Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa
File:                     3133382e302e3139362e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          18w2eiBtIarZpgj74qsUSy62pVoBvVfH4iSJIwHwVg0=
Subject key identifier:   85:46:E9:05:C4:24:53:F1:E3:5C:20:F0:82:A8:37:FC:11:75:FE:52
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       062B72B0A319EB58CD8C9D27D6D3E27EACBAFDA0
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa
Signing time:             Sat 23 Apr 2022 13:55:23 +0000
ROA not before:           Sat 23 Apr 2022 13:50:23 +0000
ROA not after:            Sat 22 Apr 2023 13:55:23 +0000
asID:                     263073
IP address blocks:        138.0.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2b:72:b0:a3:19:eb:58:cd:8c:9d:27:d6:d3:e2:7e:ac:ba:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 23 13:50:23 2022 GMT
            Not After : Apr 22 13:55:23 2023 GMT
        Subject: CN=8546E905C42453F1E35C20F082A837FC1175FE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:69:fe:c1:2b:cc:46:1d:69:25:93:2d:1d:
                    6d:26:03:06:14:12:fd:41:c3:d6:59:7f:f3:b6:26:
                    5b:e7:2f:90:7f:34:47:56:e5:eb:0e:84:f9:13:f0:
                    97:98:23:d1:e4:cc:8b:0c:5c:e3:3f:a5:21:7a:0d:
                    86:6a:41:aa:30:97:04:ff:9d:2f:eb:fd:00:d3:68:
                    be:fd:cc:fe:ae:76:21:5c:87:b5:0d:95:23:7d:64:
                    c8:7a:cb:69:51:0f:31:3d:3a:55:c6:3b:e6:b3:92:
                    bc:eb:d6:6a:7f:7e:0d:bc:8a:e1:7e:1d:5e:ec:7a:
                    cc:91:7e:a3:e9:47:82:f2:ea:8d:3c:3d:c5:87:cb:
                    18:d9:98:92:95:e8:75:31:b6:0a:df:6d:63:1e:73:
                    d8:b9:00:24:f4:e4:9e:5d:c1:bd:9d:79:56:99:f4:
                    72:19:46:aa:f3:ff:4f:4f:88:d1:ca:75:31:6a:7e:
                    4c:97:cd:75:d9:78:2a:80:7d:7b:e3:4b:b5:8d:c6:
                    3b:dd:46:5a:9d:bc:df:d8:fe:00:90:9b:0a:c6:5e:
                    a0:68:f7:8a:2e:1d:a1:36:0b:de:a6:b5:00:b5:dc:
                    11:86:dd:7f:ec:a7:b8:28:39:fd:41:eb:59:c1:1e:
                    6e:5e:10:ca:a1:33:84:24:8e:b7:90:86:a6:3e:59:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:E9:05:C4:24:53:F1:E3:5C:20:F0:82:A8:37:FC:11:75:FE:52
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e302e3139362e302f32322d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:71:d1:b5:e8:12:43:4e:c9:2f:25:7e:3e:46:9a:09:f6:
         cd:ad:3e:ce:43:a7:02:3e:e3:9a:c5:1e:3c:ba:6a:b2:e0:f7:
         e0:2d:7c:34:eb:84:b6:1e:41:60:fc:14:fd:0e:92:3b:f2:5b:
         bd:32:5f:45:48:8f:3d:dd:c3:cb:22:ff:40:17:9a:37:15:9b:
         f1:d3:89:ee:37:01:13:d7:b6:11:39:fc:d0:db:fc:06:94:89:
         c1:32:70:e3:a2:7e:60:4b:65:de:17:94:95:37:1a:29:99:73:
         c2:ac:e3:26:0a:11:95:be:7a:ac:92:21:72:78:c4:71:35:43:
         c9:47:9a:2f:dc:05:8a:03:77:b5:19:d8:50:47:92:1b:89:82:
         8d:a3:2b:3c:58:1b:98:e8:7b:83:a8:15:57:e8:47:05:77:25:
         bf:2e:09:03:2e:57:12:e3:5f:1e:c6:e9:2e:1d:bb:5b:21:df:
         80:13:d5:f2:a5:1d:0c:d0:25:5c:42:91:59:53:57:c7:bf:fe:
         ba:85:7a:e8:fb:dc:3a:0b:e5:d1:18:06:f3:f8:cf:f4:b4:f9:
         34:23:99:fa:6b:e5:55:e9:3e:a9:18:f5:6f:3e:62:6d:f4:46:
         c5:ae:57:48:9f:70:03:43:20:95:5e:f3:37:c0:8c:ce:b1:c5:
         77:1d:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:43:49 2025 by rpki-client