Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          PB7e9cpGlNpyB9UArjTkFpe+Wq1vzLOxw+IHLOv9W5c=
Subject key identifier:   7F:BA:00:A4:2B:32:3D:49:C3:51:1E:E5:16:2C:58:01:78:78:F6:79
Certificate issuer:       /CN=A549402556B1273F8A3031E620C960AD6F9EF416
Certificate serial:       0F1D60FC5BA9D1702EBFDDCEBC1639E0726EDA6E
Authority key identifier: A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 02 Oct 2024 15:02:48 +0000
ROA not before:           Wed 02 Oct 2024 14:57:48 +0000
ROA not after:            Wed 01 Oct 2025 15:02:48 +0000
asID:                     263887
IP address blocks:        138.204.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1d:60:fc:5b:a9:d1:70:2e:bf:dd:ce:bc:16:39:e0:72:6e:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Validity
            Not Before: Oct  2 14:57:48 2024 GMT
            Not After : Oct  1 15:02:48 2025 GMT
        Subject: CN=7FBA00A42B323D49C3511EE5162C58017878F679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:9a:ee:46:c9:5f:3f:31:9e:2e:13:77:fc:
                    20:d7:a0:68:2e:d4:e8:bd:00:11:5f:10:36:34:44:
                    b6:e2:98:44:7e:29:ae:bc:3d:64:8b:7e:96:d9:1f:
                    0a:12:47:eb:d0:04:e9:14:6e:38:5c:30:84:b8:ec:
                    01:56:c8:18:a3:f5:1e:8e:97:a7:d7:c8:ca:c5:64:
                    73:7a:35:17:4c:ac:81:f8:db:46:cf:b4:35:c1:ef:
                    3a:77:3d:b9:6f:3b:43:5a:94:30:28:bd:85:76:1e:
                    7a:a4:27:af:32:b5:ae:b0:4c:32:77:7c:7e:3c:55:
                    fa:77:fc:dc:fc:05:64:1f:5f:fd:e7:14:0c:29:23:
                    28:e4:47:05:62:3d:62:cd:eb:67:f7:69:34:12:05:
                    31:a6:e6:65:be:4b:62:ef:22:99:6b:ce:76:29:23:
                    b1:3c:8d:0d:ad:33:bd:80:fa:cf:14:3d:3c:5c:f0:
                    1d:98:a1:a7:a6:42:df:d1:2a:2b:1d:00:a9:71:8c:
                    ce:bf:6a:35:7f:20:26:3f:41:9b:8c:18:5a:ce:bc:
                    68:91:9a:70:79:88:a2:36:e3:57:3a:1f:35:b6:f6:
                    6c:07:ef:7a:46:07:a2:df:a9:70:48:4b:a7:bc:4c:
                    0d:ef:c3:6f:57:69:2c:6a:92:38:9e:d3:0b:2a:09:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:00:A4:2B:32:3D:49:C3:51:1E:E5:16:2C:58:01:78:78:F6:79
            X509v3 Authority Key Identifier:
                keyid:A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:be:61:ca:d9:6f:bc:dd:03:86:7b:11:c6:b5:bc:4f:cd:
         6c:5a:d3:81:92:28:2d:89:a1:b8:b6:f5:60:a8:b0:7c:42:12:
         46:05:c1:bd:32:b2:76:fa:2b:79:31:12:50:f3:1d:11:63:19:
         13:d5:0a:3b:e9:55:5f:42:58:e7:4d:bb:20:4d:38:e8:7f:3f:
         77:b1:df:03:89:19:b2:a9:48:9b:49:d9:a5:19:a4:fc:bc:31:
         46:15:0e:7e:86:db:cb:53:81:a6:8e:dc:29:0c:f6:7c:85:2c:
         6e:23:4c:08:93:f5:77:cc:0b:ce:82:91:b3:e4:ca:9a:a4:92:
         5d:23:89:4f:c0:57:16:d7:29:de:be:d6:b2:f8:38:22:de:6c:
         32:43:cd:9e:83:37:03:d3:92:7a:dd:08:ba:90:dd:22:9d:2d:
         8e:72:54:53:8c:31:06:15:26:4e:cf:0d:ac:70:20:c9:a5:ef:
         a1:ad:82:fd:1c:b1:54:1f:9f:13:f2:14:83:3d:5b:d8:e6:b1:
         52:92:f2:18:9a:74:aa:ca:c9:20:41:43:bf:e7:85:f2:5c:11:
         2e:b7:fa:d4:4e:62:ec:1d:d4:71:47:c7:7e:c8:da:d7:45:c2:
         5d:21:00:ee:78:eb:c7:38:d0:1c:80:8e:74:41:3c:c9:02:56:
         ed:fc:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:18 2025 by rpki-client