Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634323830.roa
File:                     3133382e3235352e3133362e302f32322d3234203d3e20323634323830.roa (raw, json)
Hash identifier:          UcWO5RMupAKmtlTzHG63j/bEN60dYDVLUfHbDsp19b4=
Subject key identifier:   D8:E6:A6:6B:D0:1D:B8:04:37:5F:BB:C0:F0:AA:32:87:D2:4A:AD:6F
Certificate issuer:       /CN=727619F0B90128C3DF95B9AAAE1F281B07964C12
Certificate serial:       266AB277E0C7E7AA1A627B844B13AB465DA662A3
Authority key identifier: 72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634323830.roa
Signing time:             Fri 26 Jan 2024 12:19:45 +0000
ROA not before:           Fri 26 Jan 2024 12:14:45 +0000
ROA not after:            Fri 24 Jan 2025 12:19:45 +0000
asID:                     264280
IP address blocks:        138.255.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6a:b2:77:e0:c7:e7:aa:1a:62:7b:84:4b:13:ab:46:5d:a6:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727619F0B90128C3DF95B9AAAE1F281B07964C12
        Validity
            Not Before: Jan 26 12:14:45 2024 GMT
            Not After : Jan 24 12:19:45 2025 GMT
        Subject: CN=D8E6A66BD01DB804375FBBC0F0AA3287D24AAD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:ed:a1:08:54:e7:22:8d:46:83:5c:3b:63:
                    79:bb:54:32:4f:a3:26:a1:c8:1b:df:33:d7:3b:e5:
                    55:9e:da:83:6e:14:c4:96:d7:92:bb:68:cc:01:18:
                    55:38:ec:cd:19:82:1e:f4:e0:0e:e2:9c:8a:67:03:
                    c5:a2:7d:b2:8c:43:74:ec:6d:88:0b:b6:75:52:c3:
                    03:30:aa:5a:4e:c4:59:db:bf:06:1a:bb:5c:e3:40:
                    bd:ec:4b:f2:80:77:4b:b8:bd:a4:15:c6:79:2b:8b:
                    04:3f:56:b3:f3:b7:8d:0e:03:82:e9:14:6c:00:2c:
                    b3:08:cc:80:b1:85:53:ff:6b:d8:0c:20:83:79:ab:
                    d0:e6:56:3d:43:bf:b8:7f:3d:0a:27:18:d7:55:1a:
                    21:65:14:d3:f6:fd:23:95:09:8d:92:3f:0e:bc:76:
                    2d:c4:85:c7:90:a4:17:2d:48:62:28:10:fc:8e:27:
                    e4:0c:28:9b:2e:20:6a:de:ca:38:bc:51:f3:75:23:
                    2f:80:f1:a0:9a:ae:55:2c:52:3c:b5:66:96:72:22:
                    59:0b:17:7c:13:b1:33:0b:14:16:0a:16:d9:36:64:
                    0b:3f:87:9d:b0:8d:f9:38:73:92:bd:51:bf:31:10:
                    3f:cb:1b:45:5f:72:3f:69:0e:57:40:1d:88:fe:7d:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E6:A6:6B:D0:1D:B8:04:37:5F:BB:C0:F0:AA:32:87:D2:4A:AD:6F
            X509v3 Authority Key Identifier:
                keyid:72:76:19:F0:B9:01:28:C3:DF:95:B9:AA:AE:1F:28:1B:07:96:4C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/727619F0B90128C3DF95B9AAAE1F281B07964C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:db:9e:a4:74:55:c5:1f:84:cf:77:2a:8b:ca:0a:a8:cc:bb:
         fa:60:a5:64:3e:47:ef:78:f6:c5:eb:e7:15:14:5e:c0:3b:c4:
         22:79:fd:41:c4:b5:73:a2:30:37:0a:d9:50:a3:b3:4f:78:3a:
         40:df:e9:57:2a:06:49:ae:13:29:c2:88:f2:8b:8f:77:12:ed:
         af:8b:c4:16:22:33:54:3d:ad:c0:42:8d:7a:32:5b:3a:f4:37:
         f9:f2:6a:c1:34:47:be:06:9a:b2:b6:70:4d:53:f2:40:52:76:
         10:3c:e3:4e:fa:78:62:10:71:7b:ff:0b:3d:82:b7:ce:bf:75:
         8e:c7:e6:a7:ea:c2:40:9d:64:2c:b0:33:ad:77:c6:61:37:2c:
         50:83:18:8b:d6:6c:57:f0:b6:73:b4:16:92:a3:d5:f1:9c:a6:
         ad:5c:51:7d:32:42:70:5a:e4:d3:ca:9c:42:b3:9b:a2:c7:01:
         4c:12:42:5b:c8:05:35:96:ef:8c:36:c8:7a:90:90:82:98:ba:
         13:a9:cf:f0:4c:2e:88:3f:53:95:07:6d:5e:af:dc:7e:9e:a2:
         d3:17:0b:8c:cc:8c:f4:4b:79:17:d4:10:3c:48:21:d7:82:42:
         14:39:a9:4c:81:fb:7a:44:eb:ad:54:9c:4d:83:e1:42:51:34:
         20:dd:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:06 2025 by rpki-client