Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32342d3234203d3e20323634313936.roa
File:                     3133382e39372e3230342e302f32342d3234203d3e20323634313936.roa (raw, json)
Hash identifier:          q4TDum1FF1WvsVGG1PPsyBMowo622YlfRVOQnTC5p9M=
Subject key identifier:   25:5E:52:F5:26:35:5E:39:0A:79:C2:3D:9C:1A:99:30:F9:1B:88:8F
Certificate issuer:       /CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Certificate serial:       529A1A6D70ED2A43F0AEC005D78F0CA1B0C8B290
Authority key identifier: 3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32342d3234203d3e20323634313936.roa
Signing time:             Fri 27 Jan 2023 02:34:28 +0000
ROA not before:           Fri 27 Jan 2023 02:29:28 +0000
ROA not after:            Fri 26 Jan 2024 02:34:28 +0000
asID:                     264196
IP address blocks:        138.97.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9a:1a:6d:70:ed:2a:43:f0:ae:c0:05:d7:8f:0c:a1:b0:c8:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
        Validity
            Not Before: Jan 27 02:29:28 2023 GMT
            Not After : Jan 26 02:34:28 2024 GMT
        Subject: CN=255E52F526355E390A79C23D9C1A9930F91B888F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:22:a8:b4:4d:57:df:54:9a:04:50:de:02:
                    a8:19:46:d2:52:25:ce:2b:67:57:31:9c:62:db:88:
                    01:14:9a:54:86:6d:93:4a:3c:bc:1b:9f:31:d1:e1:
                    f2:d6:03:84:48:59:c6:19:41:7d:e2:c8:71:23:68:
                    d9:a1:fa:69:b1:99:a7:31:ce:f7:fe:00:1a:e8:05:
                    2a:c3:57:9f:15:68:7b:e2:1a:23:20:85:54:ea:83:
                    60:48:6a:18:40:90:f9:a0:69:e7:97:bd:93:40:fc:
                    09:53:9d:d9:d7:9b:81:51:ed:82:2d:28:35:3e:88:
                    39:4f:3c:3f:b3:bb:d8:de:93:47:2a:7f:9e:ab:cf:
                    25:ee:d1:25:03:b0:ac:10:6e:e8:e4:b7:07:15:0f:
                    49:6f:af:59:6c:fb:c1:9c:63:14:eb:a5:bd:82:76:
                    2c:7b:08:0b:8a:95:55:af:f5:8f:60:91:ca:41:8a:
                    70:98:38:53:bd:7a:cf:78:4b:25:c2:4e:bf:e2:ce:
                    e8:db:9f:02:08:1a:47:75:53:44:84:c5:50:fc:95:
                    05:ac:44:70:7f:bb:67:5d:1b:19:8d:6d:e0:ae:fc:
                    45:9d:3d:89:48:8c:10:0e:26:22:e0:ed:94:8c:67:
                    46:f1:d5:5c:63:88:bf:3d:0d:b0:24:f3:05:81:b2:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:52:F5:26:35:5E:39:0A:79:C2:3D:9C:1A:99:30:F9:1B:88:8F
            X509v3 Authority Key Identifier:
                keyid:3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32342d3234203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:a0:df:7b:ad:16:d5:09:ac:46:9d:b7:2c:ea:2d:c8:7e:
         c3:e6:21:71:ed:53:2b:55:59:79:24:49:11:a4:84:67:d4:a1:
         d3:c5:3d:1b:9a:03:27:4b:45:ff:1c:9b:37:d8:f8:bd:2c:0b:
         d3:15:f2:3b:e6:25:6f:b9:0d:ca:fa:51:8c:ea:24:eb:79:aa:
         1a:19:3e:1d:23:cc:c6:bc:51:cf:52:3a:37:2d:c3:5f:c7:92:
         34:d8:c8:00:17:f3:41:44:2c:31:14:50:7d:a8:1c:eb:5a:e8:
         2d:62:06:37:d3:be:71:f5:0c:c5:a1:37:1b:2b:08:bc:79:ea:
         be:98:9a:e4:5e:d5:a1:17:28:52:91:44:ce:a4:6f:51:96:e3:
         83:9f:0c:c3:f2:26:00:eb:61:92:e6:fb:39:73:02:a6:41:be:
         56:64:a6:fc:43:49:39:84:41:f2:ca:2e:95:36:05:00:26:4d:
         b6:78:9b:d5:73:ac:05:43:68:ab:62:12:f6:64:5b:48:0b:61:
         ce:44:55:75:d3:f1:26:1a:59:7b:5b:69:7a:93:85:f9:78:e2:
         91:45:4b:83:14:0f:7d:67:10:8e:c7:b8:c6:05:a3:0c:7f:49:
         bf:98:d9:dd:2a:23:93:98:12:84:79:6f:b5:23:3e:35:4e:6b:
         7d:48:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:30 2025 by rpki-client