Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3332203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32342d3332203d3e20323634353530.roa (raw, json)
Hash identifier:          lx1rEJueBT2n8HqHEFs/wcBvoLQqcLq7oKCUIuHwco4=
Subject key identifier:   73:02:EF:6D:7D:81:EC:11:70:15:34:91:D6:70:EA:6A:A4:C9:2C:53
Certificate issuer:       /CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
Certificate serial:       416DCD1C28F9FF76708DD3A59BA66C1834A772C5
Authority key identifier: E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3332203d3e20323634353530.roa
Signing time:             Sat 26 Aug 2023 20:58:21 +0000
ROA not before:           Sat 26 Aug 2023 20:53:21 +0000
ROA not after:            Sat 24 Aug 2024 20:58:21 +0000
asID:                     264550
IP address blocks:        138.0.138.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6d:cd:1c:28:f9:ff:76:70:8d:d3:a5:9b:a6:6c:18:34:a7:72:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7
        Validity
            Not Before: Aug 26 20:53:21 2023 GMT
            Not After : Aug 24 20:58:21 2024 GMT
        Subject: CN=7302EF6D7D81EC1170153491D670EA6AA4C92C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:f6:14:4f:ae:ab:11:33:44:b4:51:ea:96:
                    a5:ec:a8:e9:db:dd:38:71:d3:4c:d4:89:46:5e:d4:
                    03:1f:fd:34:b9:f5:f3:3f:8f:80:20:b0:c0:0a:d5:
                    75:45:99:53:b3:9d:8c:e1:d5:f8:1b:ae:b0:49:20:
                    8a:04:28:6d:29:b6:a3:86:af:5a:ca:27:6a:03:48:
                    28:0a:c0:6b:8c:19:c0:a1:96:46:35:23:0b:5b:eb:
                    2f:9f:66:a4:2a:38:dc:28:0a:e1:ea:32:f5:18:e2:
                    a5:ba:9f:ef:04:bb:0e:d7:67:72:01:87:cf:c3:da:
                    5b:57:5d:26:e9:90:b1:71:fa:6d:50:99:49:55:72:
                    5a:29:c7:f5:77:75:7d:f2:df:08:a0:92:b9:a7:e9:
                    de:4a:62:1d:e0:c5:08:a5:84:97:b7:a7:08:37:51:
                    f3:99:d9:e8:23:12:b8:3b:77:a6:0d:ac:de:a8:50:
                    36:bd:fc:55:cc:2f:11:9e:e8:60:6c:01:ad:d2:6d:
                    97:f7:ac:1d:85:ee:c2:9c:c3:91:11:d0:6e:77:a6:
                    da:f1:e9:cb:e7:16:f0:3f:94:fc:9f:1b:e1:2a:f0:
                    51:9d:24:a0:b3:3a:d4:91:d2:17:4f:90:0a:72:08:
                    c7:af:b6:34:b6:b9:f0:33:2e:77:bf:ae:e2:de:17:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:EF:6D:7D:81:EC:11:70:15:34:91:D6:70:EA:6A:A4:C9:2C:53
            X509v3 Authority Key Identifier:
                keyid:E6:B9:A7:01:BE:3F:6A:23:53:E6:C5:36:B8:1E:FF:25:20:AB:61:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6B9A701BE3F6A2353E6C536B81EFF2520AB61A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3332203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:60:c9:ec:90:c8:c8:2e:85:14:66:91:77:2b:63:ae:9a:
         04:f0:91:10:68:34:1f:44:8d:e5:e6:87:61:c2:80:7d:8c:89:
         80:1f:78:84:c0:8e:b5:c1:f5:d7:12:62:ce:e4:1e:78:0a:80:
         f0:cd:09:fb:fd:9f:dc:b1:0a:cd:f3:09:eb:4b:34:42:11:42:
         18:73:fc:80:d6:79:a5:8e:de:b5:38:6a:07:21:44:20:9e:21:
         62:5b:95:4b:7b:ff:12:9d:77:a9:91:db:09:06:11:41:3c:e8:
         e2:60:74:1c:ee:b1:a5:ba:f5:93:98:2c:99:ad:b3:57:ad:61:
         fc:7b:e1:80:d0:9d:22:40:fb:fc:36:24:08:cd:c5:64:8c:0b:
         e8:91:e4:f5:e7:1a:c7:0b:37:59:14:52:d6:e6:90:f8:53:96:
         3b:41:22:64:39:78:af:e6:d4:2e:ec:b8:c2:8f:bf:e5:4d:56:
         0e:7c:64:93:af:0e:18:a9:a4:98:9f:02:b6:2d:ca:a9:30:42:
         1d:ce:a9:ca:6c:53:50:48:fb:92:6c:2b:54:01:7e:76:ab:ef:
         e6:b4:f2:e7:fd:e8:81:d6:43:3d:9a:18:c4:be:95:3d:40:49:
         09:01:c4:34:98:6c:fb:3e:5d:cd:64:88:a4:d6:cc:47:88:16:
         f6:3d:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org