Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa
File:                     3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa (raw, json)
Hash identifier:          lmA0tc7XuJ585t5Vghuz/uDmBcaWObb8pliRjI90THw=
Subject key identifier:   44:48:9A:5D:71:95:64:EB:E4:C2:F6:B6:41:1C:EF:25:7A:43:99:72
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       6BD7CDAF00CEACDF19DB661599AFF8B800A0A9B1
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa
Signing time:             Tue 03 Dec 2024 18:24:17 +0000
ROA not before:           Tue 03 Dec 2024 18:19:17 +0000
ROA not after:            Tue 02 Dec 2025 18:24:17 +0000
asID:                     264320
IP address blocks:        138.122.120.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d7:cd:af:00:ce:ac:df:19:db:66:15:99:af:f8:b8:00:a0:a9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Dec  3 18:19:17 2024 GMT
            Not After : Dec  2 18:24:17 2025 GMT
        Subject: CN=44489A5D719564EBE4C2F6B6411CEF257A439972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:ef:cd:da:da:87:08:a9:f9:65:22:20:08:
                    49:c6:54:8d:f7:a8:fa:6f:f0:3f:f5:72:66:be:ea:
                    00:3d:a1:19:bc:6b:c1:b6:ae:e6:c8:2c:1e:75:e3:
                    55:b2:71:f8:10:70:a7:98:8c:68:9d:88:7c:0c:28:
                    f5:26:31:aa:fb:cf:4e:96:94:0f:4c:76:2e:f4:d9:
                    7c:22:5b:68:b2:37:cc:f1:d2:33:47:38:16:4e:07:
                    ab:fb:aa:77:c6:99:bb:86:e2:93:12:ec:64:40:b5:
                    7c:36:68:f5:9f:11:56:0f:f0:67:42:ff:11:8a:9b:
                    96:9c:1d:1b:ce:b6:c5:26:f1:9e:c6:f0:25:31:51:
                    13:ee:17:55:3f:d0:80:5b:32:5d:84:39:42:f6:4e:
                    58:8e:32:29:57:d7:ba:4d:d3:c6:1e:e2:d9:52:7c:
                    b7:32:87:c6:71:41:10:b8:a8:a9:b9:19:ee:5c:1a:
                    95:46:c9:16:df:50:a1:30:40:08:f2:ba:38:f6:6e:
                    3c:f8:3b:da:5c:31:b1:9e:09:ad:2e:09:89:86:a2:
                    0d:ca:47:2d:c0:a3:45:24:63:46:99:55:f7:1e:ac:
                    92:b2:8d:4b:d4:32:3c:24:ba:5b:67:a5:f0:1a:bd:
                    68:ee:42:7a:ec:32:a6:a0:fe:be:62:4e:c6:77:02:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:9A:5D:71:95:64:EB:E4:C2:F6:B6:41:1C:EF:25:7A:43:99:72
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:06:00:db:d8:18:02:62:67:6a:3e:5a:47:75:f5:13:de:
         82:cf:7f:d0:ca:5b:d5:09:da:d1:fd:2b:88:9a:b5:f0:eb:ae:
         84:8d:66:2b:fc:d2:13:75:e6:61:d0:22:b1:1e:21:15:c8:ef:
         1d:9d:49:b8:71:dd:3e:df:8b:d5:9d:e6:7d:da:70:0f:3e:59:
         ba:26:07:33:9b:06:61:8f:8f:4c:79:f3:ce:29:b0:71:0a:91:
         c4:6d:5c:38:e7:83:2b:3f:c2:85:d6:b1:32:38:49:f9:d3:f4:
         88:ff:e2:46:c6:51:80:da:1d:5a:e9:58:1f:7c:41:4e:cd:d9:
         3f:3f:8f:fa:dd:00:60:05:70:d3:3a:ba:5a:57:94:64:5c:39:
         a1:d3:40:61:65:dc:79:88:5a:2b:9c:5f:7e:ad:a1:05:58:26:
         b8:80:aa:cc:4b:f0:91:15:25:86:7c:10:db:ae:ea:7f:0f:a3:
         05:49:7a:eb:83:d5:76:e8:17:72:ab:2f:81:64:a5:6a:d0:ed:
         dd:ce:0e:a7:7e:40:5b:a5:e4:38:e2:d6:d7:78:ac:09:b5:fe:
         ce:10:94:ed:8f:d7:87:ef:11:0e:14:57:2c:82:57:69:b9:5c:
         e9:bb:c3:66:b0:8a:79:8f:a9:06:49:bc:eb:64:db:2c:bd:5e:
         9c:41:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:29 2025 by rpki-client