Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa
File:                     3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          KuceIeI/cJMIZ8st3UWX/DfDkQ6kDa01g8eS9Ri/6l4=
Subject key identifier:   65:D7:90:F8:AB:71:59:48:77:EF:68:CD:A3:8E:1E:37:E5:0F:5E:03
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       0C5E717D483DA845BCCFA863B36A2F110E7CBDF3
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:13 +0000
ROA not before:           Wed 05 Mar 2025 22:05:13 +0000
ROA not after:            Wed 04 Mar 2026 22:10:13 +0000
asID:                     263073
IP address blocks:        138.219.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5e:71:7d:48:3d:a8:45:bc:cf:a8:63:b3:6a:2f:11:0e:7c:bd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:13 2025 GMT
            Not After : Mar  4 22:10:13 2026 GMT
        Subject: CN=65D790F8AB71594877EF68CDA38E1E37E50F5E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:e3:b4:6a:8e:1c:89:b7:79:75:c5:66:84:
                    cf:df:00:c5:77:4f:73:87:5c:f9:18:53:0f:d3:4f:
                    c2:58:a2:c6:e6:71:d3:22:ab:46:ed:56:ef:9b:ab:
                    3c:8b:b5:9a:82:93:d4:4b:57:66:cf:0e:9c:cc:03:
                    4f:26:44:4f:76:51:e7:a4:53:b2:33:a4:c0:9c:cc:
                    36:7d:25:fd:6f:b5:5c:5b:13:6d:11:80:89:e0:93:
                    2a:ba:a4:fe:2b:fd:37:0c:bf:fa:4f:ef:65:52:2c:
                    65:fe:1b:e2:53:0b:10:66:eb:02:04:4b:66:e5:12:
                    db:5d:02:02:48:3a:65:c2:e3:b6:a0:5f:9d:77:87:
                    52:a0:3a:91:b1:a3:8a:2d:23:62:94:24:eb:8e:5f:
                    c6:35:8d:73:ce:a9:5d:92:ae:cd:45:3f:17:51:28:
                    97:51:74:f0:50:b9:d0:ff:d2:93:27:aa:12:7f:ea:
                    43:28:97:25:3a:57:60:c1:7f:be:79:57:dd:1e:45:
                    f7:02:5b:53:cc:ed:68:28:10:5a:80:75:02:d6:6e:
                    c3:ad:f8:be:82:b5:9d:f8:43:5a:af:83:92:2d:84:
                    e4:d4:c9:d8:9c:8f:fc:c7:89:8b:88:a0:7f:4f:08:
                    ff:81:67:36:ce:2c:71:a1:2a:2a:69:ad:04:df:a6:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D7:90:F8:AB:71:59:48:77:EF:68:CD:A3:8E:1E:37:E5:0F:5E:03
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:28:ee:49:d0:2f:8a:79:34:7a:0e:db:a5:5d:15:d9:20:
         2c:04:84:61:5f:df:2d:b3:64:dc:a4:5e:74:d5:81:89:fa:03:
         09:ca:5d:85:2f:5e:d3:3f:11:7d:ce:83:77:41:29:cc:4b:a2:
         9a:34:72:35:18:3a:bd:cd:3c:eb:0b:fc:63:ab:19:d5:89:8d:
         2a:e8:bc:3b:8b:96:37:33:fe:dd:7a:ea:07:b4:46:4c:4d:8f:
         96:4e:82:8a:af:d2:76:8d:55:95:12:b9:7b:82:70:91:c4:5b:
         e1:ca:83:df:5c:c4:3b:84:59:08:3c:6b:e5:8c:22:3a:91:d5:
         f4:62:8f:03:c0:b6:ff:94:4b:f3:0e:5c:bd:de:b3:c6:d0:46:
         01:a7:2a:a2:bb:95:cc:32:f8:f0:50:f1:63:a1:25:15:e6:9e:
         b8:9f:88:e9:a9:99:25:3a:74:33:2b:a4:ee:d0:9f:23:d0:bf:
         cf:d3:f7:36:99:e5:59:2a:f3:fd:b1:45:08:82:eb:42:42:c1:
         34:5e:98:3d:25:4f:18:c1:90:0a:09:08:54:64:e1:4e:59:2c:
         e4:a5:2b:08:6c:06:e5:e4:11:04:cc:d7:1f:30:21:42:8f:96:
         10:b8:a3:4c:3c:f8:2a:c2:69:34:b4:da:e5:f8:f6:34:b6:eb:
         d4:09:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:05:19 2025 by rpki-client