Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33392e302f32342d3234203d3e20323730393332.roa
File:                     3133382e35392e33392e302f32342d3234203d3e20323730393332.roa (raw, json)
Hash identifier:          BWo4YeCi9tvIEjoUTyOE2THE+vN3cSxcLiA+6nCJjmg=
Subject key identifier:   CD:85:10:33:A6:C9:E1:B4:EC:58:3F:D3:3D:23:55:0D:CC:62:0F:08
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       21171CEC7C05624774CA8B0D75C23F1C5E57D285
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33392e302f32342d3234203d3e20323730393332.roa
Signing time:             Wed 12 Apr 2023 11:15:37 +0000
ROA not before:           Wed 12 Apr 2023 11:10:37 +0000
ROA not after:            Wed 10 Apr 2024 11:15:37 +0000
asID:                     270932
IP address blocks:        138.59.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:17:1c:ec:7c:05:62:47:74:ca:8b:0d:75:c2:3f:1c:5e:57:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Apr 12 11:10:37 2023 GMT
            Not After : Apr 10 11:15:37 2024 GMT
        Subject: CN=CD851033A6C9E1B4EC583FD33D23550DCC620F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:89:f1:99:42:f7:35:61:4b:f3:2d:35:cf:
                    e9:84:69:f7:d0:e6:a5:8a:09:5c:2d:5f:af:75:07:
                    af:20:c2:e7:50:62:e9:f5:7b:41:49:48:cc:97:8a:
                    38:d2:87:be:79:77:38:c3:0d:f4:27:8e:2d:b4:20:
                    06:5a:64:5b:49:fb:6c:24:da:39:44:e1:88:b1:04:
                    f7:b9:c4:55:8e:71:60:9e:08:a7:1d:c8:30:e4:99:
                    2b:2e:ba:8e:2f:29:38:e5:13:50:7b:4d:8c:07:ad:
                    a3:b3:54:ba:5d:45:61:11:f6:47:0e:e8:c5:e1:1b:
                    f9:66:3d:08:30:af:f5:7f:f6:4b:db:28:b6:f6:c6:
                    ae:3b:c5:52:d6:22:95:42:eb:8e:02:97:28:3b:d6:
                    52:00:72:ff:75:ad:12:16:48:ab:a6:79:03:3f:37:
                    7a:db:b0:05:da:5f:fa:f3:ec:00:c1:87:68:fe:32:
                    90:17:ce:70:44:bd:d3:77:0a:ac:e6:bb:a2:45:d0:
                    24:ac:3a:cb:dd:65:2e:89:14:c9:33:7f:5e:3d:8f:
                    b1:24:62:76:93:4a:e6:13:82:37:dd:54:15:7f:1d:
                    3f:7e:d2:a9:ef:f3:cb:0a:48:58:16:66:02:91:da:
                    73:4d:9e:40:8d:30:9a:02:88:71:18:04:c0:22:5d:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:10:33:A6:C9:E1:B4:EC:58:3F:D3:3D:23:55:0D:CC:62:0F:08
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33392e302f32342d3234203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:33:b3:8b:f7:24:49:e7:fc:c1:d6:3e:54:d9:a6:06:8c:
         bb:82:de:3d:94:c6:a1:de:a9:6d:b4:1d:02:78:36:82:ba:71:
         f1:b1:5b:cb:c9:83:b3:70:33:db:61:f4:61:20:62:3d:46:f9:
         f6:a6:09:af:1c:e4:84:eb:cb:e3:9b:09:1a:a6:53:6b:86:8a:
         c5:f8:eb:31:fd:f0:99:ac:52:25:cc:b5:6c:48:33:f7:4e:49:
         5d:66:46:25:9a:66:e6:75:19:c5:91:c1:ed:30:6f:ad:bd:fb:
         97:af:aa:f5:f0:06:df:30:b0:5c:39:2f:71:29:b4:7f:0d:45:
         25:90:72:62:a5:1f:99:86:77:02:26:4c:3b:51:02:46:e7:52:
         76:da:e2:6c:80:51:4a:d3:9c:1f:b5:f0:58:6d:50:dd:6a:00:
         fb:ab:07:60:8e:7d:9e:1e:a3:99:ec:16:76:a2:f9:82:7f:17:
         f1:2b:93:76:14:59:b6:e0:4c:1e:49:90:f1:57:45:40:cb:2f:
         14:13:ba:16:97:a8:62:0f:15:23:68:24:fc:f2:77:9a:66:98:
         22:9d:87:7b:ef:51:40:e1:ea:26:2e:00:63:08:ed:46:2b:4e:
         7d:8e:86:2d:38:b8:e3:e6:75:11:d7:aa:22:e6:7c:c4:d7:be:
         a9:88:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:56:48 2025 by rpki-client