Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235332e302f32342d3234203d3e20323634353631.roa
File:                     3133382e302e3235332e302f32342d3234203d3e20323634353631.roa (raw, json)
Hash identifier:          HUwZon8YFId+DDXHVExFoOaPtkelWIqxHb026KocXrE=
Subject key identifier:   CD:B8:A1:CD:0A:EA:65:13:A4:61:5C:17:33:CD:4F:92:2F:7C:77:25
Certificate issuer:       /CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
Certificate serial:       3227A19CD69FD290ADE72B225AC81A7012ACDFF2
Authority key identifier: CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235332e302f32342d3234203d3e20323634353631.roa
Signing time:             Mon 09 Jun 2025 11:40:50 +0000
ROA not before:           Mon 09 Jun 2025 11:35:50 +0000
ROA not after:            Mon 08 Jun 2026 11:40:50 +0000
asID:                     264561
IP address blocks:        138.0.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:27:a1:9c:d6:9f:d2:90:ad:e7:2b:22:5a:c8:1a:70:12:ac:df:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB691F4D1487AAB5DB81304BB991079CB03D989D
        Validity
            Not Before: Jun  9 11:35:50 2025 GMT
            Not After : Jun  8 11:40:50 2026 GMT
        Subject: CN=CDB8A1CD0AEA6513A4615C1733CD4F922F7C7725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:9f:19:e0:45:65:0f:49:f4:4c:36:05:4a:
                    f1:14:45:f4:78:e5:68:38:c1:1b:26:8d:99:40:4c:
                    94:8e:e1:87:7d:0e:39:2b:2e:94:2b:89:da:9d:b7:
                    f0:e5:c8:3d:13:97:7d:58:d3:89:fe:70:84:e1:88:
                    08:3e:2a:46:cd:05:99:eb:77:ee:82:4a:b8:7e:ab:
                    a3:5e:16:74:23:e4:fe:ae:fc:88:7b:2c:e2:eb:d1:
                    c5:b7:18:16:2a:06:e6:4d:35:d9:64:a8:0d:b2:dd:
                    e4:d6:5e:01:2b:62:1a:a3:b0:ec:64:b9:ee:dd:91:
                    ea:ad:72:04:58:87:eb:3f:26:a6:01:e3:58:ad:a7:
                    18:a4:af:7c:ba:b5:f4:8a:6b:96:d6:03:74:29:ec:
                    c8:c4:0f:b0:1f:ab:98:38:d5:43:eb:51:b6:71:96:
                    13:c9:a8:8d:84:c9:2c:9c:a9:dd:cd:17:c3:48:ad:
                    d0:7c:8d:df:4f:63:86:8a:ba:a9:5d:17:0a:4b:52:
                    b2:72:64:53:c7:07:ab:ab:6d:12:f5:05:a2:c3:9a:
                    7b:0a:2e:6f:3b:98:06:fb:cb:55:80:8b:0a:b4:de:
                    ec:94:c1:ee:6d:49:43:28:16:ba:db:93:a7:f8:e0:
                    81:17:38:cf:f8:6a:76:0d:51:3e:d4:27:7e:8b:12:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:A1:CD:0A:EA:65:13:A4:61:5C:17:33:CD:4F:92:2F:7C:77:25
            X509v3 Authority Key Identifier:
                keyid:CB:69:1F:4D:14:87:AA:B5:DB:81:30:4B:B9:91:07:9C:B0:3D:98:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/CB691F4D1487AAB5DB81304BB991079CB03D989D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB691F4D1487AAB5DB81304BB991079CB03D989D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235332e302f32342d3234203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:6a:d2:e3:0b:3b:41:9a:16:d9:9d:e4:64:2f:30:f6:4a:
         15:50:62:a2:06:82:22:eb:15:35:ce:1b:e5:94:96:43:7f:54:
         06:14:62:9a:a1:ae:24:14:41:41:b6:21:72:04:77:9c:50:b8:
         5a:09:d7:ef:45:c8:67:00:84:1f:7b:d8:d0:cc:c8:ff:0c:39:
         f3:c9:77:97:b7:c6:50:bb:17:75:e1:14:86:3d:c0:15:bb:bc:
         70:9d:a7:6a:d9:5c:b5:17:42:e0:7e:70:6b:66:c5:be:e4:0b:
         2a:ec:da:32:02:e3:84:7c:f6:d5:51:95:fb:1e:6a:0a:37:d0:
         17:ab:ee:40:0a:3e:9a:41:51:37:e8:0a:a3:da:cb:18:db:03:
         d5:a0:f8:10:d0:e9:4e:e6:b5:40:a6:13:6d:e0:dc:5d:97:82:
         00:8a:41:15:94:e9:10:76:41:8d:d7:a0:4e:45:94:03:58:73:
         60:8f:f3:8b:fd:04:12:e6:a5:d7:99:87:19:27:de:9f:64:74:
         a4:1a:be:02:6c:7d:2b:51:fd:43:cf:bf:e8:2a:d7:5b:34:36:
         d5:76:45:0d:56:f1:90:2e:88:b3:1a:d0:3e:9b:bd:1f:80:aa:
         14:b0:a1:2e:c7:b6:fa:40:b5:56:c2:2b:36:c7:fe:9c:99:de:
         73:07:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:21:45 2025 by rpki-client