Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632383035.roa
File:                     3133382e3132322e3234392e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          L14fIrKOq2Pv8tJlJCDKStOwwfbxzh/MD0p1RoiZPUk=
Subject key identifier:   74:72:B9:98:3C:75:C4:4C:1D:C1:66:A3:3C:83:FE:CF:D0:EA:BD:6F
Certificate issuer:       /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial:       27B465ABAAF3E98BF263E2939F096392B2B39C03
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632383035.roa
Signing time:             Sat 08 Feb 2025 00:52:37 +0000
ROA not before:           Sat 08 Feb 2025 00:47:37 +0000
ROA not after:            Sat 07 Feb 2026 00:52:37 +0000
asID:                     262805
IP address blocks:        138.122.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b4:65:ab:aa:f3:e9:8b:f2:63:e2:93:9f:09:63:92:b2:b3:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
        Validity
            Not Before: Feb  8 00:47:37 2025 GMT
            Not After : Feb  7 00:52:37 2026 GMT
        Subject: CN=7472B9983C75C44C1DC166A33C83FECFD0EABD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:05:17:b0:99:7e:63:40:3a:60:b0:b0:b9:
                    13:f7:e6:a2:ee:35:48:c8:cc:c1:92:7b:e8:6d:22:
                    1c:26:00:19:83:0d:d4:6d:cd:a0:33:58:16:98:05:
                    74:2b:a3:ac:99:a7:3f:0d:09:c9:64:a0:4e:d6:f0:
                    c9:b4:0b:5c:b8:11:53:f4:c4:89:d3:c9:83:df:4e:
                    89:db:77:88:5a:96:44:71:ce:4d:cc:5e:69:7e:fe:
                    ef:e6:e5:5c:43:d9:eb:12:da:69:c9:58:d1:1b:06:
                    4e:9e:eb:c3:5a:07:c3:d8:99:90:31:8e:ad:0f:29:
                    db:fa:f4:fb:a2:1e:30:8d:24:d6:30:b3:9c:c5:ab:
                    6d:d2:6c:ac:2b:6b:93:73:90:9e:86:20:c0:5e:6b:
                    7c:75:e1:09:c5:fc:81:81:43:44:fa:68:3f:ab:38:
                    55:34:2d:73:ed:c9:91:a3:09:43:b8:be:64:5a:17:
                    64:32:0b:ab:44:dd:be:87:2d:ca:b2:0e:0b:69:a2:
                    26:d3:00:92:33:fe:1f:c5:74:25:6f:c1:e2:6e:60:
                    73:57:47:86:1d:be:58:79:32:b8:f7:c5:1b:c3:92:
                    59:b0:9e:dc:f6:e1:bb:e6:81:ab:54:b2:42:60:dd:
                    0c:04:41:0b:ca:81:d3:52:0f:71:51:a0:42:11:c3:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:72:B9:98:3C:75:C4:4C:1D:C1:66:A3:3C:83:FE:CF:D0:EA:BD:6F
            X509v3 Authority Key Identifier:
                keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3133382e3132322e3234392e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:29:cf:f5:5d:8d:56:9d:a9:c5:77:fd:79:af:48:d1:51:
         ce:88:3c:f3:68:a7:8f:17:01:d2:9e:cb:72:cd:ac:c2:63:6f:
         f3:69:33:65:d3:e6:bc:5d:09:4c:79:03:1f:5a:00:b0:4e:1f:
         f4:34:63:42:61:75:9f:43:ec:d6:67:1b:ce:d7:d6:11:b2:85:
         d5:ce:b0:6f:23:58:63:eb:1d:28:04:6f:d6:81:65:78:5a:b7:
         a0:c5:49:b2:2c:ff:c2:0b:27:b9:29:3a:7c:2f:74:47:bf:ce:
         c5:ef:8e:14:df:1a:af:2c:6c:54:36:46:07:11:93:6e:55:f6:
         6c:9f:fc:41:c4:ba:9d:9c:6a:d6:82:2f:87:47:df:29:da:f4:
         78:2d:54:6a:5e:86:59:8c:f1:ea:1e:7f:f0:80:e6:2f:52:ed:
         c9:d3:2f:95:8f:66:d5:26:5b:64:be:2c:78:ee:c6:7c:7a:01:
         db:58:84:b5:13:55:f9:29:33:17:a5:6d:47:f0:4d:dc:de:9b:
         89:13:7f:4f:69:a3:ac:21:cd:7e:f9:fc:be:af:c7:b6:30:d6:
         37:91:b3:29:e6:dc:a9:05:43:18:cf:d0:b6:5b:7e:26:5c:a0:
         af:1f:6a:79:f3:ce:b4:54:dc:0c:00:2f:20:92:f0:e2:8f:8f:
         54:6c:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:01:31 2025 by rpki-client