Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139382e302f32332d3233203d3e20323632383638.roa
File:                     3133382e3235352e3139382e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          N4sJ4+pFcEqsyOLkpuPdZxanGJRgxLsGZhy2XxS5Izc=
Subject key identifier:   E4:95:80:3F:66:13:BB:C6:77:D5:B3:A9:CF:D5:D8:4A:1B:C7:7E:4D
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       3DCC0BCCA72B2780249A31701FF20C42D0177CCC
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139382e302f32332d3233203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:20 +0000
ROA not before:           Sat 22 Jul 2023 21:34:20 +0000
ROA not after:            Sat 20 Jul 2024 21:39:20 +0000
asID:                     262868
IP address blocks:        138.255.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cc:0b:cc:a7:2b:27:80:24:9a:31:70:1f:f2:0c:42:d0:17:7c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:20 2023 GMT
            Not After : Jul 20 21:39:20 2024 GMT
        Subject: CN=E495803F6613BBC677D5B3A9CFD5D84A1BC77E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:d5:42:10:ff:6b:a0:69:df:09:11:d4:dc:
                    09:3a:ff:5e:f0:c6:df:f3:59:70:f4:c3:a3:fd:70:
                    ac:1a:c8:61:af:9c:61:04:68:8a:47:0c:3c:c4:2b:
                    16:95:56:d7:67:5c:23:0b:86:77:8d:80:e6:89:77:
                    4e:87:9d:c1:7f:bf:b2:c8:9d:2e:f4:34:c1:ed:1d:
                    26:ea:e2:72:17:3d:8c:f1:34:2d:05:d8:0e:00:ab:
                    48:9e:66:2c:32:8e:fe:19:36:77:c6:ae:48:68:67:
                    e8:cc:7c:36:ca:d7:de:c0:00:74:c8:bd:2b:dd:3c:
                    8a:32:26:6a:7f:e2:12:3a:d4:0c:ac:94:76:d5:94:
                    bd:db:2b:26:ae:a9:61:52:49:56:a4:61:01:94:94:
                    6c:80:f2:4b:c7:76:ae:e7:f8:9a:df:b6:70:e0:6a:
                    66:46:e5:f1:81:a9:de:bc:d2:94:1e:d5:93:72:73:
                    5d:9f:53:c1:a4:33:30:d1:0a:bf:72:ba:35:d8:cf:
                    4f:73:40:51:5e:72:0a:d4:58:77:8c:19:00:41:86:
                    65:0f:51:c7:c6:62:75:e4:10:d9:a3:70:cc:ea:31:
                    a3:9b:6a:cb:67:80:45:e3:16:15:0f:13:11:dc:40:
                    dc:7c:c9:42:f8:e8:b7:b6:3e:8d:75:f7:2f:e6:51:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:80:3F:66:13:BB:C6:77:D5:B3:A9:CF:D5:D8:4A:1B:C7:7E:4D
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139382e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:05:e3:95:57:2a:18:1e:1c:24:62:65:05:4f:d7:71:f8:ce:
         6a:f4:e3:ff:13:6f:dd:03:08:19:c2:77:49:b3:23:ba:e5:2d:
         09:08:68:9a:69:18:98:2a:c0:96:7c:77:a7:64:ac:5e:06:f9:
         dc:0e:7f:7d:53:a9:87:04:57:07:16:b3:36:0c:0c:da:2e:50:
         ca:b3:a2:6c:69:33:cb:90:f7:c8:40:83:3b:6d:f9:fd:e5:9c:
         4d:48:44:c7:30:8d:28:bd:3b:1e:39:4a:b2:3c:d6:ad:32:ea:
         79:43:37:69:07:2b:11:8f:eb:72:5a:cf:ed:6e:1f:9e:d7:b1:
         8c:2d:74:79:b3:b4:1a:d8:b1:49:86:40:c7:3b:af:28:fd:6b:
         bc:96:c1:1f:ae:15:0d:80:39:de:29:02:ef:3d:c5:4d:b3:2a:
         d8:f0:74:83:f5:d8:cc:5e:26:67:38:d7:f0:e1:74:48:7c:42:
         61:18:65:bc:ae:35:68:dc:39:01:f0:9b:6e:03:02:ea:cd:e4:
         89:7d:0e:28:8f:aa:e4:34:a1:67:42:63:dc:05:30:8f:19:3a:
         80:9c:cf:93:25:c6:98:9d:d1:4c:c7:77:39:12:b0:91:bd:25:
         c2:34:79:eb:d8:e5:3e:9a:4c:fd:e1:d4:65:82:81:4a:b6:cc:
         05:d1:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org