Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          RUTSeW69D9F0FII/CGq3lKywHctVvYHhCrRlaUFVguc=
Subject key identifier:   6E:4D:C3:D8:AD:82:57:52:5D:0F:6B:9E:F4:A6:42:D8:0A:90:C5:F5
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       3AC4B83A51C591AE8CB5CD46FEDF9E6E0E935FB0
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:07:56 +0000
ROA not before:           Sun 23 Jul 2023 00:02:56 +0000
ROA not after:            Sun 21 Jul 2024 00:07:56 +0000
asID:                     264242
IP address blocks:        138.117.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c4:b8:3a:51:c5:91:ae:8c:b5:cd:46:fe:df:9e:6e:0e:93:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:02:56 2023 GMT
            Not After : Jul 21 00:07:56 2024 GMT
        Subject: CN=6E4DC3D8AD8257525D0F6B9EF4A642D80A90C5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:db:d1:0a:1b:51:f4:8f:75:6f:97:7a:de:
                    2b:9b:88:2d:b3:46:57:e3:77:82:5b:af:4f:2e:ab:
                    6d:68:35:2e:80:c5:27:36:e4:a7:0a:dd:d7:de:ce:
                    4c:32:99:35:f0:d9:af:00:f9:b2:81:6d:e6:91:20:
                    9e:3e:e5:3f:cb:4d:c2:2b:17:b6:dd:4c:bd:ed:43:
                    46:2d:bb:4b:3b:cf:0b:f2:32:45:ca:97:be:2a:3e:
                    0c:ed:83:06:e8:d6:47:ae:d1:47:88:75:9a:06:9a:
                    ad:69:7c:e5:36:2e:99:79:01:33:bf:49:18:87:f8:
                    a6:88:d8:58:3f:67:b3:9c:56:92:6f:5f:05:da:68:
                    6d:ff:e7:02:87:06:80:39:a5:f1:d8:4d:7f:4b:6a:
                    ca:33:af:9e:4f:42:53:2e:03:0d:6a:f1:b0:52:6d:
                    59:0e:73:9a:31:08:32:27:26:3f:d7:96:95:b0:98:
                    56:2b:fa:f5:d4:e0:4d:b3:a8:bf:45:f0:01:27:6d:
                    74:b4:ff:33:03:d0:c7:64:34:1d:43:9e:81:d1:e2:
                    cf:03:92:93:d7:fa:16:e8:8d:13:4c:ff:5a:46:5f:
                    9b:23:a2:72:98:23:ed:1b:64:de:af:7c:dc:28:95:
                    7b:00:6f:a9:44:d6:89:32:92:d9:46:c2:b5:af:01:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:C3:D8:AD:82:57:52:5D:0F:6B:9E:F4:A6:42:D8:0A:90:C5:F5
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:cf:be:a6:72:13:60:85:f9:6f:e3:9c:63:86:6d:60:89:
         cc:53:cd:0b:4c:fc:d1:d9:ae:6a:c3:9d:05:1b:b8:1a:ac:00:
         5b:d1:5b:a6:0e:f1:c8:37:36:1d:b3:4f:7b:cf:19:be:b7:ff:
         53:c7:98:79:00:f8:51:38:31:45:e3:e7:4c:f8:e2:75:38:64:
         0b:80:d9:65:36:e7:c1:fa:93:1e:28:62:48:16:74:f5:87:1a:
         1f:53:21:be:3f:c8:c1:f5:89:3e:da:77:f8:cb:cf:02:2d:76:
         9f:15:56:75:77:6a:33:80:0c:72:c6:37:b5:10:46:18:5a:dc:
         a4:43:9a:51:d6:fc:ae:b0:92:b3:38:ea:84:aa:2a:4b:e8:2f:
         cc:1e:e8:f6:e6:2d:ba:87:94:aa:7a:6d:ee:e2:6d:41:27:ad:
         61:d3:5e:85:c9:e2:2d:89:6c:98:d4:d4:cf:1a:e6:b2:7c:5b:
         9f:78:bd:16:00:e3:e4:f1:55:68:1c:5c:ca:e8:5e:67:e9:4b:
         86:7e:e0:12:8e:f3:9f:9f:cd:4b:2a:b5:49:2a:5f:e2:d0:c9:
         92:ba:63:7b:c6:12:64:b7:b5:8a:c6:e0:0a:35:2d:a3:46:47:
         d0:4c:fa:f9:21:f0:e4:8d:84:56:85:85:15:5e:d8:94:82:8b:
         9d:e6:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:33:11 2025 by rpki-client