Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32322d3232203d3e20323633393232.roa
File:                     3133382e3231392e39362e302f32322d3232203d3e20323633393232.roa (raw, json)
Hash identifier:          z+JQ3708tZAeaH+liyCU/+3Nztwi2cnTOaaKoDPCufI=
Subject key identifier:   36:11:F3:9A:81:32:C8:03:A2:D6:A8:91:E3:15:B7:58:0D:DA:79:F0
Certificate issuer:       /CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
Certificate serial:       50750E3810CCDC4610AADE3632E7CA67DDD794C4
Authority key identifier: A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32322d3232203d3e20323633393232.roa
Signing time:             Sat 25 Mar 2023 21:14:04 +0000
ROA not before:           Sat 25 Mar 2023 21:09:04 +0000
ROA not after:            Sat 23 Mar 2024 21:14:04 +0000
asID:                     263922
IP address blocks:        138.219.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:75:0e:38:10:cc:dc:46:10:aa:de:36:32:e7:ca:67:dd:d7:94:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
        Validity
            Not Before: Mar 25 21:09:04 2023 GMT
            Not After : Mar 23 21:14:04 2024 GMT
        Subject: CN=3611F39A8132C803A2D6A891E315B7580DDA79F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:29:9a:7e:dc:b6:1a:6c:7c:59:40:cc:aa:
                    8d:ca:f0:06:ac:dc:97:f3:47:94:e0:58:db:14:39:
                    aa:65:d1:4e:03:cd:69:86:f3:0e:77:de:fa:74:ff:
                    15:3d:98:a8:e4:3c:82:df:f4:cf:25:a2:04:29:e6:
                    50:e2:1e:cd:3c:60:85:bd:a2:3b:dc:69:39:aa:a3:
                    cf:a8:ca:64:ff:13:8e:ef:91:ec:b2:bc:0f:9f:e5:
                    0d:83:76:74:fe:c9:14:5d:1e:2f:44:0d:70:dc:04:
                    91:ad:89:3f:18:58:2b:06:2b:24:ee:ed:b4:6c:8e:
                    3a:40:7d:c4:a0:de:d0:22:94:24:13:ab:27:c7:a5:
                    bd:ce:93:d0:a9:ba:50:a2:4d:ae:83:3f:a5:b4:82:
                    e3:5b:61:b2:69:af:07:27:35:b1:46:d3:59:f4:8e:
                    16:1b:c1:b8:b3:48:1e:f4:d9:c1:6a:94:13:bb:3f:
                    2f:73:41:f1:3f:9a:53:a4:20:b2:ad:e3:16:3a:e6:
                    26:9b:02:84:e0:b6:56:17:62:01:11:4a:dd:dc:d1:
                    2b:15:74:fc:61:e0:3c:e8:80:49:f0:ac:74:58:85:
                    c2:c2:9b:6f:c7:37:56:9f:74:d5:6c:95:62:46:6c:
                    b1:cb:c0:8b:96:7a:18:ae:a9:9c:6d:56:d1:07:17:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:11:F3:9A:81:32:C8:03:A2:D6:A8:91:E3:15:B7:58:0D:DA:79:F0
            X509v3 Authority Key Identifier:
                keyid:A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39362e302f32322d3232203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:26:cd:e0:4d:ee:2f:47:34:70:0e:ac:77:71:e4:d2:22:
         c0:20:9c:d7:2a:83:ab:1b:e3:08:ae:3f:1b:4a:35:a7:b7:d2:
         cf:a4:63:f5:1d:5d:5b:d8:84:af:76:e5:3f:cc:64:03:f2:af:
         fc:a6:a5:04:85:6b:bd:8e:eb:26:70:bc:a4:da:9c:71:e5:db:
         8f:7b:bd:5c:72:fa:e3:72:61:6f:88:c3:ec:2f:79:c3:8a:7c:
         70:07:48:f6:82:67:27:ba:66:b7:08:e5:d7:a6:61:32:ca:ee:
         1b:d4:fb:26:6b:b5:43:c8:3d:b2:60:2c:dd:62:52:97:23:56:
         34:48:80:4d:41:3d:14:28:57:85:85:1e:de:94:61:50:49:f1:
         ff:52:71:d5:90:cc:5f:d3:9d:c4:56:12:48:be:85:3e:74:a9:
         72:d2:28:51:ef:18:a7:0b:6b:37:5d:63:a3:69:ea:0e:6c:b1:
         d0:5b:cb:5f:47:2f:f8:a8:f4:67:ab:82:60:6e:06:21:57:fa:
         c7:fa:f6:df:9a:f0:a6:6a:8a:03:e8:fd:24:46:2c:8c:ec:32:
         94:13:4c:9e:74:6f:c2:7a:65:dd:5b:64:36:10:21:7d:d6:09:
         0e:ea:52:07:58:8f:87:65:f1:1b:bc:d4:7d:94:ac:1e:f2:80:
         ed:ae:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:19 2025 by rpki-client