Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (raw, json)
Hash identifier:          V7ZKTAhz0wQtaRWNOMVYBhpEVSGMPpPzSB2I7Fz0eQ8=
Subject key identifier:   53:5A:E0:FA:A9:3C:76:B4:96:7E:D4:CC:77:29:60:3D:2D:45:84:D7
Certificate issuer:       /CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
Certificate serial:       79E53BB7573F61377E03C811EBEE29866D92A1F2
Authority key identifier: 0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
Signing time:             Thu 29 Jun 2023 17:15:11 +0000
ROA not before:           Thu 29 Jun 2023 17:10:11 +0000
ROA not after:            Thu 27 Jun 2024 17:15:11 +0000
asID:                     270876
IP address blocks:        138.94.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e5:3b:b7:57:3f:61:37:7e:03:c8:11:eb:ee:29:86:6d:92:a1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
        Validity
            Not Before: Jun 29 17:10:11 2023 GMT
            Not After : Jun 27 17:15:11 2024 GMT
        Subject: CN=535AE0FAA93C76B4967ED4CC7729603D2D4584D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:56:75:27:b9:a7:84:59:ca:5e:a6:93:e4:
                    1e:bc:62:fa:4c:68:5a:d6:88:cf:ed:16:87:42:da:
                    7f:1c:11:8c:53:28:57:02:df:04:a8:c6:63:fc:92:
                    66:bd:e4:b5:87:e3:fd:fc:5b:a2:4c:96:26:20:f9:
                    64:e2:fe:c6:96:3e:bb:2b:9f:33:53:6b:76:92:cd:
                    42:5a:f8:f5:c3:e9:b7:86:29:ab:0f:42:aa:29:a5:
                    1c:8f:93:d8:fd:ea:e9:9a:e5:3c:58:e8:2c:d7:30:
                    75:cf:15:14:a5:54:3a:d7:dd:6a:e1:c8:c0:61:27:
                    d4:45:8e:b5:52:d8:38:61:34:12:9f:a4:ee:98:f4:
                    40:df:ed:14:e9:c7:ce:1b:93:6b:9c:6a:ba:a8:73:
                    91:79:96:a9:c9:fd:67:72:9d:69:db:18:4b:eb:2f:
                    41:a1:10:8d:9e:e3:d1:0b:0f:c9:bb:91:13:b4:ae:
                    8c:1b:30:7f:75:81:87:d1:d0:47:1c:9c:f6:85:67:
                    c0:ad:9c:47:a4:91:29:df:27:95:97:7b:2e:5d:f9:
                    83:0b:e0:a2:46:e2:1b:29:da:39:bc:a5:74:78:ba:
                    5f:f3:64:2e:f5:a8:a9:37:d5:86:1b:35:f0:3a:f2:
                    5f:26:82:56:52:d9:3f:f1:30:57:6a:a0:da:6c:f2:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5A:E0:FA:A9:3C:76:B4:96:7E:D4:CC:77:29:60:3D:2D:45:84:D7
            X509v3 Authority Key Identifier:
                keyid:0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:e4:a7:82:bd:c2:6d:19:22:e7:35:a4:ae:54:9b:10:53:
         ed:dc:fa:64:81:62:9d:d9:52:07:a0:03:80:f2:46:1a:90:7d:
         2d:07:8b:be:e7:57:76:64:82:3f:61:6e:30:e7:79:6d:5f:cf:
         e4:06:a7:a7:da:6f:76:df:f3:a2:c0:f4:8a:cc:b6:63:6f:60:
         d5:5e:ec:b4:15:fd:99:54:b8:8d:fd:fb:b0:fb:ed:09:7c:e9:
         b3:7e:de:86:9e:62:79:c4:71:a8:95:02:57:79:6b:c2:43:ec:
         2e:04:91:9e:20:2d:7a:82:5f:ba:7d:16:24:d5:5c:dd:8d:32:
         a7:fe:25:df:a5:83:26:a7:71:5b:8a:3f:9e:c2:e9:bc:9d:c9:
         11:90:8d:45:0d:5c:64:14:a0:51:36:d5:95:b6:18:3e:a1:77:
         6c:dc:ba:57:e2:59:0c:fe:47:2b:91:fa:c6:07:5e:36:d8:1f:
         ac:74:5b:25:de:12:88:53:11:f8:b0:33:b4:7b:e0:e5:9e:99:
         b4:eb:84:e2:1d:2f:42:c5:92:3a:77:15:fd:72:73:82:41:c1:
         ae:56:47:92:de:38:33:84:5b:45:27:b3:1a:4b:ec:41:fa:ef:
         ca:e2:96:27:99:a2:11:8d:db:dc:50:9e:53:63:47:f9:32:0d:
         75:b3:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org