9:34:47:0a:1d:
         b8:98:b0:15:db:b7:36:4b:f2:79:2d:3b:71:42:c2:2c:77:22:
         eb:ae:06:a6:c3:1a:6e:8f:ed:04:69:6d:b0:88:74:e7:41:72:
         17:9d:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:55:37 2025 by rpki-client