Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
File:                     3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          KGW69o1yS/gb1WHnhD7voMgBVpGQUYj//k6oltc6Wh0=
Subject key identifier:   E9:1A:DC:ED:4C:08:E6:54:EF:20:81:9A:77:48:77:63:64:D8:02:96
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       30B875592A52336E0F657B5BA012779AB0B6EE35
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
Signing time:             Mon 15 May 2023 22:43:03 +0000
ROA not before:           Mon 15 May 2023 22:38:03 +0000
ROA not after:            Mon 13 May 2024 22:43:03 +0000
asID:                     264479
IP address blocks:        138.117.32.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b8:75:59:2a:52:33:6e:0f:65:7b:5b:a0:12:77:9a:b0:b6:ee:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: May 15 22:38:03 2023 GMT
            Not After : May 13 22:43:03 2024 GMT
        Subject: CN=E91ADCED4C08E654EF20819A7748776364D80296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:77:a6:22:2b:15:43:21:1e:39:e6:fa:11:
                    9c:5f:94:87:97:cd:18:2a:2d:19:2d:de:92:be:40:
                    61:e0:6d:e5:45:79:3f:8c:81:86:6e:bb:dd:05:03:
                    db:6c:d3:00:80:dc:15:ab:8d:a2:0a:5b:cc:f2:3c:
                    6e:5f:54:c4:45:3e:85:4d:63:38:f6:51:90:16:8f:
                    15:bd:d9:09:6e:aa:f8:35:e5:50:d0:2b:e6:8b:1d:
                    7f:63:59:e2:df:7f:29:43:44:81:51:0f:e2:25:a7:
                    fb:af:1d:4f:24:aa:7f:6d:79:65:30:1c:42:10:cd:
                    33:3f:4b:89:da:62:22:87:49:91:cc:22:7f:1c:7b:
                    d6:f6:ae:cb:b1:d2:23:9e:7f:b1:0b:74:51:47:b4:
                    32:df:4b:da:ac:04:5a:d4:f0:2c:0e:c7:74:5a:10:
                    be:4c:54:32:35:ac:5f:a3:98:bb:f7:32:d5:57:1a:
                    30:e9:f6:fd:64:02:24:d9:d2:b7:4e:df:a0:02:07:
                    98:89:3f:69:5c:7e:d0:a3:89:36:c0:8e:40:ee:6f:
                    eb:2c:a7:27:7c:31:8e:6b:45:cc:c2:0d:7b:a5:1a:
                    7d:58:ca:fa:da:1f:87:86:03:f9:d4:00:2a:c6:40:
                    ec:b0:ae:2b:20:54:8a:94:0a:a1:16:35:e9:2b:25:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:DC:ED:4C:08:E6:54:EF:20:81:9A:77:48:77:63:64:D8:02:96
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:f9:ac:06:25:e2:ce:26:fa:a3:96:6b:7d:75:cf:ab:77:
         4b:3a:2c:57:7c:ba:5b:1a:bc:cb:1e:1e:9a:54:bb:02:1a:4c:
         fd:30:d8:c4:d8:8d:dc:b0:24:22:cd:ac:69:6e:7d:39:07:fb:
         91:b3:f3:c6:9a:a5:30:70:f2:9f:ec:e9:13:9b:bd:af:0d:79:
         a2:42:8d:a0:7b:79:e6:62:f6:8a:d2:95:90:f3:46:8b:17:7a:
         c8:ad:da:c2:5f:1f:03:85:b5:bc:8d:23:b9:55:a1:74:00:9b:
         31:d2:90:ec:f9:45:30:93:b3:8f:60:9d:4a:19:a3:70:4b:23:
         9b:ee:be:8f:9a:28:94:74:47:ff:f6:e7:70:33:8c:7b:b9:b0:
         24:13:78:20:3a:3c:7b:f8:78:6e:ab:88:bc:96:ad:f0:4f:36:
         14:02:ec:d1:cd:7c:0f:24:d6:15:e3:98:7e:8a:6f:98:02:0e:
         bf:12:b2:b4:9d:24:b0:7a:0b:c6:4b:87:dc:07:0f:19:6c:0b:
         33:1c:09:cd:ef:90:98:59:43:d9:1a:3e:98:dd:7b:bf:04:41:
         24:0f:ab:f5:04:78:85:62:f9:7a:75:e5:4d:fa:07:e8:57:bf:
         cc:82:23:91:e0:9b:ad:dc:79:3a:79:56:19:87:b6:a8:4a:ae:
         38:87:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:43 2025 by rpki-client