Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32322d3232203d3e20323633353534.roa
File:                     3133382e33362e3137322e302f32322d3232203d3e20323633353534.roa (raw, json)
Hash identifier:          a/TSCeH5DcGRJghqjLPNLhgJbO96IG7+whprh3GGSWM=
Subject key identifier:   8D:86:3A:58:4C:09:54:BD:56:A4:76:A4:07:EA:C2:D1:3D:E7:20:29
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       68F31C072F20B87E805C167602DF4C05DF882596
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32322d3232203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:00 +0000
ROA not before:           Wed 28 Dec 2022 20:15:00 +0000
ROA not after:            Wed 27 Dec 2023 20:20:00 +0000
asID:                     263554
IP address blocks:        138.36.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f3:1c:07:2f:20:b8:7e:80:5c:16:76:02:df:4c:05:df:88:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:00 2022 GMT
            Not After : Dec 27 20:20:00 2023 GMT
        Subject: CN=3082010A0282010100DFD8FDCB599614E29ACE5E127362D728B9F74F6806BC3F8054F5339175343D3C562199F0AFEAE31CAD5A100A7D058F1C609CF250E6EC501BB3B69F8BA6BED3C3DB5B7665A96F80A57B90A55E7361D7DE6B27D8D2B6927C76F5F37E8CB870F37A946E62E57265A860AD119639435111A5645D6BA18094691D173F156E15E06A29D0D8E377EE969E5A4AA2C61AD46780767CA2F751B38F541A1389C04126D8937E54176FA8646F687A307820A16F39C7413F20F146B4E56AEC6F660DC9009379B4F32BEF46B922B8F6DEC43FF15F20D1A4764B57A0BF83A9116D033AA8D6435FCEE53615D6AB1466C9D8BD43B1E400866FE8B5179909AD30E1E5AA5A33B1F57DA70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d8:fd:cb:59:96:14:e2:9a:ce:5e:12:73:62:
                    d7:28:b9:f7:4f:68:06:bc:3f:80:54:f5:33:91:75:
                    34:3d:3c:56:21:99:f0:af:ea:e3:1c:ad:5a:10:0a:
                    7d:05:8f:1c:60:9c:f2:50:e6:ec:50:1b:b3:b6:9f:
                    8b:a6:be:d3:c3:db:5b:76:65:a9:6f:80:a5:7b:90:
                    a5:5e:73:61:d7:de:6b:27:d8:d2:b6:92:7c:76:f5:
                    f3:7e:8c:b8:70:f3:7a:94:6e:62:e5:72:65:a8:60:
                    ad:11:96:39:43:51:11:a5:64:5d:6b:a1:80:94:69:
                    1d:17:3f:15:6e:15:e0:6a:29:d0:d8:e3:77:ee:96:
                    9e:5a:4a:a2:c6:1a:d4:67:80:76:7c:a2:f7:51:b3:
                    8f:54:1a:13:89:c0:41:26:d8:93:7e:54:17:6f:a8:
                    64:6f:68:7a:30:78:20:a1:6f:39:c7:41:3f:20:f1:
                    46:b4:e5:6a:ec:6f:66:0d:c9:00:93:79:b4:f3:2b:
                    ef:46:b9:22:b8:f6:de:c4:3f:f1:5f:20:d1:a4:76:
                    4b:57:a0:bf:83:a9:11:6d:03:3a:a8:d6:43:5f:ce:
                    e5:36:15:d6:ab:14:66:c9:d8:bd:43:b1:e4:00:86:
                    6f:e8:b5:17:99:09:ad:30:e1:e5:aa:5a:33:b1:f5:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:86:3A:58:4C:09:54:BD:56:A4:76:A4:07:EA:C2:D1:3D:E7:20:29
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32322d3232203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:fc:17:f9:3c:b1:74:c3:c6:da:01:ac:13:e0:0c:01:23:02:
         9f:4c:1c:91:80:59:34:69:d0:f2:e2:1b:c3:cc:41:39:b2:b1:
         65:37:1b:23:93:86:8d:22:27:3b:1b:b9:53:09:64:58:45:3f:
         62:66:93:43:18:97:6c:5e:d4:73:37:5a:e6:49:7b:38:c0:03:
         36:82:e8:37:f5:72:bd:89:35:20:cd:b5:ff:a7:58:4c:dd:32:
         d7:77:b6:a9:07:69:3c:f9:48:47:ab:50:86:95:7a:4e:59:66:
         2a:85:35:df:fc:1f:89:0f:7f:0b:e0:67:8c:d0:64:18:64:89:
         e9:4e:e8:56:e2:45:88:ba:01:3d:be:58:da:61:fb:55:e9:03:
         33:e4:d0:39:fa:b5:3b:9c:b3:1d:64:72:0c:ff:ff:51:97:03:
         ba:83:a4:20:da:58:4c:9d:17:9b:12:c0:c6:81:c4:8c:43:48:
         ad:49:4d:a5:6a:b9:50:64:04:b2:df:77:ed:a6:c2:9c:2d:1b:
         4f:f4:d2:21:38:1c:94:68:d0:9f:0a:29:2a:22:6b:8a:c3:1c:
         df:89:b4:f5:f9:6e:71:f9:ac:dd:16:75:51:19:43:74:99:a1:
         69:b7:d9:b1:45:d0:5d:c3:5c:62:94:c6:c8:90:38:75:92:b8:
         56:58:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:22 2025 by rpki-client