Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133392e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          wFe6uwI4sma1oYbvk+V3brOh8Bt4MqZSsU6fTxVSq1w=
Subject key identifier:   59:7C:DE:17:D7:0A:DD:29:67:98:55:6C:9B:6D:A4:80:B7:8E:92:D7
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       0FD1B794C1A4BDDF1EE412780AF04D1C7C61EC64
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:19:24 +0000
ROA not before:           Wed 27 Mar 2024 21:14:24 +0000
ROA not after:            Wed 26 Mar 2025 21:19:24 +0000
asID:                     264550
IP address blocks:        138.0.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d1:b7:94:c1:a4:bd:df:1e:e4:12:78:0a:f0:4d:1c:7c:61:ec:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:14:24 2024 GMT
            Not After : Mar 26 21:19:24 2025 GMT
        Subject: CN=597CDE17D70ADD296798556C9B6DA480B78E92D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:04:83:88:a7:01:0a:45:4f:75:fd:14:81:
                    1f:79:40:ee:3f:4a:c6:60:31:bd:16:c0:ff:01:ba:
                    17:07:91:3d:e9:30:17:2e:d2:c0:0f:7d:1d:6d:02:
                    ba:74:26:f2:65:5b:45:49:57:75:80:31:cf:00:00:
                    c4:8b:0d:3c:02:ec:f2:96:38:db:6a:2f:87:ee:f8:
                    87:75:6b:c3:6d:31:65:30:2b:2c:65:71:5d:1c:9e:
                    52:86:40:a7:0c:96:4b:33:0b:00:7f:63:0d:b7:31:
                    87:b0:3a:64:ed:d6:e4:1e:5f:84:59:c9:44:fc:4e:
                    7f:a7:99:3f:38:af:2c:38:1b:15:28:46:40:10:d2:
                    41:93:88:c2:cc:e6:f7:55:14:2f:b3:81:7b:c2:bf:
                    63:28:be:38:a2:91:13:3e:1e:f4:a3:aa:dc:62:44:
                    84:5e:81:a7:9c:b2:59:0e:0b:1c:24:6c:ae:b0:b7:
                    a4:22:67:68:09:8d:26:81:ec:f2:96:7c:53:17:39:
                    c6:e5:3f:56:f7:b5:68:dd:e1:fc:79:d2:62:a2:93:
                    30:29:95:97:dc:e8:01:1f:66:20:f2:b4:fb:42:8a:
                    59:7c:a8:f8:77:a8:c9:dd:55:25:aa:d9:a7:90:b3:
                    c5:54:d8:1b:e0:18:1c:3e:59:e3:63:2f:b7:01:30:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:DE:17:D7:0A:DD:29:67:98:55:6C:9B:6D:A4:80:B7:8E:92:D7
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:c4:de:ce:fd:26:4d:cc:6a:2f:b7:4e:96:5c:e2:25:84:
         5a:45:af:18:dd:a8:9f:07:2a:0b:68:b9:92:01:b0:9a:18:5f:
         5b:b9:62:75:cd:21:30:a3:1f:0a:47:04:db:36:f9:02:76:70:
         c2:1b:49:76:99:d1:b8:be:1a:42:ac:84:29:e6:31:3a:4e:b3:
         c4:22:66:5a:21:6a:e6:41:44:0f:e9:ee:72:17:d7:ff:d1:63:
         4c:c8:24:bd:40:73:bd:8a:61:37:a4:30:c8:90:d9:f1:1b:1a:
         a3:a8:73:35:a7:1c:8f:d8:1e:73:e8:f6:32:b8:26:f3:16:27:
         fa:e7:f9:4d:d6:1c:64:b4:3a:34:7a:f5:fd:15:7c:47:35:8d:
         b5:7f:63:53:62:a5:01:6f:88:92:aa:0f:c5:fc:ca:3d:e5:4f:
         34:bb:e1:69:84:bc:43:0e:44:c3:95:8b:a0:a9:a6:0d:1a:38:
         f4:34:5f:d7:e0:91:67:47:08:b1:8f:72:22:7b:07:43:11:70:
         fb:01:b9:0d:cc:33:7e:16:73:bf:7a:ab:dd:77:2b:95:2b:a2:
         9f:ae:e7:b9:cc:f7:ef:16:e2:2f:c1:f8:95:a7:aa:13:ac:af:
         3a:6b:85:09:43:48:18:09:b9:4b:8f:6a:93:77:66:ce:28:eb:
         05:b2:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org