Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e372e302f32342d3234203d3e20323634353237.roa
File:                     3133382e302e372e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          +0AZ0IDa+yuKafR38ccWz3Ue7Bx4UFzxi3uJX/jBw0Y=
Subject key identifier:   F9:3C:29:34:4E:21:04:75:D8:CF:59:B5:34:1D:CB:70:5B:6B:77:AD
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       1E287B8512344B5E80F9883DB86BE1BDAB4C2975
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e372e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:00 +0000
ROA not before:           Wed 29 Nov 2023 11:55:00 +0000
ROA not after:            Wed 27 Nov 2024 12:00:00 +0000
asID:                     264527
IP address blocks:        138.0.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:28:7b:85:12:34:4b:5e:80:f9:88:3d:b8:6b:e1:bd:ab:4c:29:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:00 2023 GMT
            Not After : Nov 27 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:27:c0:36:b3:0f:95:4e:9b:af:88:04:e0:e3:
                    17:30:5c:1c:7c:28:b5:42:8b:52:f2:3b:1d:f9:48:
                    39:54:cd:e7:6c:3a:6f:2f:04:25:be:e9:12:5c:f1:
                    41:10:e7:be:ad:c9:b9:5a:d9:0a:63:0e:73:34:c5:
                    ef:5f:bb:6f:25:0f:59:79:44:b8:f1:1f:e1:46:ea:
                    a0:f7:86:ad:52:c0:91:cf:54:1c:63:27:e2:a1:2d:
                    06:b2:8a:77:8b:38:d7:11:a7:15:d5:6e:cc:05:e3:
                    c8:2b:fc:f6:5b:8a:66:b0:d6:11:5a:34:05:53:c4:
                    0a:ca:8a:f3:90:27:a4:69:2c:fa:c9:4e:ab:6d:c9:
                    aa:c8:db:33:6d:15:6f:dc:d2:29:cc:44:dc:72:49:
                    f4:eb:f8:65:91:9f:62:c8:16:ed:88:36:5a:20:f3:
                    ec:24:b2:f7:a5:6f:21:38:ff:49:a0:4a:05:b8:e8:
                    c5:e2:f6:ce:47:16:e6:22:8a:9e:19:b4:08:de:07:
                    fc:2d:e4:6d:8d:48:ab:d2:00:ac:ac:a9:6d:0e:ee:
                    89:7b:33:40:dc:e5:2f:2a:56:49:82:28:12:00:20:
                    59:28:4e:62:39:d9:f5:be:3a:4b:a2:95:a2:11:ee:
                    c6:3f:7b:f6:d8:64:b8:7e:f5:7b:d0:8a:8b:e3:a3:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:29:34:4E:21:04:75:D8:CF:59:B5:34:1D:CB:70:5B:6B:77:AD
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e372e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:40:b6:b0:4d:1d:ef:54:18:b4:63:c3:6f:06:b4:fd:fb:
         89:5e:6c:79:21:a2:21:e8:fd:d8:52:e8:f4:59:42:61:3d:5b:
         a6:88:cf:40:fc:62:5b:60:72:ce:3b:b7:21:5d:d9:da:45:38:
         05:4d:bb:1b:46:6a:db:83:db:ff:53:2b:04:64:c3:a6:03:dd:
         76:87:4e:3e:c4:74:6b:00:5d:25:b6:2f:ab:ab:bd:bd:20:ac:
         13:f9:73:23:5e:9f:07:ff:b5:35:41:45:90:d1:3b:31:40:65:
         e2:a1:ae:e1:f8:eb:72:5f:d5:5b:2f:1e:8c:b0:ae:c1:16:cb:
         cb:0f:b5:f5:58:da:93:c5:2c:fb:33:10:91:7d:3e:fc:3a:29:
         cc:31:df:f7:e0:3d:25:39:2a:f8:73:a5:0e:f5:f2:43:4f:5d:
         35:54:32:ea:df:7b:b3:3a:d2:f0:00:18:ba:70:2e:2b:50:6c:
         43:1d:ce:3e:c4:6b:cb:5f:aa:2c:28:9c:97:d5:be:b6:57:81:
         de:7d:a5:1c:78:ad:c9:00:8c:19:07:35:19:fa:5b:96:b0:79:
         63:c0:9d:f5:5b:03:d9:fe:a5:a1:a0:a5:a9:db:f9:e7:21:37:
         88:03:73:e5:29:2f:43:e3:f9:8e:1b:97:34:95:a2:f4:97:1d:
         6a:63:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org