Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          MGfRULpn+sEtQrYyAD2waifWTr/9nH2a+sKj5YMXVC4=
Subject key identifier:   E6:FC:96:FD:AF:22:3E:74:3C:1D:6C:0B:3C:CC:43:2E:A3:3B:53:BF
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       3B1F6AD396FC5840E4CC2F0578783811246D6C22
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
Signing time:             Thu 06 Mar 2025 19:04:17 +0000
ROA not before:           Thu 06 Mar 2025 18:59:17 +0000
ROA not after:            Thu 05 Mar 2026 19:04:17 +0000
asID:                     264479
IP address blocks:        138.117.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1f:6a:d3:96:fc:58:40:e4:cc:2f:05:78:78:38:11:24:6d:6c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Mar  6 18:59:17 2025 GMT
            Not After : Mar  5 19:04:17 2026 GMT
        Subject: CN=E6FC96FDAF223E743C1D6C0B3CCC432EA33B53BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:fb:e9:65:8c:d6:f2:ca:8c:7a:df:f1:c9:
                    36:5b:21:b8:a6:ed:64:80:ff:15:5b:6f:b1:0a:d6:
                    78:67:77:4e:bc:4e:6c:8d:ff:ac:bb:e6:36:f5:5d:
                    e5:0f:d6:d9:66:a7:06:bc:ab:71:f5:95:35:ec:34:
                    7c:a6:fb:3d:e9:d7:7c:24:88:35:5d:69:d7:83:14:
                    aa:a3:ad:7b:40:99:72:f7:27:09:e5:8a:b3:91:98:
                    ca:64:d7:ff:db:f4:a0:cf:4b:83:23:c1:79:00:d9:
                    32:d4:cf:8a:67:14:c9:3b:e8:f9:8e:39:66:c5:aa:
                    94:30:eb:d6:a8:c3:58:4d:96:07:48:b3:44:19:12:
                    a1:07:c5:a0:0e:29:22:31:a1:42:f0:1c:e2:fa:6b:
                    31:ba:c7:54:ff:79:80:78:e3:a7:22:5b:13:23:93:
                    68:38:8c:27:df:28:15:05:de:d8:25:21:a4:da:d6:
                    45:f7:30:88:2e:5f:ff:79:10:c7:81:be:83:55:7c:
                    9e:ac:1e:28:db:78:4e:a2:b6:2a:73:94:59:1a:63:
                    4c:2f:15:d3:df:8b:20:31:ef:07:f3:7a:5b:64:20:
                    2d:c1:53:53:93:18:27:17:5a:a6:ef:4a:e6:4b:47:
                    ef:f4:f3:bd:2e:20:04:d4:47:1d:6a:15:ec:42:2e:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:96:FD:AF:22:3E:74:3C:1D:6C:0B:3C:CC:43:2E:A3:3B:53:BF
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:66:b5:97:5c:98:9a:1b:f7:87:f1:4a:58:08:7a:26:75:
         3b:cf:aa:eb:7d:de:0a:55:ff:cf:e1:e5:4d:7c:7a:14:0f:9b:
         07:70:58:42:01:19:bd:a5:77:8c:3e:ef:45:4d:f9:5d:c7:97:
         96:5d:35:80:b0:52:96:34:06:60:06:59:38:55:08:6d:a7:51:
         27:5e:3f:42:4c:ae:8c:85:3b:9a:44:36:06:b3:8a:ab:b1:fa:
         42:f8:f8:1a:e2:50:4c:dd:80:4c:8c:9d:7f:b1:3a:c9:06:a8:
         ff:f3:3b:1d:29:e3:26:ee:3a:f1:9b:32:8a:b6:26:6a:f7:30:
         a5:12:5a:41:c9:90:c0:2c:0a:0f:b4:d0:91:90:37:1a:1f:3d:
         0a:fc:d8:17:d6:e9:5c:a7:75:00:ef:de:af:0a:eb:d1:a4:6d:
         f5:4d:f1:7a:f5:cf:97:48:84:6b:74:cf:a3:c1:8b:1f:1e:34:
         5c:0c:4f:75:e6:07:d0:0f:7b:e9:a2:e6:70:77:9e:17:c7:9b:
         3e:fd:0a:25:24:92:98:d6:ed:7d:b6:e1:90:d7:ef:57:f8:96:
         10:7c:2c:dc:68:a7:48:65:59:a0:78:d1:2f:da:0c:50:44:1c:
         ac:bd:56:a5:2e:e2:38:17:40:42:53:44:67:25:46:71:34:b6:
         65:45:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:31 2025 by rpki-client