Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32332d3233203d3e20323634323539.roa
File:                     3133382e3131382e34302e302f32332d3233203d3e20323634323539.roa (raw, json)
Hash identifier:          QyIhaaN9VtDSrcsgN+UhMyt0RbCayjVfv0i1uIiDYnc=
Subject key identifier:   99:4B:0D:46:1B:30:88:97:9B:82:5B:34:57:28:9C:60:98:23:63:D4
Certificate issuer:       /CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
Certificate serial:       4F07152C5CF9C9DE2CDEEF11F9E666CEE20DF71F
Authority key identifier: ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32332d3233203d3e20323634323539.roa
Signing time:             Tue 20 Feb 2024 18:42:27 +0000
ROA not before:           Tue 20 Feb 2024 18:37:27 +0000
ROA not after:            Tue 18 Feb 2025 18:42:27 +0000
asID:                     264259
IP address blocks:        138.118.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:07:15:2c:5c:f9:c9:de:2c:de:ef:11:f9:e6:66:ce:e2:0d:f7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
        Validity
            Not Before: Feb 20 18:37:27 2024 GMT
            Not After : Feb 18 18:42:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:e7:e8:34:93:f9:05:75:3c:c2:72:a0:d3:
                    66:0c:32:13:d6:6a:f5:d8:84:47:66:a6:98:09:80:
                    03:c6:28:26:0e:80:dc:95:5a:6d:a3:d3:a1:3d:8f:
                    78:da:da:8e:86:01:51:e7:66:93:4b:55:fd:b5:b3:
                    fa:12:20:9f:95:35:23:a4:c0:ae:6e:64:91:28:35:
                    77:c4:a5:40:cd:38:64:b9:36:7e:a6:66:77:76:b9:
                    51:74:08:e3:73:29:6b:01:57:0f:90:cb:40:d0:3b:
                    5f:fa:12:76:d7:d3:59:c3:b2:c7:32:11:25:33:6a:
                    76:fb:da:13:ec:e8:be:09:dd:ae:1d:ef:9c:7a:42:
                    3c:30:a5:ef:e2:22:54:7c:e4:69:af:7c:66:58:a1:
                    0c:d0:37:1f:76:2d:1c:9f:3c:9e:d9:be:39:01:a2:
                    a7:44:d1:4d:42:a8:3c:64:73:60:3d:72:d6:b1:1f:
                    94:43:89:c7:d4:9f:80:65:bc:a4:84:df:f1:77:c1:
                    5c:e9:9f:17:87:31:28:8c:73:61:95:4a:f8:83:f5:
                    fa:f7:5e:cc:e4:45:41:54:e5:09:ef:6e:18:a0:3c:
                    45:94:be:aa:df:79:99:d1:19:35:97:31:08:ee:63:
                    5c:3a:b1:cf:df:ab:aa:b1:d6:77:ee:cc:6f:e6:a6:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4B:0D:46:1B:30:88:97:9B:82:5B:34:57:28:9C:60:98:23:63:D4
            X509v3 Authority Key Identifier:
                keyid:ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32332d3233203d3e20323634323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:59:19:72:b7:66:15:43:11:93:72:99:d1:27:44:ec:77:
         ae:fd:de:8a:65:0a:23:9d:43:96:02:fe:9a:f5:73:f8:70:c1:
         ed:4c:ee:ca:8b:9e:cb:7b:52:7d:18:61:e4:4a:97:b7:06:10:
         0c:9b:13:3b:2d:a4:b1:5d:2a:02:a4:a9:18:07:a4:54:05:e2:
         3f:c0:1b:0b:fb:35:36:30:e9:67:0d:30:f1:00:50:e8:19:aa:
         4a:d6:48:15:9a:8d:1b:5b:04:24:ac:7e:5a:ac:4f:26:73:ca:
         26:0d:4f:12:85:e5:bd:e8:01:43:08:20:e0:6b:f9:64:73:63:
         a2:8e:61:12:9f:ee:17:ad:70:31:48:3e:c6:04:b8:cd:c2:ad:
         da:5f:2a:af:ac:4c:f0:9c:ff:3e:45:3b:ec:b5:ef:64:5b:2f:
         bd:d1:32:31:83:9d:c1:a6:85:a3:9c:32:97:16:c2:41:c7:3f:
         ca:17:32:80:80:37:8c:05:ab:0a:d3:92:1d:c6:19:ba:8c:aa:
         cc:15:07:32:88:ca:51:f6:97:94:c5:d3:2f:34:4a:1e:86:0f:
         0f:3c:97:07:e4:1a:51:1c:b4:cf:9c:58:b0:02:f6:e2:79:7c:
         16:ee:6b:ff:fa:1e:6d:a9:77:99:57:d4:68:b0:fc:16:9c:3d:
         67:70:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org