Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138302e302f32322d3232203d3e20323730383136.roa
File:                     3133382e35392e3138302e302f32322d3232203d3e20323730383136.roa (raw, json)
Hash identifier:          Ft+VNEGr9z7i02zqQvpjBAMyUeRFrcSQA9MGMIDIJeo=
Subject key identifier:   05:34:B3:27:93:D9:92:F0:DF:B5:E2:51:EB:CF:CA:58:46:AA:3D:9E
Certificate issuer:       /CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
Certificate serial:       175037F7451F3AE38904C760F58A1D33E04C1BDB
Authority key identifier: 6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138302e302f32322d3232203d3e20323730383136.roa
Signing time:             Thu 25 May 2023 18:09:37 +0000
ROA not before:           Thu 25 May 2023 18:04:37 +0000
ROA not after:            Thu 23 May 2024 18:09:37 +0000
asID:                     270816
IP address blocks:        138.59.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:50:37:f7:45:1f:3a:e3:89:04:c7:60:f5:8a:1d:33:e0:4c:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C51CF59AF0C58F09EB57B98495B6A109E920308
        Validity
            Not Before: May 25 18:04:37 2023 GMT
            Not After : May 23 18:09:37 2024 GMT
        Subject: CN=0534B32793D992F0DFB5E251EBCFCA5846AA3D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:ba:e0:7f:f4:14:da:e4:98:47:2e:33:3b:
                    1c:3b:72:0d:07:e0:4e:94:58:59:7b:35:4d:43:e5:
                    a4:f6:67:d5:ca:a9:9b:9f:a0:e9:e6:75:5e:91:19:
                    fe:dc:a0:08:a7:84:ce:cd:95:a3:57:c4:8c:13:10:
                    5e:42:35:0c:3b:9f:5e:20:82:9d:6e:fd:ae:85:76:
                    d6:bd:53:26:18:14:79:1b:a5:a9:e1:ce:cf:73:5a:
                    2b:ca:e9:ca:f5:e3:5e:09:4c:9b:f9:b7:bd:5d:03:
                    6b:32:80:89:d5:b5:b7:5a:c2:7a:c9:fd:ba:dd:1c:
                    fe:a7:37:b3:17:4c:d5:83:25:88:d1:1e:35:78:b4:
                    5c:f4:2d:32:36:c2:e9:0f:68:9c:5e:23:2e:cb:cc:
                    3a:98:95:c0:3d:05:67:5c:c9:56:9d:d0:dc:d0:0c:
                    0a:d0:48:4b:08:1a:6e:98:d4:e6:0d:03:ef:47:d0:
                    85:3a:bf:0d:ed:8f:e8:c2:28:42:8b:6c:c8:90:b5:
                    54:1f:c5:cb:97:04:4e:ce:bd:7e:88:d6:3d:1b:2d:
                    79:0d:5a:6f:01:9e:2a:dc:4c:f6:28:d8:c6:4e:f4:
                    c7:32:60:36:d3:0d:1f:0d:5b:5c:0e:70:1c:44:77:
                    11:f9:4e:88:e8:66:4a:22:10:8c:b2:43:ea:25:6d:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:B3:27:93:D9:92:F0:DF:B5:E2:51:EB:CF:CA:58:46:AA:3D:9E
            X509v3 Authority Key Identifier:
                keyid:6C:51:CF:59:AF:0C:58:F0:9E:B5:7B:98:49:5B:6A:10:9E:92:03:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C51CF59AF0C58F09EB57B98495B6A109E920308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMAfX3sT3R6u9KopiN5DGjdQhR5Crkb5SL2eaTTS4cK1/0/3133382e35392e3138302e302f32322d3232203d3e20323730383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:85:ae:f1:2b:44:f5:33:71:cd:fa:ed:b8:e9:47:5b:48:
         9d:57:c1:2a:e6:d5:a3:bc:11:f8:b7:04:18:4b:60:e5:fc:a7:
         73:c6:93:69:eb:03:70:70:a9:6e:13:25:84:6c:88:19:a1:4f:
         ba:37:43:cc:94:9f:7c:c7:6a:39:61:3a:7e:62:46:f9:78:10:
         b0:81:f9:7b:30:60:96:90:97:a3:b5:51:1c:8f:f0:72:aa:84:
         ad:8f:50:71:77:f8:3f:f4:1f:44:6a:60:d0:00:44:4a:f6:b9:
         47:b3:9e:36:d0:e1:78:52:ad:07:09:4e:fb:06:94:6b:dc:65:
         4f:f4:42:eb:e3:93:08:93:44:8b:9e:97:48:b3:ad:40:dc:75:
         74:72:2b:90:08:30:44:3b:e3:ea:86:25:91:a0:b0:bc:c1:9b:
         83:f8:46:d3:20:cc:68:54:51:b0:2d:36:5d:53:ff:ce:89:ac:
         ea:9f:fb:64:22:15:15:f6:7c:f6:1f:9c:5e:57:81:55:8c:91:
         b8:85:c5:9e:9f:79:49:d2:3e:28:ed:75:58:c3:bb:ea:80:04:
         34:da:f0:31:10:77:d3:c5:fb:43:21:2b:d8:a1:bf:02:bd:30:
         eb:d5:c6:ac:3c:10:6b:23:71:3c:8e:a8:04:c3:82:e7:84:51:
         92:67:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:27:12 2025 by rpki-client