Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
File:                     3133382e3230342e36342e302f32322d3234203d3e203533313831.roa (raw, json)
Hash identifier:          Qzj81Xnt3onN/RpfYH1HymfGNIuoRRI+G0UzCKavj1s=
Subject key identifier:   60:14:86:C1:09:1A:C3:E3:19:71:E9:68:CB:AD:AA:0D:9E:B8:33:C5
Certificate issuer:       /CN=7382855FA8D8855302C055BA5BAC6FBA63BD783B
Certificate serial:       57C54E86616989B6995E729FDEFBDC82C55B7BD0
Authority key identifier: 73:82:85:5F:A8:D8:85:53:02:C0:55:BA:5B:AC:6F:BA:63:BD:78:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7382855FA8D8855302C055BA5BAC6FBA63BD783B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
Signing time:             Fri 04 Apr 2025 12:02:12 +0000
ROA not before:           Fri 04 Apr 2025 11:57:12 +0000
ROA not after:            Fri 03 Apr 2026 12:02:12 +0000
asID:                     53181
IP address blocks:        138.204.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:4e:86:61:69:89:b6:99:5e:72:9f:de:fb:dc:82:c5:5b:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7382855FA8D8855302C055BA5BAC6FBA63BD783B
        Validity
            Not Before: Apr  4 11:57:12 2025 GMT
            Not After : Apr  3 12:02:12 2026 GMT
        Subject: CN=601486C1091AC3E31971E968CBADAA0D9EB833C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:6a:7d:2e:39:d1:79:07:b6:74:44:18:34:
                    bf:e4:30:2c:c7:ce:95:f2:20:af:52:51:53:c8:5c:
                    15:3f:51:aa:f2:c3:1f:d8:3d:eb:02:6a:f6:94:74:
                    d4:2d:3e:d6:a4:47:c8:bb:8d:53:c7:fc:4f:ae:6b:
                    76:2c:b6:fb:99:85:ab:8a:8e:be:be:85:88:f0:e7:
                    9f:23:c2:7d:d4:4f:e3:14:bb:ab:14:ac:17:ba:0f:
                    b8:b2:81:27:92:06:57:25:b3:79:20:58:63:0d:a9:
                    8f:98:e0:fc:b4:28:8a:c8:01:65:6e:f0:4f:b6:78:
                    22:29:bb:fb:e1:7f:77:f9:af:7f:55:27:31:47:1d:
                    ae:d1:ab:fa:8b:4c:12:d0:51:dc:21:44:4c:9b:0a:
                    14:27:43:54:b2:92:1c:e0:fb:25:6e:74:7e:be:03:
                    49:62:bc:cd:4c:26:f6:10:be:77:da:bd:44:c3:f0:
                    d9:e8:fe:95:90:5f:c8:48:5e:4a:b8:73:c8:31:47:
                    53:ed:d9:9b:53:da:49:d0:2f:97:87:b0:cd:ad:2d:
                    3e:97:81:42:aa:8b:cb:65:f7:48:9d:e8:82:79:79:
                    c1:40:63:61:2b:7c:90:d6:c1:ea:ec:48:0a:34:0c:
                    e4:df:4f:4b:92:d4:be:b3:7e:c8:36:28:67:ca:bb:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:14:86:C1:09:1A:C3:E3:19:71:E9:68:CB:AD:AA:0D:9E:B8:33:C5
            X509v3 Authority Key Identifier:
                keyid:73:82:85:5F:A8:D8:85:53:02:C0:55:BA:5B:AC:6F:BA:63:BD:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/7382855FA8D8855302C055BA5BAC6FBA63BD783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7382855FA8D8855302C055BA5BAC6FBA63BD783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:ac:a5:54:c3:28:b8:d3:4f:36:67:a3:4b:50:3f:af:01:
         60:fb:98:b6:7e:40:01:c7:9c:7b:7b:a4:9d:af:c3:1b:9e:ed:
         23:cd:cd:2e:6c:f1:44:31:d3:95:a0:7c:ea:eb:bd:47:89:e0:
         38:25:c5:62:de:d9:f8:48:d4:bd:f6:ea:74:e9:e2:4b:c7:91:
         00:1e:d3:dd:d0:2a:5f:c6:f9:6a:23:7b:56:77:d6:9c:15:ea:
         01:fd:f2:50:0b:08:9c:40:65:27:7c:04:c0:c2:9e:9d:4a:5b:
         94:c2:2c:47:3f:b3:0c:0f:68:b4:0a:27:3f:7b:0c:37:13:77:
         e6:13:a0:a8:a5:cb:cb:ed:2c:96:6b:ac:72:9f:6b:e6:fa:40:
         b2:9a:c6:c7:1f:df:b4:ea:75:3f:57:5f:8c:0e:6f:f7:3c:43:
         0b:da:f3:3c:cc:c2:cc:63:ad:bf:49:d9:70:de:b5:0b:a0:bc:
         24:40:74:25:04:ad:52:c7:ac:db:5b:39:88:27:8d:33:d8:33:
         a8:af:66:46:c3:c0:65:04:ed:c5:ca:d1:48:f9:3c:a7:6c:2f:
         9f:79:59:66:b3:85:ed:54:86:38:b2:b0:3b:31:53:c3:43:c4:
         ef:75:7f:b2:5c:41:c8:3e:42:2f:e7:8c:2b:d1:93:3e:5d:93:
         ff:18:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:14:48 2025 by rpki-client