Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          yIDiO04viyxDSzWEoI4fJhW0SbOiGtObecqMFqYOBJ8=
Subject key identifier:   53:CF:74:BA:EB:3B:2E:B2:D5:21:97:9D:9E:7C:C8:C5:4F:C8:15:E9
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       0D99772BDDEEA7AEB91A7CCC3A312F9027765A1E
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:19:11 +0000
ROA not before:           Wed 27 Mar 2024 21:14:11 +0000
ROA not after:            Wed 26 Mar 2025 21:19:11 +0000
asID:                     264550
IP address blocks:        138.0.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:99:77:2b:dd:ee:a7:ae:b9:1a:7c:cc:3a:31:2f:90:27:76:5a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:14:11 2024 GMT
            Not After : Mar 26 21:19:11 2025 GMT
        Subject: CN=53CF74BAEB3B2EB2D521979D9E7CC8C54FC815E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:db:27:34:f3:42:a5:99:ad:23:1a:6f:2a:
                    b9:ef:6c:15:80:09:f8:4f:f0:96:d4:16:b4:3a:e4:
                    84:3a:2d:05:17:27:42:63:89:3a:33:e4:9d:c2:67:
                    e3:f7:27:4d:3f:94:f5:b5:0f:36:02:44:97:8e:99:
                    a2:f0:42:1a:58:ec:2b:a4:32:aa:08:6a:97:31:2f:
                    ad:7c:55:e8:7f:85:ec:2e:49:67:c4:07:88:2b:db:
                    1c:86:6b:1f:fc:29:d5:5e:8d:8b:70:19:09:17:c9:
                    6a:95:3a:bf:70:01:c2:52:65:6e:58:cc:7a:1c:98:
                    0e:25:80:72:1b:12:97:7c:81:97:b4:b3:8b:c0:17:
                    da:c4:b5:b3:c3:60:f5:69:84:67:6d:60:6a:d3:c4:
                    39:40:a0:46:50:2c:87:9b:13:cb:51:2d:84:13:58:
                    4c:00:be:12:70:84:65:3e:18:85:45:12:50:89:a6:
                    c5:5a:6a:de:2b:51:3f:fb:44:9b:b1:48:47:8b:f2:
                    f4:9f:c1:d5:c8:35:1f:0a:aa:95:42:16:52:94:61:
                    bb:c8:f4:5b:7c:04:e9:62:d6:8c:c0:9c:b6:f3:c8:
                    c0:d5:3b:7b:2b:12:90:9e:7e:41:bb:f6:23:ae:22:
                    bd:a5:5f:7b:48:7e:d7:82:22:1c:76:74:6e:9e:52:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CF:74:BA:EB:3B:2E:B2:D5:21:97:9D:9E:7C:C8:C5:4F:C8:15:E9
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ac:f1:14:07:9e:44:12:3c:3d:23:9c:69:1b:7f:46:1d:98:
         6a:8f:8a:30:d0:82:16:f4:0e:1b:2b:97:36:3a:a2:88:0f:4c:
         91:45:b4:f7:66:49:c3:2c:34:b1:c2:32:16:6a:c9:46:16:d0:
         0a:cb:a0:95:65:e9:dd:f5:d0:bf:77:84:8e:14:74:32:66:7e:
         82:26:5e:d9:22:2a:bb:e0:bf:58:9d:3d:9d:ba:b7:a3:5d:ca:
         dd:da:b3:b0:f9:62:1f:5d:73:f4:9f:15:43:79:eb:4c:9a:cd:
         3e:10:44:b4:8d:3f:be:72:a9:9b:9f:bf:e6:85:8a:a2:e3:72:
         33:ff:2f:3f:97:67:17:e4:32:c3:94:97:99:f3:37:4c:69:ad:
         cc:b4:df:3c:3b:f9:27:9c:cf:16:c4:12:77:b0:65:27:dd:6f:
         56:2d:68:29:90:e7:83:7b:6a:49:53:79:86:b3:c6:dd:18:61:
         c1:9a:0b:b3:3e:bc:dc:20:29:2a:a6:5b:3c:08:ed:50:db:5f:
         a2:62:30:3c:de:99:39:8a:d4:eb:4c:1c:65:2d:55:df:a9:fa:
         f8:30:e0:15:41:c5:b1:c5:3f:4f:ec:e6:9a:57:2d:66:a5:aa:
         8b:7a:4f:6f:3d:1a:d9:b7:b8:07:67:89:5a:45:19:5c:d4:75:
         30:dc:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org