Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139322e302f32322d3233203d3e20323634313333.roa
File:                     3133382e35392e3139322e302f32322d3233203d3e20323634313333.roa (raw, json)
Hash identifier:          6JJTU8EtPzjMi5EEkMj1ldon6kLvyuu0odhgBHGs+G8=
Subject key identifier:   45:E3:D0:9D:AB:7D:A3:DF:F3:F2:9B:1E:4E:94:4E:B2:65:0D:04:9E
Certificate issuer:       /CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
Certificate serial:       2D3F28BF8B3E6BAC6B85CDEF90DD1BA29C034630
Authority key identifier: 7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139322e302f32322d3233203d3e20323634313333.roa
Signing time:             Thu 02 Jan 2025 19:03:24 +0000
ROA not before:           Thu 02 Jan 2025 18:58:24 +0000
ROA not after:            Thu 01 Jan 2026 19:03:24 +0000
asID:                     264133
IP address blocks:        138.59.192.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:28:bf:8b:3e:6b:ac:6b:85:cd:ef:90:dd:1b:a2:9c:03:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
        Validity
            Not Before: Jan  2 18:58:24 2025 GMT
            Not After : Jan  1 19:03:24 2026 GMT
        Subject: CN=45E3D09DAB7DA3DFF3F29B1E4E944EB2650D049E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:54:32:2b:ce:02:6c:1d:70:0b:cb:00:c8:
                    98:29:fc:de:19:32:22:f9:46:5d:70:26:1b:fc:7b:
                    06:63:9b:4e:c5:ec:a4:e1:d4:b0:91:f0:91:45:70:
                    f0:f4:12:61:08:03:06:95:b5:d6:7e:28:b2:c0:fc:
                    7c:40:29:a0:88:5f:73:46:1c:c2:9a:e8:f9:dd:84:
                    e9:85:54:5b:a8:78:89:82:92:7a:ed:c5:3d:e3:a9:
                    c6:cf:41:03:19:c5:28:cd:80:f2:63:07:ae:11:0d:
                    b9:0f:f4:37:8b:00:b9:e9:aa:f6:87:e0:27:94:76:
                    1b:65:83:be:93:95:66:d2:34:40:71:f9:9d:c4:5d:
                    75:f1:fe:39:8e:83:42:12:1e:7f:75:10:9c:0b:aa:
                    ef:5e:22:75:6e:6d:93:38:43:bd:50:95:f6:72:bb:
                    b3:77:f8:79:92:b0:9c:ce:41:b1:69:5a:66:6b:43:
                    47:79:b1:10:6c:a8:e9:a5:62:1e:4f:f5:2d:a6:4e:
                    5c:a8:10:0c:93:27:b2:50:d6:10:48:6f:fa:84:eb:
                    e1:f6:3d:fe:ad:95:9e:58:e9:78:89:33:12:86:94:
                    a6:10:cc:97:93:03:b3:d2:73:6d:f5:4a:3a:f7:33:
                    b9:f8:a3:d2:f3:4f:a1:11:91:bb:76:78:15:f6:7b:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:D0:9D:AB:7D:A3:DF:F3:F2:9B:1E:4E:94:4E:B2:65:0D:04:9E
            X509v3 Authority Key Identifier:
                keyid:7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139322e302f32322d3233203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:bf:af:a0:56:f5:f4:74:49:e3:88:3c:fa:08:7d:45:1d:
         66:d3:89:40:36:d4:29:14:a9:09:aa:a8:85:9a:51:fe:30:7d:
         38:44:96:ee:1e:db:77:78:23:a9:48:de:44:2b:96:6e:7e:50:
         e1:26:23:b4:99:c5:c0:d9:12:ec:79:9a:c7:c9:0c:cb:77:ed:
         0e:cc:f6:d3:8b:38:c2:71:82:f5:93:ac:a6:40:ef:e4:fb:6b:
         66:3d:19:dd:d1:30:7e:89:a3:7f:87:22:c6:e8:6b:0e:0e:2e:
         2a:56:b9:26:15:95:24:1b:e5:ed:59:5d:3a:f3:f0:a0:f1:24:
         99:e6:e8:14:a4:32:0c:12:5e:61:2a:49:47:b5:18:d9:99:b1:
         e2:70:7a:6d:36:cb:ad:60:a1:a4:08:2e:1a:a3:5e:ec:bb:19:
         e6:58:e7:13:8e:52:83:a4:24:d9:19:eb:d6:5e:ea:4d:bc:4d:
         8d:ef:52:2d:cf:6e:4a:4a:20:50:4b:35:a6:2d:f7:76:1a:d6:
         03:01:04:5d:05:9c:cc:ba:9c:41:9c:0f:b4:cb:4e:5b:97:ad:
         f1:e6:04:d7:8a:35:97:fd:bf:e6:e3:67:46:34:f6:24:8b:1f:
         4a:35:5e:d1:4e:04:cd:b6:7f:0c:6e:82:b0:11:88:f5:f9:5d:
         41:32:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:12 2025 by rpki-client