Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa (raw, json)
Hash identifier:          cQd2JgU3cLSJ98l0BZK2GQ+jlhlvfBVNPrxT48p72QE=
Subject key identifier:   B5:26:7E:22:DF:0A:C3:AD:BB:4E:1B:7C:F7:13:77:E8:55:74:E6:11
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       25A9F14DB4ED15EDECEEAB58D7E4176145E64622
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:19 +0000
ROA not before:           Wed 20 Mar 2024 18:52:19 +0000
ROA not after:            Wed 19 Mar 2025 18:57:19 +0000
asID:                     263989
IP address blocks:        138.255.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a9:f1:4d:b4:ed:15:ed:ec:ee:ab:58:d7:e4:17:61:45:e6:46:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:19 2024 GMT
            Not After : Mar 19 18:57:19 2025 GMT
        Subject: CN=B5267E22DF0AC3ADBB4E1B7CF71377E85574E611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:89:3b:8d:7b:67:02:f8:24:ad:d5:46:d9:
                    fc:99:8a:45:a4:ca:7a:14:2f:1f:e0:10:0c:9e:d2:
                    6d:06:1a:b2:f8:76:05:17:2b:f4:f1:04:75:7f:a6:
                    51:aa:e9:01:66:ad:95:6c:3d:65:c5:64:78:7d:ca:
                    da:7d:46:f6:10:ee:69:fc:26:e1:d2:36:6f:d1:c1:
                    bf:69:22:91:33:4c:25:25:4c:f3:47:7b:c6:b5:28:
                    05:33:9e:aa:c8:42:d3:a3:5e:95:f7:0d:44:f7:7c:
                    f4:66:e6:6c:7c:41:ca:b2:57:06:16:5c:70:b5:2f:
                    74:89:e6:e4:8e:8d:8c:c5:92:eb:50:0b:8b:23:e5:
                    bb:3e:bb:22:e6:17:63:da:b7:2e:8b:7f:8a:5b:47:
                    1e:70:f0:88:18:ee:40:95:52:5e:da:e3:f0:c0:ce:
                    20:17:81:05:2e:fd:7a:f8:e6:f6:42:4e:1a:3e:f3:
                    37:aa:8d:93:37:99:1b:52:12:78:f7:eb:26:0c:28:
                    7f:f3:d5:bd:1e:ba:a3:42:0c:28:1d:ab:e5:43:7f:
                    77:a5:34:ef:1e:f7:d5:cb:20:83:23:05:2c:cd:b2:
                    b6:55:92:51:e8:c8:8c:24:ad:26:f4:37:cd:c9:5a:
                    55:af:73:62:7f:af:9b:12:64:7c:04:3d:ae:01:ff:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:26:7E:22:DF:0A:C3:AD:BB:4E:1B:7C:F7:13:77:E8:55:74:E6:11
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32322d3232203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:47:3d:ab:d2:00:45:d3:4d:88:af:5a:8e:dd:7e:50:ca:d7:
         05:53:f7:ee:f3:56:0c:d4:70:f7:db:7b:41:f5:2a:34:e5:8f:
         8e:07:a3:bc:35:f8:3e:05:e9:da:7f:4e:0e:e6:f7:ba:27:66:
         6b:03:e1:5f:45:3f:9b:a9:ad:e5:ad:49:86:bd:45:e1:5a:d9:
         68:b1:79:ad:62:97:7b:6f:51:4c:41:8a:7d:95:71:82:5e:4c:
         2b:18:b0:82:82:92:ca:f0:c8:41:04:65:cb:27:3c:19:a2:d5:
         11:b4:16:79:70:db:9c:62:59:71:15:52:56:98:8b:fe:1f:5c:
         ac:27:d4:d9:ad:7f:bc:57:31:9c:75:76:d9:da:67:01:21:28:
         2c:1e:51:d1:93:52:21:30:3f:7c:9f:1a:f4:55:d2:86:73:7c:
         79:23:ba:ff:04:b2:c2:25:f5:f9:69:17:10:24:9c:b5:69:21:
         1e:77:13:6a:c7:8c:3f:f9:fc:1e:f8:6f:a2:e5:ba:32:5d:2f:
         33:38:2a:46:cf:2c:1e:44:3d:00:94:d3:ed:16:25:d6:ea:82:
         d7:9e:6f:a6:5e:b4:44:6f:47:db:fd:bd:16:15:1d:be:f7:72:
         4d:83:30:f6:1f:9e:bf:bc:64:80:9d:85:7c:2b:a1:72:aa:5a:
         93:5d:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org