Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
File:                     3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          HmsLsQ4SubALTJgDEvBw4Bp/z5b602mD7SlXKQCYn5A=
Subject key identifier:   4C:7F:67:E2:2E:D5:23:51:F4:0A:C7:58:41:EE:B0:69:A9:63:C4:09
Certificate issuer:       /CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Certificate serial:       61372B6FD9CAD8DF91733F1999810E9B555D6178
Authority key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa
Signing time:             Fri 20 Dec 2024 13:58:57 +0000
ROA not before:           Fri 20 Dec 2024 13:53:57 +0000
ROA not after:            Fri 19 Dec 2025 13:58:57 +0000
asID:                     262669
IP address blocks:        138.94.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:2b:6f:d9:ca:d8:df:91:73:3f:19:99:81:0e:9b:55:5d:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
        Validity
            Not Before: Dec 20 13:53:57 2024 GMT
            Not After : Dec 19 13:58:57 2025 GMT
        Subject: CN=4C7F67E22ED52351F40AC75841EEB069A963C409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:64:14:e6:8a:ee:5f:06:86:6d:c7:e2:44:
                    7c:d8:ab:e7:57:77:d3:a4:6f:8a:20:f9:a8:30:23:
                    81:43:46:6a:68:be:9a:5d:d5:4f:36:e0:f9:c8:ca:
                    c9:7a:a4:de:85:84:3a:c4:c8:da:a5:d9:48:3f:73:
                    ee:31:34:5c:be:ef:3f:15:33:a5:ff:5f:60:2c:b1:
                    18:95:8c:bc:93:16:6b:f1:fc:0a:67:96:cd:de:ae:
                    5f:7e:81:ea:52:d8:ed:3d:6d:65:78:4c:39:dc:00:
                    00:92:c9:f5:a3:90:c5:00:02:94:6d:85:27:0a:36:
                    4a:3d:da:a0:b9:a4:c6:fc:61:8c:b9:aa:e4:68:01:
                    bd:15:8f:8a:b8:52:cb:48:20:2f:5f:a3:08:52:1b:
                    11:84:ff:66:88:07:30:41:25:c9:f9:09:d2:5d:d0:
                    3a:a7:e2:fc:7f:d9:0b:8f:5b:a4:4c:e4:82:82:f0:
                    ed:c0:c3:29:cf:92:f0:a1:74:22:5f:7d:bf:3e:ff:
                    76:8e:47:21:44:f4:5f:ae:6d:8b:e1:68:c3:1c:91:
                    8a:aa:7e:f9:38:b4:5e:3e:99:80:59:cd:03:4e:c5:
                    2d:4c:05:c4:2b:d2:15:25:19:6d:27:2c:ee:66:81:
                    52:3c:a0:ff:15:f0:65:d3:35:7a:c7:a9:e0:1a:66:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7F:67:E2:2E:D5:23:51:F4:0A:C7:58:41:EE:B0:69:A9:63:C4:09
            X509v3 Authority Key Identifier:
                keyid:24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3133382e39342e3232342e302f32322d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:66:09:0e:5d:0b:0c:e1:23:2f:0b:fc:59:35:cb:2f:8a:
         75:dc:45:eb:b9:e4:52:cc:92:b1:59:d9:8b:83:fb:b4:c9:1d:
         bd:cf:e5:b1:4e:07:03:2b:23:ce:47:09:3b:fa:9e:4d:f1:57:
         a7:b1:5f:63:b6:5a:b9:e2:ce:6f:50:fe:6c:4b:c3:f6:64:a8:
         b8:3c:30:90:6f:b7:a6:d8:13:5f:14:b1:04:3f:81:0d:e8:0a:
         47:18:52:e7:41:02:63:4f:ff:f8:26:b2:dc:e6:56:04:d8:b1:
         37:93:a0:19:e0:e0:f5:d8:82:93:53:01:19:61:f9:a7:53:87:
         d0:85:ed:5d:85:ce:d4:f2:93:a5:88:ff:29:5e:ea:32:cf:1c:
         1c:1e:53:a3:a1:63:43:b0:66:e2:f2:c3:df:a1:87:cb:4e:57:
         15:1b:a2:67:fc:ac:2c:8a:19:bb:d0:7f:92:2a:b6:75:c5:37:
         a8:e7:20:62:80:4f:56:a1:a3:84:16:36:72:7c:f3:9a:b8:bd:
         05:7a:f9:66:dd:e1:69:a5:a1:fb:b9:e7:a4:7b:56:98:6e:8a:
         c9:ab:cb:b1:ec:79:60:17:6f:74:d7:7a:11:2e:43:46:ea:e9:
         73:0b:cc:d4:74:ed:29:86:42:1d:f0:3e:2e:5d:b2:62:6e:f8:
         fd:b9:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:04:36 2025 by rpki-client