Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
File:                     3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa (raw, json)
Hash identifier:          W1ukIVmYEMeBS+HMYiUdSzbsIAJYo+rgty4+e7witPM=
Subject key identifier:   81:82:11:7F:51:0A:A5:B5:8D:A0:FF:80:8D:60:83:C8:12:E8:19:82
Certificate issuer:       /CN=75AFE6C31884960EEC2F047B34E904416ED711ED
Certificate serial:       48A5F30E69372459D4CFF63A186D1C7C7C25CD25
Authority key identifier: 75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa
Signing time:             Wed 20 Mar 2024 18:57:20 +0000
ROA not before:           Wed 20 Mar 2024 18:52:20 +0000
ROA not after:            Wed 19 Mar 2025 18:57:20 +0000
asID:                     263989
IP address blocks:        138.255.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:f3:0e:69:37:24:59:d4:cf:f6:3a:18:6d:1c:7c:7c:25:cd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AFE6C31884960EEC2F047B34E904416ED711ED
        Validity
            Not Before: Mar 20 18:52:20 2024 GMT
            Not After : Mar 19 18:57:20 2025 GMT
        Subject: CN=8182117F510AA5B58DA0FF808D6083C812E81982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:d1:ec:43:fd:0c:ec:47:52:3e:d1:25:ac:
                    7c:8a:b6:0f:5a:76:19:12:aa:34:fb:1a:57:53:8f:
                    df:10:96:27:39:0c:dd:5a:cb:d1:79:6a:78:e2:93:
                    e8:a7:09:e6:7b:f9:4a:8e:2d:ea:4b:e6:5e:a4:ec:
                    04:1b:42:e5:0f:c5:3e:77:46:99:a2:37:15:d2:de:
                    d4:20:4d:28:73:d9:fe:ce:44:87:9c:74:47:d2:17:
                    ac:a5:0f:9b:20:05:9b:7f:e4:64:3b:97:13:68:de:
                    7c:90:c3:f2:5d:61:93:21:13:03:0d:89:c4:0c:91:
                    38:06:9b:c5:f2:bb:55:1b:2e:42:47:34:ac:71:0a:
                    0d:04:a8:45:10:35:fc:5d:02:d9:13:af:b1:37:af:
                    1e:90:b0:c1:67:73:d0:6b:cf:ae:54:af:4e:1e:af:
                    0a:37:39:2a:8c:d8:56:92:a3:97:77:72:34:7a:a0:
                    51:2d:26:cd:ae:b9:8d:d8:02:b6:32:2b:cc:1f:67:
                    b5:2a:04:86:78:37:9a:6c:bd:2f:3c:89:a9:15:38:
                    7c:32:cf:5f:83:00:49:1f:4d:2f:d0:72:95:a9:7c:
                    b2:7f:23:a3:4d:84:81:61:ea:33:61:e2:c9:62:f1:
                    4c:09:58:ac:4a:27:65:56:0e:fb:71:d2:07:07:a1:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:11:7F:51:0A:A5:B5:8D:A0:FF:80:8D:60:83:C8:12:E8:19:82
            X509v3 Authority Key Identifier:
                keyid:75:AF:E6:C3:18:84:96:0E:EC:2F:04:7B:34:E9:04:41:6E:D7:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/75AFE6C31884960EEC2F047B34E904416ED711ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75AFE6C31884960EEC2F047B34E904416ED711ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/0/3133382e3235352e3232342e302f32342d3234203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:f9:fe:b2:e1:da:ed:b4:06:e8:f7:16:a5:4b:9d:a4:5b:b6:
         fc:bd:30:ba:ff:68:ce:fd:42:2c:67:34:e1:95:79:d0:8a:11:
         f1:bc:86:68:87:9f:22:07:42:f7:7f:dc:bf:6b:a5:84:08:94:
         99:2a:99:27:09:a2:dd:e5:85:cf:10:e3:6c:b5:93:f2:92:b8:
         70:ea:a4:b1:b4:41:30:18:4d:94:23:cf:76:6e:26:f7:e2:ca:
         c6:6f:5f:34:cd:7f:33:12:3d:2a:c9:0e:d0:cc:ac:35:6d:4e:
         5f:da:2b:5a:58:76:52:2e:f8:05:24:01:f5:e3:89:77:f1:a5:
         fa:c2:5f:d8:c7:4b:d6:0f:7b:c3:99:5a:ec:ab:47:d5:a9:74:
         eb:7a:56:2d:68:d7:83:49:95:51:ad:fd:f7:88:47:e8:a6:90:
         b3:da:63:61:5c:34:3a:49:23:aa:c6:2b:d2:c4:e0:20:19:a7:
         44:29:f5:46:6e:92:fe:6b:24:5c:ad:8a:b9:d8:5f:f1:00:be:
         ca:e9:22:88:30:f9:9e:17:78:a3:77:58:09:7e:ee:f5:a6:64:
         b7:c6:9f:31:4e:6e:af:4a:3e:ab:b5:52:56:1e:b6:99:28:e7:
         0c:a8:da:cb:d1:b1:b5:80:24:2f:8a:60:8c:56:f0:f7:3c:a3:
         43:65:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org