Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3234203d3e20323634353339.roa
File:                     3133382e302e32342e302f32322d3234203d3e20323634353339.roa (raw, json)
Hash identifier:          9RtDkk0v59sn/trd1P7WRpaebyJXDPlRv8y3c6LeoLU=
Subject key identifier:   9B:A1:D4:FD:AA:B4:2B:18:DE:73:DB:51:62:42:FC:55:59:BF:38:97
Certificate issuer:       /CN=01780849E0CC636806965BDF6474CF38ED0B88F7
Certificate serial:       1EB15FEF98BE20E86E4E0A2B19C1DBACF7C839FF
Authority key identifier: 01:78:08:49:E0:CC:63:68:06:96:5B:DF:64:74:CF:38:ED:0B:88:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01780849E0CC636806965BDF6474CF38ED0B88F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3234203d3e20323634353339.roa
Signing time:             Mon 12 Sep 2022 23:10:41 +0000
ROA not before:           Mon 12 Sep 2022 23:05:41 +0000
ROA not after:            Mon 11 Sep 2023 23:10:41 +0000
asID:                     264539
IP address blocks:        138.0.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b1:5f:ef:98:be:20:e8:6e:4e:0a:2b:19:c1:db:ac:f7:c8:39:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01780849E0CC636806965BDF6474CF38ED0B88F7
        Validity
            Not Before: Sep 12 23:05:41 2022 GMT
            Not After : Sep 11 23:10:41 2023 GMT
        Subject: CN=9BA1D4FDAAB42B18DE73DB516242FC5559BF3897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:8f:b0:2e:c7:76:a5:86:91:7d:7f:3c:39:
                    4a:ed:af:fe:9a:39:eb:f4:39:02:21:0c:82:36:dc:
                    ed:a2:89:72:e5:b5:ee:dd:c3:76:aa:8c:d3:0b:01:
                    c2:5c:5d:ea:b2:5f:5f:c2:4c:4c:7a:4e:76:f7:c0:
                    45:c6:55:57:5d:c7:d9:08:f9:76:90:20:4e:8d:5b:
                    46:7d:8d:4f:3e:23:4e:5c:c9:7f:ed:f3:85:70:ca:
                    11:68:55:5f:7c:24:60:5d:d3:19:aa:75:14:68:7c:
                    9c:de:8b:59:15:44:99:67:20:4b:2b:65:57:11:59:
                    bb:0d:c8:c2:cf:0b:ab:82:92:16:b8:3c:9f:53:ec:
                    9b:c2:42:bc:84:b8:8e:50:a3:4e:b4:44:fa:2d:d8:
                    b9:32:ea:eb:35:a3:ac:b2:df:91:28:4e:6e:5f:1e:
                    33:4a:13:de:5d:a3:bb:0a:4c:ad:b0:35:1c:71:ef:
                    6a:42:3a:61:a9:72:71:ec:c0:43:c5:fa:55:04:63:
                    a7:ea:7f:82:ae:f8:aa:ce:27:88:a0:75:61:96:48:
                    04:69:e4:68:3d:ab:6c:ae:0b:bd:82:ec:ad:9e:88:
                    ea:6d:4f:e2:04:ae:01:cd:99:4e:c5:0e:0f:c8:23:
                    3c:e2:18:c4:55:0c:64:b9:41:8f:32:1f:e0:c0:8f:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A1:D4:FD:AA:B4:2B:18:DE:73:DB:51:62:42:FC:55:59:BF:38:97
            X509v3 Authority Key Identifier:
                keyid:01:78:08:49:E0:CC:63:68:06:96:5B:DF:64:74:CF:38:ED:0B:88:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/01780849E0CC636806965BDF6474CF38ED0B88F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01780849E0CC636806965BDF6474CF38ED0B88F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3234203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:47:39:e2:86:04:56:98:7e:30:59:3d:fe:85:57:53:56:e7:
         12:49:47:33:f3:df:d9:0a:e5:82:2b:62:82:9f:e7:f8:6f:ba:
         4f:1f:ae:bb:f5:e4:da:20:64:fe:c4:83:f8:0d:f0:1a:76:6d:
         bd:6e:65:86:d5:0d:bd:fb:bd:c2:82:72:4a:24:a2:d1:a4:73:
         76:84:1f:d0:9f:13:8a:1a:b8:45:cd:50:20:0a:5c:37:df:52:
         09:5f:ec:32:82:06:8d:0d:cd:c6:61:40:e5:84:7f:d7:fb:58:
         d7:74:dc:22:f4:33:05:4b:97:fe:ea:cb:43:37:73:1e:75:a8:
         68:07:2b:a3:48:b6:17:52:2a:e1:ed:ed:74:53:66:8d:6a:3f:
         20:0d:61:dd:3e:e1:80:48:4a:c7:b0:b5:53:0c:d1:7f:33:1c:
         78:16:0a:23:3a:fd:82:98:0b:f9:65:84:d3:e0:d8:fd:d3:81:
         07:c9:36:f9:5e:63:00:c3:ee:8d:92:ad:bc:36:c6:9d:a8:01:
         37:02:4c:20:79:9c:da:3e:11:01:ea:38:d9:e8:31:b8:1a:90:
         2f:cb:8b:91:05:7c:6a:ee:43:ba:cf:ac:84:9c:42:f5:35:c1:
         b0:37:7f:d8:d3:08:08:08:78:15:99:8e:90:36:b8:d6:cb:f9:
         4d:90:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org