Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3133382e3138352e35322e302f32342d3234203d3e20323633363537.roa
File:                     3133382e3138352e35322e302f32342d3234203d3e20323633363537.roa (raw, json)
Hash identifier:          g9cmUS5Jx1VPXqCXKDw8nf/LEWW/r0REKgcgSYITJ3A=
Subject key identifier:   1A:38:4B:34:38:DE:38:BB:D4:A9:C8:F4:73:30:55:99:7F:AD:4E:54
Certificate issuer:       /CN=C99A36FE9D1F41CA87AD5F722E3868F0401B3664
Certificate serial:       0F89B4A600943157A6122081C4309D25A9504A9C
Authority key identifier: C9:9A:36:FE:9D:1F:41:CA:87:AD:5F:72:2E:38:68:F0:40:1B:36:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3133382e3138352e35322e302f32342d3234203d3e20323633363537.roa
Signing time:             Mon 01 Jan 2024 19:32:32 +0000
ROA not before:           Mon 01 Jan 2024 19:27:32 +0000
ROA not after:            Mon 30 Dec 2024 19:32:32 +0000
asID:                     263657
IP address blocks:        138.185.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:b4:a6:00:94:31:57:a6:12:20:81:c4:30:9d:25:a9:50:4a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C99A36FE9D1F41CA87AD5F722E3868F0401B3664
        Validity
            Not Before: Jan  1 19:27:32 2024 GMT
            Not After : Dec 30 19:32:32 2024 GMT
        Subject: CN=1A384B3438DE38BBD4A9C8F4733055997FAD4E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:da:da:64:6f:b6:c5:39:df:e8:de:57:43:
                    09:15:27:23:4a:ca:94:da:cb:12:4d:a9:f0:35:b0:
                    a9:50:c9:74:22:d7:86:a7:d0:0c:e1:01:c4:15:e4:
                    b1:30:2f:50:b3:e1:5f:db:09:86:e8:69:05:f5:7a:
                    62:2a:05:94:9a:e5:f7:57:7d:25:5d:e0:82:c7:11:
                    f5:83:76:51:1f:04:ce:52:c6:ea:68:b6:7d:db:80:
                    75:5d:43:2a:96:84:3e:e2:45:21:92:e0:86:e4:da:
                    80:60:73:e0:52:c8:5c:af:3a:65:3c:77:e9:be:f7:
                    39:3a:96:b7:51:b9:57:55:61:f8:32:42:94:12:1c:
                    a3:2e:98:10:f2:75:2e:40:eb:28:b7:1f:72:12:25:
                    7b:4b:31:d8:fd:41:3e:a5:1a:70:8f:b6:f0:51:f1:
                    a2:ae:e3:2e:2f:4c:2e:63:52:8f:62:70:c9:31:8f:
                    9d:33:25:37:a6:7b:72:96:4d:b3:31:dd:cd:d3:16:
                    48:f4:8c:ab:b3:93:3a:38:b7:6e:33:8f:2b:7a:93:
                    d6:b2:85:8a:8b:e3:35:24:43:1b:04:23:08:48:c7:
                    a7:a4:50:24:e4:db:77:84:3a:ae:61:24:a7:c3:2b:
                    7c:14:77:44:d9:20:c6:56:11:75:af:c6:d1:1e:e2:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:38:4B:34:38:DE:38:BB:D4:A9:C8:F4:73:30:55:99:7F:AD:4E:54
            X509v3 Authority Key Identifier:
                keyid:C9:9A:36:FE:9D:1F:41:CA:87:AD:5F:72:2E:38:68:F0:40:1B:36:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C99A36FE9D1F41CA87AD5F722E3868F0401B3664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3GTrzrpcwYR8DHxknFwJ3ozZyiqvg6cYMbAFWZte922d/0/3133382e3138352e35322e302f32342d3234203d3e20323633363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:7a:cc:03:2c:b4:0a:56:ad:4b:f8:45:9b:45:ef:0c:31:
         7f:0c:69:dc:c8:52:a4:d0:d2:a0:92:bf:c7:e5:73:53:dd:7c:
         89:f0:d6:12:16:05:d1:fd:1c:34:c2:ac:74:c0:42:a0:df:1e:
         3d:35:9b:1e:72:62:b1:93:a6:e4:62:26:90:67:fc:48:c0:6d:
         f0:bd:5a:52:44:12:8f:1f:38:9a:d1:c8:97:f6:bf:d5:fd:4d:
         61:90:ea:da:f3:66:59:48:13:ee:14:c3:b1:81:3c:54:cf:72:
         61:9f:58:7c:9f:b9:82:81:69:97:9f:84:90:6d:60:58:85:ec:
         f2:35:2b:63:12:52:d3:4f:d5:7c:29:bd:12:9f:9b:46:e0:ec:
         2b:d7:f1:41:d5:4a:06:fe:ff:0c:76:74:b7:25:5d:30:cc:4c:
         c9:8f:64:84:ea:63:18:b1:e4:16:fb:5a:03:0d:b2:f4:bc:d6:
         e8:1f:18:21:85:38:c6:e6:17:f0:cf:c0:e0:db:ea:95:53:96:
         7a:6c:e7:2e:52:74:df:99:d8:19:40:a3:ed:f5:fd:ec:d0:9b:
         f3:f0:b4:58:ff:17:7f:ee:bc:d6:a8:b6:fa:7a:df:9d:e5:b6:
         aa:63:8f:1c:b8:28:1f:7b:8e:b1:38:05:9f:1b:69:d8:bd:42:
         e0:51:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org