Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa
File:                     3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (raw, json)
Hash identifier:          +6i+XKwWimizfoRbdVJb2YohVqqa/xjfO3uX3N5x8Vw=
Subject key identifier:   7D:A5:DB:16:DD:CA:A3:45:C0:82:7B:FE:81:CE:7D:68:0D:D1:70:A1
Certificate issuer:       /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial:       501ABB479AFCA418309ED7EACD563D4B7EC1ACFC
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa
Signing time:             Thu 05 Dec 2024 12:19:11 +0000
ROA not before:           Thu 05 Dec 2024 12:14:11 +0000
ROA not after:            Thu 04 Dec 2025 12:19:11 +0000
asID:                     263947
IP address blocks:        138.255.12.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1a:bb:47:9a:fc:a4:18:30:9e:d7:ea:cd:56:3d:4b:7e:c1:ac:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
        Validity
            Not Before: Dec  5 12:14:11 2024 GMT
            Not After : Dec  4 12:19:11 2025 GMT
        Subject: CN=7DA5DB16DDCAA345C0827BFE81CE7D680DD170A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:fb:85:4f:08:3d:17:7e:14:89:f1:dc:27:
                    bb:0e:22:56:74:66:92:16:6a:b6:91:a9:a6:b9:66:
                    4b:df:b3:4c:dc:91:3e:e3:a9:ec:26:22:5e:2f:0c:
                    d4:af:37:2c:f5:ee:18:9f:bb:ab:45:a4:d0:a1:c7:
                    7f:05:9a:f1:ea:52:7a:16:85:e5:72:5a:42:93:30:
                    af:84:55:dc:ff:72:f7:ae:39:02:a4:e1:95:fa:6f:
                    b3:47:78:f2:ff:b0:c8:1b:0d:6d:29:0c:a5:c0:59:
                    0c:ac:7e:ff:34:ba:f9:9a:f0:ea:63:57:ef:73:f3:
                    2d:d7:c5:ec:5c:35:61:66:50:a0:79:fc:4e:df:3a:
                    2c:a1:13:5e:2c:61:1a:90:12:b6:fe:e5:4a:af:e6:
                    ae:45:59:1f:96:a4:31:92:d3:7d:42:3a:c5:9a:96:
                    ae:a7:3f:18:4b:ab:a5:4e:ff:50:1b:ce:9d:9c:82:
                    f9:0e:c7:04:44:6a:fb:8f:66:e9:29:0c:05:f9:6c:
                    ea:6c:6f:02:a9:1b:92:db:26:4a:2c:c2:84:db:97:
                    20:0a:a1:46:9d:bd:bc:7b:6a:c4:13:0f:a3:2a:5f:
                    8c:59:ea:f0:38:c9:f2:7e:d1:87:90:70:f1:7b:be:
                    2f:3a:ab:3b:17:df:42:62:b7:15:53:5b:c2:46:f2:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:DB:16:DD:CA:A3:45:C0:82:7B:FE:81:CE:7D:68:0D:D1:70:A1
            X509v3 Authority Key Identifier:
                keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:01:38:da:05:99:a9:e1:7c:62:94:80:72:92:78:5e:00:71:
         22:fd:27:ab:70:f8:b1:8e:27:5b:6f:8f:e2:98:fb:b2:33:b7:
         be:63:2d:7c:ed:f0:d1:19:ac:33:d7:84:4a:99:1d:7c:26:dc:
         c7:2e:fa:f2:3f:54:d3:ab:0c:3b:36:2b:28:1f:a9:10:35:38:
         62:cb:c0:f9:46:4a:cd:17:41:04:5a:98:53:c4:a7:ea:df:2c:
         a0:0e:51:99:e4:74:53:93:b4:c8:ca:03:96:75:14:b5:a8:7e:
         9e:4a:3c:97:39:b2:d7:53:48:9c:92:ef:9e:e6:14:e4:08:b7:
         38:34:21:f9:cd:00:31:3f:78:dc:7f:9d:0c:82:83:4a:ef:88:
         fb:e4:99:2e:d3:c8:b9:1f:8a:00:ab:b5:11:cd:6b:32:63:06:
         10:3b:d1:1c:94:22:4b:ed:4e:bb:a3:a1:88:21:04:cf:bb:eb:
         d6:30:b7:ad:ac:66:9c:bf:7e:1b:e3:9d:d7:d0:19:66:97:16:
         1d:0a:da:55:49:1e:d8:e2:87:ba:20:8a:e9:90:9e:64:1c:be:
         e6:7e:31:12:3d:c4:df:22:29:13:43:07:6f:54:c1:f6:df:61:
         07:d0:7a:94:ae:e9:2e:46:38:a6:96:d6:76:4e:ad:66:6a:19:
         23:15:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:20:04 2025 by rpki-client