Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa
File:                     3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          6RDc/oK5ZH0LpnkQpTy8ZPhivJPN9rN+Pu+W6sS/oUY=
Subject key identifier:   AC:80:A7:93:15:E4:B8:D5:8D:42:FF:40:D0:62:13:E1:B0:90:1F:7A
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       08C743E9890EBAFC6C7F9913B485E046C2ED7B12
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:40 +0000
ROA not before:           Fri 23 Jun 2023 19:01:40 +0000
ROA not after:            Fri 21 Jun 2024 19:06:40 +0000
asID:                     264589
IP address blocks:        138.36.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c7:43:e9:89:0e:ba:fc:6c:7f:99:13:b4:85:e0:46:c2:ed:7b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:40 2023 GMT
            Not After : Jun 21 19:06:40 2024 GMT
        Subject: CN=AC80A79315E4B8D58D42FF40D06213E1B0901F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:2e:11:8e:6a:a8:7e:6e:a4:2c:b1:95:42:
                    b3:0e:15:f8:ab:a0:c3:d9:13:91:c4:1c:df:5d:42:
                    d6:6a:82:f7:c4:da:e5:28:cb:40:55:7b:15:be:58:
                    bb:34:e9:84:f8:e9:b3:6a:75:3e:eb:4a:bb:da:e5:
                    92:25:1a:ab:95:97:fc:e9:e2:13:a9:ad:a6:cd:0f:
                    6d:f5:c2:30:c7:b2:cd:b1:b7:b3:b5:9f:ed:50:b3:
                    90:2c:ae:f1:b6:81:ea:f3:a8:e5:7e:cc:8e:cf:de:
                    bb:64:db:81:65:af:4d:dd:3e:7c:8f:5b:53:9a:c4:
                    60:6b:4d:6b:b5:9c:de:b0:77:fe:ea:d3:3a:93:85:
                    07:f2:a2:5d:e8:98:9c:5b:5e:3a:c8:c5:10:65:d7:
                    08:f7:12:f9:a8:52:22:37:ca:f3:7a:f9:0f:1c:db:
                    41:3d:73:5d:cd:1c:f3:08:f2:2f:db:20:0a:2b:b7:
                    da:a8:9e:05:5b:85:8e:84:1f:58:d3:24:7a:7c:af:
                    52:b8:c0:a7:50:8b:a3:40:9d:3b:88:94:d0:ec:a5:
                    d9:64:9e:7e:47:8d:30:52:21:d7:bc:88:1c:a7:64:
                    e2:1e:e0:b0:cd:2f:66:0a:35:4e:9f:63:01:41:68:
                    1f:86:4c:7c:11:09:80:51:32:75:74:1f:21:7d:f8:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:80:A7:93:15:E4:B8:D5:8D:42:FF:40:D0:62:13:E1:B0:90:1F:7A
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ab:53:12:b0:5f:cb:62:1b:1c:92:ba:1a:f7:82:0d:20:26:
         f2:89:9a:1d:e2:aa:c6:ce:69:83:79:03:ed:ca:57:7d:46:90:
         36:af:f4:c1:27:0b:a9:b8:65:a6:eb:2b:c6:88:fc:be:24:e9:
         c3:38:4c:82:62:a4:7a:d0:4f:44:69:3e:1c:a4:31:6a:77:0b:
         dd:4c:b7:98:07:1d:75:7f:84:3a:f0:b5:f2:70:44:44:64:0e:
         e5:d1:4f:c1:88:3b:07:cd:fc:e8:58:1c:7e:8f:43:c4:b5:ef:
         d1:d2:5b:bb:93:77:5b:68:d8:5d:ba:bb:8d:d0:92:22:b0:f5:
         a2:cd:be:ed:5f:bf:d9:2c:7c:4e:d9:e5:d8:c1:a6:ac:2a:78:
         99:ea:68:c2:8f:68:34:c0:85:30:8f:40:7e:43:e5:9d:cb:68:
         75:0d:36:37:c4:04:2e:1b:9f:e1:d1:44:ea:63:7a:20:d5:3f:
         92:ed:14:fc:58:fb:18:fe:78:eb:98:2b:dd:52:a8:7d:0e:d7:
         08:bd:51:7b:6a:c8:5f:79:93:55:bd:49:c0:d4:48:6b:d3:d6:
         20:ed:f8:50:a0:24:97:fa:c9:25:0a:96:b4:97:b0:54:b7:54:
         bf:05:fa:75:c7:7a:35:d2:73:66:63:9d:31:bd:36:7f:a4:4e:
         f1:8e:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org