Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          HpRaGuN0gBkut9YdeQC1xkUkq9ZZLzk8LDmMEMx/Dm4=
Subject key identifier:   75:49:01:1A:2B:A0:B5:26:B0:FB:6B:8F:89:BB:F1:96:20:AB:AD:86
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       2C26DA5D71D71134F8E132713F8D30441476C2E8
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:21:20 +0000
ROA not before:           Wed 27 Mar 2024 21:16:20 +0000
ROA not after:            Wed 26 Mar 2025 21:21:20 +0000
asID:                     264550
IP address blocks:        138.0.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:26:da:5d:71:d7:11:34:f8:e1:32:71:3f:8d:30:44:14:76:c2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:16:20 2024 GMT
            Not After : Mar 26 21:21:20 2025 GMT
        Subject: CN=7549011A2BA0B526B0FB6B8F89BBF19620ABAD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:0f:ab:f5:73:87:56:0e:97:c7:c6:6a:f4:
                    95:ab:5d:0d:33:16:e5:b1:af:27:c7:05:87:e5:da:
                    b7:57:c2:15:83:1d:81:e8:ca:b8:57:bd:82:32:7c:
                    86:16:18:d8:ac:7f:ea:fe:61:1b:c5:5e:dd:49:c5:
                    35:7c:fc:ea:fb:b8:24:c7:da:b4:e3:cf:04:70:79:
                    a0:2f:c6:6f:f6:cf:61:b2:b1:a5:cb:e2:fb:2c:5f:
                    84:b1:61:67:9d:bf:69:3a:41:35:29:67:2c:1c:d8:
                    bf:b0:cf:34:f1:61:e2:09:9f:ad:12:6d:c8:87:33:
                    1c:b0:4e:ed:c2:0d:d9:aa:6a:1d:86:0d:b2:35:bb:
                    78:6a:3d:78:c0:9c:2f:f7:4a:6f:f5:70:c5:80:97:
                    aa:b4:01:84:48:5e:84:83:d0:f8:e9:a4:ed:5c:47:
                    45:f8:36:3d:dd:09:63:db:9f:5b:ee:8b:86:a0:aa:
                    a2:e3:96:21:62:46:85:de:08:a5:5a:d0:2d:8d:d7:
                    5e:02:91:d4:fe:e8:3f:17:4c:2f:8c:2c:89:3c:9a:
                    0e:a7:f7:32:a1:f9:b4:a9:b5:6f:26:26:41:a7:fc:
                    bd:80:c1:25:d0:11:71:ef:c0:f1:56:27:52:0d:45:
                    ff:14:42:99:77:f3:7f:3e:b1:b9:91:2e:eb:18:7b:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:01:1A:2B:A0:B5:26:B0:FB:6B:8F:89:BB:F1:96:20:AB:AD:86
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:2f:d3:86:ba:63:86:46:0b:95:97:96:31:dc:9d:c6:fa:6e:
         cc:66:a5:ee:b3:78:83:02:5d:b4:95:ee:40:25:97:20:1f:0c:
         a9:f4:89:95:9f:b5:e6:95:0b:5a:2c:8b:31:12:74:0f:e3:e1:
         06:74:85:5a:a3:92:a2:f1:16:a9:e4:48:60:9a:d0:a9:d2:87:
         d1:cb:6e:a7:04:b4:68:60:77:dc:3f:54:04:a5:5a:b9:54:91:
         c0:45:ce:e7:c0:15:80:ac:c4:dd:17:95:cf:ff:d9:d1:29:86:
         68:84:4e:0c:ee:5f:44:76:1f:db:40:8a:21:6c:49:7e:3f:6b:
         23:a4:5c:86:ae:d0:cb:66:fb:1e:c5:2e:2e:e1:b2:a7:1f:32:
         69:ca:bb:8d:0c:53:86:a7:84:e0:01:fa:6b:32:30:ab:2a:75:
         9b:84:0a:f4:42:b7:de:3c:17:92:79:1b:36:9f:dc:e3:9d:08:
         33:f3:06:66:c0:0f:8f:0e:6e:c0:98:65:84:90:f2:1d:3f:a9:
         ff:bc:0b:63:9a:f8:2a:99:24:b3:a7:34:83:12:58:c1:e1:9c:
         fe:13:a4:14:2e:32:26:36:87:f1:04:ed:ab:bd:bf:1a:f3:78:
         be:02:b7:70:2d:a0:27:32:24:6c:28:c9:49:85:85:39:e3:c1:
         ee:e8:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org