Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa
File:                     3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa (raw, json)
Hash identifier:          Zr6KEgE5PTatWa1N6gnBDCDbGKWlYnKuhmEOCVFbyrQ=
Subject key identifier:   60:18:33:C5:B7:EE:68:7F:7E:E0:0E:24:93:AA:8B:6A:37:82:74:3D
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       475468EE88BBBE83726E663A8DC97F73FDE1B5C8
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa
Signing time:             Mon 05 Feb 2024 14:00:00 +0000
ROA not before:           Mon 05 Feb 2024 13:55:00 +0000
ROA not after:            Mon 03 Feb 2025 14:00:00 +0000
asID:                     264332
IP address blocks:        138.185.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:68:ee:88:bb:be:83:72:6e:66:3a:8d:c9:7f:73:fd:e1:b5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Feb  5 13:55:00 2024 GMT
            Not After : Feb  3 14:00:00 2025 GMT
        Subject: CN=601833C5B7EE687F7EE00E2493AA8B6A3782743D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:98:59:76:e2:73:23:81:21:e6:83:78:54:
                    38:ee:13:e1:8d:bc:e3:7c:a0:39:85:75:c2:3c:42:
                    cb:04:d7:20:a2:b9:41:93:e9:80:55:4e:01:eb:14:
                    37:78:07:48:48:3e:11:e1:f9:1d:4e:7d:c2:b2:66:
                    c5:6b:ba:a9:c8:d8:83:ea:3e:7b:4d:c7:62:36:b0:
                    4f:4e:92:25:c6:3d:b8:20:65:c3:17:c2:19:29:3f:
                    13:b6:72:e9:3c:57:31:cd:a5:44:6f:fa:71:40:d5:
                    03:14:f6:71:c8:c4:f6:3f:c4:6c:62:8a:f7:bf:0e:
                    b0:51:aa:3d:c9:58:e7:7f:05:1d:a7:a1:47:8b:ce:
                    45:01:0c:89:a5:b4:e2:ba:1a:44:ee:8c:84:26:15:
                    92:4c:e0:e6:e2:da:e1:38:f3:d6:6e:02:85:3a:4b:
                    98:d2:e5:b1:37:8f:d7:b8:42:33:ed:c6:9f:d6:91:
                    63:0e:18:35:fe:e9:74:1c:ab:c8:8a:25:3e:5d:ac:
                    81:be:49:98:85:cc:92:d2:2d:3f:14:eb:91:fd:79:
                    97:92:b5:a8:22:9d:46:a8:e3:e8:e8:7c:1a:0a:93:
                    d2:f3:08:0e:be:ee:ca:7a:49:a6:7a:40:58:64:ee:
                    d7:da:d6:e8:76:82:65:bc:9f:9d:4e:ed:cf:2e:7c:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:18:33:C5:B7:EE:68:7F:7E:E0:0E:24:93:AA:8B:6A:37:82:74:3D
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:b5:04:55:5e:b4:a4:b5:05:e1:b9:dc:02:d6:11:98:f6:0a:
         dd:11:e7:c6:ca:af:d4:12:f7:15:ee:3e:ed:20:29:89:e4:7b:
         63:d5:37:e7:fe:cd:da:6d:1a:b2:da:92:47:f2:b3:63:4f:87:
         f4:fe:ac:29:69:ea:ac:4f:12:7e:d8:a3:b7:34:55:f6:46:9c:
         46:c1:dc:3f:22:33:9f:3c:f6:fa:ab:4f:8a:62:81:ed:84:30:
         0e:7f:8a:93:0a:92:a8:b2:69:cb:49:f5:21:df:3f:5f:55:4d:
         f0:00:b2:b2:09:26:0c:02:a1:aa:8b:f2:bd:bc:71:c0:c5:a2:
         f9:b0:6d:2a:77:33:46:18:9a:fc:a6:e2:1f:2a:7a:3b:b4:88:
         d7:c3:8f:b7:2e:13:a5:4c:0b:a2:f0:97:f9:3e:de:eb:f8:d0:
         54:54:91:02:9b:80:c1:58:58:30:9a:52:65:72:51:53:3f:e1:
         91:35:68:00:69:18:9a:bf:ef:17:69:6d:cc:f7:1a:37:0a:ea:
         a9:ba:3d:2a:f0:ed:29:7e:ad:df:0f:1d:62:17:96:35:0a:73:
         ba:29:1f:15:dd:15:c1:14:f0:5e:fc:68:e0:97:26:94:e3:fc:
         57:a4:f2:9b:f2:82:7b:1e:16:a5:e2:5c:00:2e:d5:3d:99:98:
         93:db:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org