Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
File:                     3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          ZLaC/xTq87H/w4f3cCTZAKE2/r6yNklfg+IHwyNxj8s=
Subject key identifier:   12:FF:65:84:4F:63:B5:33:F4:92:B8:D6:AC:C7:A4:37:66:06:D2:8D
Certificate issuer:       /CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
Certificate serial:       15429A0626DF2C97250F0B4C28CB8D4F96D03135
Authority key identifier: 50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
Signing time:             Thu 05 Oct 2023 01:37:59 +0000
ROA not before:           Thu 05 Oct 2023 01:32:59 +0000
ROA not after:            Thu 03 Oct 2024 01:37:59 +0000
asID:                     264367
IP address blocks:        138.185.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:42:9a:06:26:df:2c:97:25:0f:0b:4c:28:cb:8d:4f:96:d0:31:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Validity
            Not Before: Oct  5 01:32:59 2023 GMT
            Not After : Oct  3 01:37:59 2024 GMT
        Subject: CN=12FF65844F63B533F492B8D6ACC7A4376606D28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f9:28:d3:21:d2:1f:8d:68:4c:1f:c6:af:35:
                    c0:78:bc:dd:fb:4c:67:9f:a9:08:35:8b:70:4b:5e:
                    4c:a2:13:f8:49:01:7a:d6:49:67:45:f2:c9:5d:ed:
                    51:8d:51:ec:6f:57:0c:5f:f8:f7:5e:03:92:7d:a4:
                    59:d1:b3:2b:f8:22:ca:46:f5:e3:38:05:dd:0e:26:
                    b8:fe:8e:37:14:31:fb:5f:db:af:7f:ae:7a:e2:74:
                    19:45:9b:8a:2d:e4:7e:0f:6b:08:3f:4a:01:1c:d9:
                    4c:44:2e:10:22:8e:0b:3c:80:cd:f5:b7:ae:b0:91:
                    39:a1:1f:0b:81:2a:56:8a:4e:f7:ba:ef:cb:e5:c4:
                    e1:e0:c5:db:d7:60:91:14:71:9f:73:a6:52:ae:df:
                    e6:fc:de:ee:c8:aa:89:7a:ee:05:47:d4:26:e6:f2:
                    06:ef:ed:6e:4d:89:8c:bf:9e:8a:e4:be:b1:fa:56:
                    35:f9:67:44:a5:9c:cd:97:3c:9d:a6:91:21:b2:7c:
                    c0:42:bc:d5:8d:bb:b4:c3:71:50:a4:1e:aa:78:69:
                    7c:fb:f5:ca:bd:20:7f:ff:3e:95:cf:e8:15:4c:1e:
                    37:dc:e8:53:b5:26:6d:ac:b1:e3:63:8b:61:a2:fe:
                    98:46:b5:4d:58:a2:51:9b:25:24:bf:e0:d6:e8:f6:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:65:84:4F:63:B5:33:F4:92:B8:D6:AC:C7:A4:37:66:06:D2:8D
            X509v3 Authority Key Identifier:
                keyid:50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:e4:cd:c5:7e:aa:eb:81:07:2e:cc:50:1e:c4:4f:21:12:
         d1:c0:0d:1b:1a:53:30:c6:83:35:93:ae:da:84:d3:d5:96:bd:
         6b:1a:26:bb:82:c3:35:2f:dc:1b:57:bd:4f:7d:72:f9:3a:26:
         9d:1d:0c:f9:fe:5e:9c:6b:41:a5:01:3d:6b:49:0f:5a:18:41:
         2a:89:3a:32:2e:d3:1d:4b:e8:e8:58:ad:3a:30:c3:af:5d:04:
         3a:c7:dd:02:35:43:62:6e:02:6a:84:74:60:db:cf:7e:b4:0b:
         c0:1c:de:5f:49:3e:a1:76:d7:b9:86:94:33:1c:d6:74:fe:3c:
         01:ff:d7:c8:e5:3e:1c:f0:11:5f:6e:7a:a6:13:87:33:9f:5c:
         f0:e0:20:40:55:22:de:3c:87:25:9e:23:27:67:38:cc:f7:3e:
         cb:bc:69:08:d8:05:ff:54:06:b9:c2:23:92:f6:e3:9f:d6:5b:
         76:ed:5e:a3:a6:50:dd:9f:8e:df:6d:a7:a9:ec:29:d8:9c:3b:
         df:f6:db:62:d5:99:ee:50:5e:f2:ed:6f:51:61:87:eb:5e:dd:
         7a:a0:fa:7c:d4:4b:28:b8:12:4d:6a:bc:de:ca:5c:85:47:e5:
         38:6d:f8:53:c8:c3:f0:aa:27:35:7a:cb:a4:49:5c:67:37:74:
         0a:69:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org