Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e20323634313832.roa
File:                     3133382e39372e3130342e302f32322d3232203d3e20323634313832.roa (raw, json)
Hash identifier:          XuTtRECgigdbAL2B9vwvMtnG7dms8JhC6n0oZ32Cxzc=
Subject key identifier:   37:59:7E:1D:EB:7F:E2:33:47:A8:4E:17:9F:FF:64:50:02:97:96:EB
Certificate issuer:       /CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
Certificate serial:       E8381E60369AF114504CA073E2EAB72BE84ECC
Authority key identifier: B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e20323634313832.roa
Signing time:             Fri 24 Mar 2023 13:13:16 +0000
ROA not before:           Fri 24 Mar 2023 13:08:16 +0000
ROA not after:            Fri 22 Mar 2024 13:13:16 +0000
asID:                     264182
IP address blocks:        138.97.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e8:38:1e:60:36:9a:f1:14:50:4c:a0:73:e2:ea:b7:2b:e8:4e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
        Validity
            Not Before: Mar 24 13:08:16 2023 GMT
            Not After : Mar 22 13:13:16 2024 GMT
        Subject: CN=37597E1DEB7FE23347A84E179FFF6450029796EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:fd:60:aa:6a:9c:0e:29:2a:8c:95:11:7c:
                    f8:2b:f9:a2:6d:4b:18:f0:87:1b:9c:6e:a3:3a:0c:
                    11:a6:32:f6:eb:b6:4f:b4:94:96:62:36:44:e0:5a:
                    f4:f2:ca:72:7e:8e:28:2a:05:d4:a3:71:8c:b7:b0:
                    35:a4:14:b7:0b:21:73:22:28:1f:91:6d:1e:7f:31:
                    d5:97:45:b6:cc:6f:7c:b4:8e:e8:ab:ac:64:17:8c:
                    93:34:6e:66:5f:93:2e:a0:d4:33:38:f2:02:e6:fc:
                    cb:4f:f3:de:d2:45:42:79:15:93:f2:09:b7:5d:4d:
                    ca:fe:f4:53:30:e9:52:ef:56:ea:ce:3f:ee:d8:06:
                    e9:03:ef:dc:3a:15:f5:43:37:77:8f:05:be:42:3d:
                    ec:67:33:9e:6f:a3:4c:09:9c:ba:cc:9b:ae:b8:5a:
                    3d:43:3e:19:20:d3:d6:2e:e1:f2:c6:ce:57:22:e2:
                    80:5c:f2:08:d2:67:e9:68:ad:93:42:ee:00:08:8e:
                    bb:53:1b:9c:94:36:31:f2:aa:ed:e5:5a:7e:58:95:
                    b8:17:a6:af:45:6e:c4:99:0d:4e:c1:e3:23:fb:ce:
                    16:52:55:58:7a:8c:07:6f:ae:78:d2:ba:2d:af:93:
                    f0:f5:43:1c:52:85:8d:29:c0:a9:40:ae:34:2a:06:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:7E:1D:EB:7F:E2:33:47:A8:4E:17:9F:FF:64:50:02:97:96:EB
            X509v3 Authority Key Identifier:
                keyid:B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e20323634313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:80:dd:38:53:54:4f:5a:ee:54:0f:62:3c:22:24:bc:bd:12:
         c7:94:29:27:93:1e:29:42:42:06:9e:d7:df:30:54:69:0a:d9:
         58:cb:29:5b:fe:8d:73:2b:4b:9c:48:19:29:b5:1f:d9:e1:41:
         1e:aa:01:2f:7b:74:7d:6d:92:65:db:ca:5b:d7:91:e2:bd:a0:
         82:ac:2c:e3:d0:36:51:70:ce:ab:91:d2:0f:32:b9:35:43:87:
         87:df:fb:e9:25:14:ea:76:23:c8:ce:83:b1:a4:2f:2b:4d:f1:
         07:18:83:d6:58:82:18:5e:44:36:e9:4f:8e:48:02:d7:b0:dc:
         9b:e9:41:d6:03:86:4e:ba:51:9a:6c:61:73:41:55:e1:4c:f1:
         f6:1e:c4:a7:ad:62:a3:19:10:c6:af:d9:bf:32:9d:d2:03:d0:
         32:72:35:69:b6:46:d7:6e:5f:d6:eb:cb:c6:fe:f2:31:1b:7d:
         8a:05:95:6f:e1:af:8d:02:73:5d:7c:75:41:12:3d:4c:fe:e3:
         d0:13:48:32:8a:aa:92:42:86:a6:c7:84:fa:a6:7d:da:4b:ed:
         1d:f5:e4:4b:33:be:7a:a3:a8:d5:3e:78:f6:19:49:d3:5a:27:
         8c:02:ae:9c:00:a3:bc:9c:b2:29:2f:55:19:3a:29:1a:af:81:
         98:63:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:53 2025 by rpki-client