Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa
File:                     3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa (raw, json)
Hash identifier:          WEDV87p1h+fM7nhSZqzG9cqeLwcCy6a1xrK0VhjKsy4=
Subject key identifier:   8E:09:95:EA:22:B9:DA:E9:43:DC:55:F8:89:B8:34:92:AD:50:F8:46
Certificate issuer:       /CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
Certificate serial:       6ED7E910B69E95BD8B7E143A9DD944E4C2EEBACF
Authority key identifier: 7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa
Signing time:             Thu 02 Jan 2025 19:03:24 +0000
ROA not before:           Thu 02 Jan 2025 18:58:24 +0000
ROA not after:            Thu 01 Jan 2026 19:03:24 +0000
asID:                     264133
IP address blocks:        138.59.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:e9:10:b6:9e:95:bd:8b:7e:14:3a:9d:d9:44:e4:c2:ee:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF39D52856181EDEBB441A696F7B87D2FF633BA
        Validity
            Not Before: Jan  2 18:58:24 2025 GMT
            Not After : Jan  1 19:03:24 2026 GMT
        Subject: CN=8E0995EA22B9DAE943DC55F889B83492AD50F846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:01:8b:de:35:51:23:86:9c:da:06:64:3d:
                    6c:f0:6b:d2:86:07:fa:ed:f9:b2:51:86:2e:9c:6c:
                    c6:be:af:76:0d:15:19:d3:0d:ea:3c:c7:6d:93:5b:
                    ed:e3:db:09:de:72:46:2b:f1:2c:34:cc:c9:52:d8:
                    18:36:6f:7c:c3:4a:83:0a:8e:1c:84:26:35:f8:13:
                    58:48:ce:65:63:ee:78:aa:1d:09:e5:d3:38:e4:ac:
                    48:e1:d5:d9:06:3f:14:79:7e:cc:f3:9d:1a:66:02:
                    4d:4d:61:3e:c6:0a:e8:43:99:66:ca:03:b2:25:b9:
                    87:59:97:2a:36:ef:02:42:0f:c6:c2:18:fb:4f:9c:
                    36:1e:d1:d0:b7:75:a9:0b:41:84:1d:e4:b4:90:e5:
                    4b:03:bb:bf:17:f3:32:fc:03:53:c2:a6:1f:0e:6a:
                    e0:9d:57:21:ef:1a:46:21:1c:f5:fb:40:c2:ea:28:
                    29:2e:a1:53:c8:d4:ec:ce:b1:36:93:c2:c9:d8:9b:
                    81:84:81:20:c1:b0:c9:65:5f:92:b9:f7:c7:34:4d:
                    0c:6f:62:89:d4:4d:20:f1:72:bf:21:0d:76:19:27:
                    df:67:ea:f1:e3:94:34:bf:a5:78:a1:5c:e1:79:3b:
                    0f:e0:07:2e:de:73:bb:de:eb:ab:04:ff:b9:eb:f6:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:95:EA:22:B9:DA:E9:43:DC:55:F8:89:B8:34:92:AD:50:F8:46
            X509v3 Authority Key Identifier:
                keyid:7A:F3:9D:52:85:61:81:ED:EB:B4:41:A6:96:F7:B8:7D:2F:F6:33:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF39D52856181EDEBB441A696F7B87D2FF633BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/1/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:d1:2a:dc:46:33:54:51:3f:a0:db:d6:1c:fe:f6:20:39:
         2b:68:5a:92:26:77:09:3b:a5:17:ba:34:8b:40:e8:79:94:79:
         bd:43:56:c1:40:8e:f8:e8:ef:15:a1:36:17:2b:7d:4a:9d:90:
         03:04:ac:76:b9:1d:1f:ad:60:5b:a0:dd:83:9b:13:5f:25:78:
         ef:48:82:e3:41:9d:d1:b2:93:2c:b4:05:5f:d9:51:b1:57:7d:
         85:72:27:75:b9:ee:bb:f4:36:1a:9f:4a:e2:d4:d1:9b:29:78:
         04:45:6f:c8:35:bf:57:5f:0c:8d:87:9e:aa:25:fe:eb:6c:61:
         13:e7:44:61:b2:3e:74:93:31:bd:55:e0:49:fc:b9:cd:52:66:
         51:86:29:f9:dc:f6:33:04:c0:b6:8e:31:88:38:4e:ea:99:39:
         65:e8:66:19:ef:59:dc:42:b4:b0:14:59:32:6a:9a:e4:ec:77:
         99:48:a2:ea:4a:1a:be:35:fa:68:6a:7b:e9:76:16:60:19:16:
         8f:1d:96:68:52:0c:cd:9b:22:54:3a:d1:02:83:4b:a9:c0:e6:
         09:10:2b:91:86:a5:33:ea:dc:51:df:9f:75:96:f3:8d:6f:41:
         86:f5:aa:25:6c:da:76:eb:00:3c:9f:7d:cb:7d:0b:44:42:c5:
         82:a5:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:50 2025 by rpki-client