Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33372e302f32342d3234203d3e20323634313037.roa
File:                     3133382e39342e33372e302f32342d3234203d3e20323634313037.roa (raw, json)
Hash identifier:          2SjH8W0HRqXoq7NnSlkjZFbTsiHgfNSsqMUBAF+8bkg=
Subject key identifier:   D7:24:B0:E2:10:FF:52:64:F6:DC:CD:12:C9:13:EE:DD:8C:CE:48:8E
Certificate issuer:       /CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
Certificate serial:       452F7F5257685D7033A625666972FB4CE896FF44
Authority key identifier: EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33372e302f32342d3234203d3e20323634313037.roa
Signing time:             Thu 26 Sep 2024 20:36:47 +0000
ROA not before:           Thu 26 Sep 2024 20:31:47 +0000
ROA not after:            Thu 25 Sep 2025 20:36:47 +0000
asID:                     264107
IP address blocks:        138.94.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2f:7f:52:57:68:5d:70:33:a6:25:66:69:72:fb:4c:e8:96:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
        Validity
            Not Before: Sep 26 20:31:47 2024 GMT
            Not After : Sep 25 20:36:47 2025 GMT
        Subject: CN=D724B0E210FF5264F6DCCD12C913EEDD8CCE488E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:59:a4:fa:e5:6e:a1:37:d8:7f:22:6d:f9:
                    dc:fa:a1:93:40:25:40:7a:0f:98:85:0c:0d:74:12:
                    87:68:2f:ff:f2:a5:e4:a2:8a:a4:7d:4f:52:d6:6f:
                    02:4f:49:9b:5e:02:59:cd:9a:83:7a:57:5c:39:24:
                    36:72:6a:4e:9a:77:e8:5f:a0:6b:11:0b:07:91:b7:
                    4d:f8:ba:ac:a9:42:19:20:ce:9b:84:6e:26:5f:5f:
                    15:6c:c8:df:c3:a4:c5:ef:9f:11:d8:35:24:2b:6e:
                    43:48:35:31:e3:47:6d:b3:60:d3:c7:33:2f:bb:5f:
                    c8:8c:be:de:47:11:9e:fc:6c:d1:1a:65:9d:4a:fb:
                    03:01:d1:d9:e7:5f:25:e4:6d:11:91:7d:b3:22:fa:
                    20:d6:a7:20:19:ec:13:49:d1:b6:27:5b:dc:b8:9c:
                    d2:8e:86:8f:d4:5d:68:62:2e:ff:8d:79:b0:47:b1:
                    94:0d:13:ba:aa:50:a3:19:48:26:30:10:8c:51:2e:
                    be:61:d6:55:ae:e8:2e:c6:b6:b3:19:22:2e:fa:38:
                    4e:40:d7:01:3d:8f:4e:c4:88:15:71:b3:36:6c:4c:
                    f1:57:b1:2b:07:e6:16:b2:3a:84:6f:9d:e3:6e:b5:
                    0d:e8:17:66:99:0d:ed:31:ef:77:b3:5d:4c:28:d4:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:24:B0:E2:10:FF:52:64:F6:DC:CD:12:C9:13:EE:DD:8C:CE:48:8E
            X509v3 Authority Key Identifier:
                keyid:EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33372e302f32342d3234203d3e20323634313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:83:a3:4c:ff:9f:39:32:49:b5:06:3b:6c:ff:fc:a4:7e:1c:
         82:5b:53:48:b3:4b:55:4b:e4:44:75:bd:42:bf:7f:7b:93:32:
         ca:2b:f0:13:f4:fc:1a:8d:18:1c:61:8f:38:c5:05:0c:32:fb:
         0f:55:22:ec:8c:53:87:fe:e4:69:1a:92:aa:d3:12:c1:94:5a:
         84:ac:66:26:fb:92:61:c4:4b:b7:9b:91:ea:22:32:46:27:36:
         0f:e9:74:13:20:1d:01:d4:d0:10:b5:c3:5b:bb:69:db:74:e9:
         ce:98:cf:2d:74:b4:54:ca:b7:b2:78:22:91:79:3b:05:e3:cb:
         af:a0:37:f6:dc:76:96:ec:28:f4:40:4e:96:cd:e8:72:63:ef:
         28:e3:44:9e:1b:bb:72:bd:39:01:33:4c:8a:6e:36:51:e4:2f:
         a5:63:fb:a1:ce:e8:79:e2:f6:ec:64:04:2f:8a:a3:f1:9d:8f:
         bb:30:f9:15:0c:f9:7d:d3:bd:4f:39:f1:3e:29:7c:85:82:c1:
         b0:d7:8b:13:cb:f2:27:9c:f3:45:b9:26:55:6b:cb:18:e8:48:
         18:4b:80:e8:53:3a:01:ca:78:85:77:77:85:c2:87:4f:f7:a0:
         a6:81:1c:30:a1:4a:6e:30:1d:59:27:6b:de:3f:cc:84:0c:1d:
         3c:f3:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 00:03:55 2024 by rpki-client on console-fra.rpki-client.org