Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa
File:                     3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa (raw, json)
Hash identifier:          wt+jeR0MfFGGYTnkDiE1Jdgk/Hgh/lUMzr4BdW4XvAY=
Subject key identifier:   BA:1B:92:24:D5:AB:0F:A2:8B:F8:83:94:14:C9:7A:F5:28:B0:0A:24
Certificate issuer:       /CN=EF8A59B19C1985F636BF3722F71EFE157CB13D39
Certificate serial:       2CCC352C1776E37E832D0BC3D116FB5009CDB769
Authority key identifier: EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa
Signing time:             Thu 19 Oct 2023 09:11:16 +0000
ROA not before:           Thu 19 Oct 2023 09:06:16 +0000
ROA not after:            Thu 17 Oct 2024 09:11:16 +0000
asID:                     28638
IP address blocks:        138.118.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:35:2c:17:76:e3:7e:83:2d:0b:c3:d1:16:fb:50:09:cd:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8A59B19C1985F636BF3722F71EFE157CB13D39
        Validity
            Not Before: Oct 19 09:06:16 2023 GMT
            Not After : Oct 17 09:11:16 2024 GMT
        Subject: CN=BA1B9224D5AB0FA28BF8839414C97AF528B00A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:36:aa:9e:a2:9d:f9:38:6b:78:17:d1:3d:
                    47:4e:df:05:e9:be:e7:b3:58:d2:62:20:79:17:bc:
                    b7:7d:9d:77:86:04:27:0c:85:77:06:e0:76:7c:10:
                    09:43:9d:f9:34:64:e5:a9:ca:fd:2f:15:41:cc:ed:
                    69:91:b7:97:a2:07:4d:dc:d1:dc:61:e3:6d:16:41:
                    d6:1f:f0:7f:39:b5:cd:16:05:9f:56:f2:b1:ae:fd:
                    c8:f7:ab:27:32:1f:e7:1f:34:3a:25:91:4b:2a:6b:
                    d6:be:ff:7a:90:ec:63:ee:da:6b:ec:88:1d:e5:0b:
                    8f:c9:f2:bf:35:a4:73:f1:54:49:ee:c2:60:bd:3e:
                    46:6a:b5:a3:8a:8c:e6:c8:d4:f1:f1:e6:11:44:69:
                    66:51:fa:0f:7d:e7:63:37:e3:67:32:38:fc:98:d1:
                    57:68:8e:53:18:0b:69:66:68:3f:61:55:ae:35:4f:
                    df:c3:c5:c5:9f:22:3f:00:26:39:2f:dc:f1:ad:5e:
                    9b:52:aa:88:f6:7d:11:0c:01:57:c5:7c:eb:8e:b3:
                    47:1b:af:44:a3:e9:f8:bd:60:a3:16:bf:42:48:df:
                    a3:8a:fc:4e:6b:db:32:b4:ec:1a:55:ed:29:17:71:
                    c1:66:c3:3f:62:45:cd:dd:36:24:08:d9:42:4f:53:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:92:24:D5:AB:0F:A2:8B:F8:83:94:14:C9:7A:F5:28:B0:0A:24
            X509v3 Authority Key Identifier:
                keyid:EF:8A:59:B1:9C:19:85:F6:36:BF:37:22:F7:1E:FE:15:7C:B1:3D:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF8A59B19C1985F636BF3722F71EFE157CB13D39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/0/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:ba:96:a5:1e:3e:d0:b9:53:fb:b7:bc:2f:43:50:a7:eb:
         f4:2a:ac:88:b5:82:c5:de:4d:10:ba:49:f9:70:f7:12:1f:93:
         aa:8e:1e:77:14:ed:e6:ed:82:8e:f0:4f:75:fe:eb:53:bb:76:
         b4:cf:c2:6a:4f:5a:08:9b:45:73:9a:d6:83:f2:0d:b5:79:cc:
         0a:db:ba:7d:b8:7b:68:41:1a:07:6a:4a:7e:c3:cc:75:de:34:
         a7:f9:70:ab:96:61:71:87:62:3b:d3:69:78:eb:54:5a:7f:8f:
         fd:6a:dd:1f:72:8e:1e:3f:84:5f:3b:62:51:74:b1:bc:cb:b1:
         50:bf:8a:ab:14:63:a0:60:b1:54:7a:44:c5:80:ca:54:7f:13:
         5b:34:70:98:83:ca:a3:df:60:75:c0:43:93:5a:88:cf:77:e4:
         8a:6d:b6:82:3d:b4:94:85:d8:c5:2d:46:53:8c:be:68:2d:e8:
         44:77:58:11:53:b0:fa:4b:4a:da:a0:6f:f6:33:ec:c0:af:60:
         fb:a3:0b:a8:51:f6:5e:08:39:be:fd:bc:b0:2e:78:90:e8:00:
         ea:a7:7b:ba:1d:81:5e:82:fc:58:28:04:39:45:31:75:77:7a:
         65:f6:a9:c2:55:88:b4:3d:1a:43:57:01:87:f7:f2:81:ec:98:
         67:fb:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org