Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3234203d3e20323633383931.roa
File:                     3133382e3230342e34382e302f32322d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          J+Wqwfxdni0WRsQqX6zJC2ae4/hSVftOcQAvgGT63H4=
Subject key identifier:   A8:6D:01:3B:0E:82:2A:53:07:0C:C7:16:00:25:49:FF:3B:7E:D5:01
Certificate issuer:       /CN=AEEB7B0368F7E2A658EC4E02740A7CB24CBDA6E1
Certificate serial:       1D9F9B389A2853E21F6489B85781082BF656B748
Authority key identifier: AE:EB:7B:03:68:F7:E2:A6:58:EC:4E:02:74:0A:7C:B2:4C:BD:A6:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEEB7B0368F7E2A658EC4E02740A7CB24CBDA6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3234203d3e20323633383931.roa
Signing time:             Thu 29 Feb 2024 15:44:00 +0000
ROA not before:           Thu 29 Feb 2024 15:39:00 +0000
ROA not after:            Thu 27 Feb 2025 15:44:00 +0000
asID:                     263891
IP address blocks:        138.204.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9f:9b:38:9a:28:53:e2:1f:64:89:b8:57:81:08:2b:f6:56:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEB7B0368F7E2A658EC4E02740A7CB24CBDA6E1
        Validity
            Not Before: Feb 29 15:39:00 2024 GMT
            Not After : Feb 27 15:44:00 2025 GMT
        Subject: CN=3082010A0282010100AF29DB39CE8039D863F80A16A07D79539ABCE184D8880B22F2C2E9BA986842BF4C1A5D008236A063D77127978FB913847164A3CF93586160B5146E2486588C7554028E2D7D7C06E7349B0D82D84D10ABEF5AB6F478E6AEB787EC00E5C319B6D71131CD66AA0001FDD12E93A2782BA87DA4363884518633AB48D81F9436326CE55BCDDB02156E439793B6497E9FDD2084B1AA1499E6478AD13FC65183D4E5320E0B4063B3D3756E470438EC3D2D402263DEC6AF008BCD0793C8EE6CE0AE96EDEAA4911E4DE1608A47E9398E7CC1394E9196A6683630E06D426649389FE196E7A6AD8D8B8BEFCCCC28149246E8A676CA2E65A42B8937F9911871516465EBBCFE0F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:db:39:ce:80:39:d8:63:f8:0a:16:a0:7d:
                    79:53:9a:bc:e1:84:d8:88:0b:22:f2:c2:e9:ba:98:
                    68:42:bf:4c:1a:5d:00:82:36:a0:63:d7:71:27:97:
                    8f:b9:13:84:71:64:a3:cf:93:58:61:60:b5:14:6e:
                    24:86:58:8c:75:54:02:8e:2d:7d:7c:06:e7:34:9b:
                    0d:82:d8:4d:10:ab:ef:5a:b6:f4:78:e6:ae:b7:87:
                    ec:00:e5:c3:19:b6:d7:11:31:cd:66:aa:00:01:fd:
                    d1:2e:93:a2:78:2b:a8:7d:a4:36:38:84:51:86:33:
                    ab:48:d8:1f:94:36:32:6c:e5:5b:cd:db:02:15:6e:
                    43:97:93:b6:49:7e:9f:dd:20:84:b1:aa:14:99:e6:
                    47:8a:d1:3f:c6:51:83:d4:e5:32:0e:0b:40:63:b3:
                    d3:75:6e:47:04:38:ec:3d:2d:40:22:63:de:c6:af:
                    00:8b:cd:07:93:c8:ee:6c:e0:ae:96:ed:ea:a4:91:
                    1e:4d:e1:60:8a:47:e9:39:8e:7c:c1:39:4e:91:96:
                    a6:68:36:30:e0:6d:42:66:49:38:9f:e1:96:e7:a6:
                    ad:8d:8b:8b:ef:cc:cc:28:14:92:46:e8:a6:76:ca:
                    2e:65:a4:2b:89:37:f9:91:18:71:51:64:65:eb:bc:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6D:01:3B:0E:82:2A:53:07:0C:C7:16:00:25:49:FF:3B:7E:D5:01
            X509v3 Authority Key Identifier:
                keyid:AE:EB:7B:03:68:F7:E2:A6:58:EC:4E:02:74:0A:7C:B2:4C:BD:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/AEEB7B0368F7E2A658EC4E02740A7CB24CBDA6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEEB7B0368F7E2A658EC4E02740A7CB24CBDA6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ab:21:ee:32:4f:ab:67:3f:17:de:b9:f4:10:52:ba:77:15:
         89:fe:19:7e:f8:a2:e2:42:3d:df:fa:74:75:2d:6f:1c:12:1e:
         97:12:a0:5b:f2:4b:ff:b3:58:11:18:4a:60:3b:bd:0d:1f:b1:
         6a:00:e2:2e:0c:40:42:1f:40:9d:a5:b9:98:b9:a7:06:d1:e4:
         29:c4:eb:2a:b5:e1:b1:3a:ff:38:ec:fc:7d:e6:dd:50:2e:a6:
         fe:e7:96:42:a6:9a:34:46:39:ce:80:dc:1f:32:e9:71:d0:7a:
         5d:66:86:f9:c1:d3:43:b0:15:97:1e:d2:31:e0:7c:d1:2a:2d:
         e4:6f:a9:ea:f5:b7:e5:89:9b:51:a2:83:0e:6d:da:b7:ce:09:
         b6:8d:7a:c7:80:84:85:cb:83:7c:ef:63:99:56:bf:1c:40:70:
         48:8b:88:7f:78:d6:5c:a5:80:61:54:0c:ca:8d:a3:5b:82:76:
         a4:c8:9f:69:37:51:0e:68:e1:e4:cc:b9:ef:eb:45:d1:be:59:
         f6:ae:9a:da:2a:62:75:41:2b:1b:5b:f5:2a:1f:eb:da:7b:3e:
         ba:eb:9c:a6:37:f8:e6:82:c0:8b:18:31:43:d4:a5:fd:c0:bf:
         41:22:e2:b2:6e:ca:d4:65:86:cf:18:dc:5c:b6:b5:a6:55:c6:
         3e:91:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org