Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa
File:                     3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa (raw, json)
Hash identifier:          gbrH688C4/cP3MgLBhiyxuHRmS76027uHAqut6Rre9g=
Subject key identifier:   6A:12:3F:2F:46:86:A4:69:43:C1:FA:A5:F2:62:3C:39:36:C6:39:41
Certificate issuer:       /CN=D123858020F0224957058CA805488D517D88F47A
Certificate serial:       6EBABA3E092E25F08D0F68F05F7662CF12A1C907
Authority key identifier: D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa
Signing time:             Wed 05 Mar 2025 18:34:17 +0000
ROA not before:           Wed 05 Mar 2025 18:29:17 +0000
ROA not after:            Wed 04 Mar 2026 18:34:17 +0000
asID:                     264331
IP address blocks:        138.122.104.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ba:ba:3e:09:2e:25:f0:8d:0f:68:f0:5f:76:62:cf:12:a1:c9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D123858020F0224957058CA805488D517D88F47A
        Validity
            Not Before: Mar  5 18:29:17 2025 GMT
            Not After : Mar  4 18:34:17 2026 GMT
        Subject: CN=6A123F2F4686A46943C1FAA5F2623C3936C63941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:42:67:d6:80:28:7c:f3:da:85:0d:a6:de:
                    9b:cc:11:a9:be:75:78:61:88:64:65:b2:75:04:02:
                    cb:51:80:7c:f3:2d:b6:48:8c:99:c7:c8:dd:63:e4:
                    4a:4b:46:bb:f2:7a:99:f9:a2:76:d3:b2:bf:d9:29:
                    26:5c:28:e6:0d:bf:28:95:fe:c5:e2:f0:c5:d8:04:
                    1a:bf:06:64:e6:b2:db:33:c5:68:3b:e1:16:8b:fd:
                    64:29:9a:cf:cf:9e:30:06:53:cd:7b:e8:a2:0a:a6:
                    ad:06:69:42:b4:95:5a:de:71:83:3a:d7:f2:88:3d:
                    b2:81:29:a7:57:ab:8c:83:9f:1b:df:5b:98:69:08:
                    57:e9:0b:41:a4:39:cf:cb:93:59:79:7d:53:44:ae:
                    99:6f:b0:a3:2d:dc:d9:b9:3a:db:8d:6b:7e:9a:c4:
                    64:c0:4e:2c:6b:dd:8a:f1:d3:04:b5:39:ee:ca:b7:
                    d8:e9:02:74:7b:2d:3f:60:51:7c:d4:cf:8f:69:d0:
                    77:ca:50:0a:75:e7:d1:49:26:17:46:f1:55:99:c6:
                    97:b4:b3:94:b6:0c:e3:a0:a8:cd:fa:90:84:24:e9:
                    92:cb:40:b4:b7:a2:19:a7:32:59:c0:67:2c:88:4f:
                    24:eb:21:f0:d3:92:c3:77:ec:8b:71:66:04:81:8f:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:3F:2F:46:86:A4:69:43:C1:FA:A5:F2:62:3C:39:36:C6:39:41
            X509v3 Authority Key Identifier:
                keyid:D1:23:85:80:20:F0:22:49:57:05:8C:A8:05:48:8D:51:7D:88:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/D123858020F0224957058CA805488D517D88F47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D123858020F0224957058CA805488D517D88F47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/1/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:41:80:c0:34:08:63:9b:83:b3:9e:6c:46:7e:89:0d:53:69:
         8d:0d:77:41:42:38:a5:94:7c:fb:16:bb:d6:dc:f5:ff:00:bf:
         04:53:09:28:23:33:eb:1c:28:04:84:6c:7d:00:f0:4a:ee:77:
         3e:7b:f3:b4:11:68:94:89:56:30:1c:38:e2:7c:53:71:6f:55:
         b6:c9:d0:6e:bb:2f:49:34:24:2d:92:af:13:03:8b:42:81:a8:
         26:e9:e1:d5:0e:72:c6:93:33:0e:de:fd:23:df:88:33:15:5b:
         6c:bc:12:fe:76:9c:22:0e:6d:38:e0:c2:e1:d5:8f:b6:c2:07:
         9e:aa:9c:0c:32:c7:f6:7a:48:0f:83:de:87:f6:db:c2:36:19:
         4b:21:3c:f4:8e:72:d3:72:13:80:c0:69:71:8a:0e:32:cf:5b:
         cd:0a:0e:ac:47:bd:5f:cf:e0:fe:1f:06:d2:6c:d1:9b:82:93:
         34:31:f0:5a:12:c0:d3:59:8d:e4:c5:fd:5f:ca:ee:54:7c:57:
         1d:ce:0d:a0:30:8b:1c:03:07:90:36:1b:ca:b8:6b:9c:02:0a:
         e0:27:4d:d1:29:0b:b2:a5:d3:2c:2b:ba:1f:23:66:cf:09:8d:
         f2:82:75:1e:76:e7:98:37:e6:81:78:7e:5c:3e:71:cc:1b:4a:
         79:c7:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:58:27 2025 by rpki-client