Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33382e302f32342d3234203d3e20323634313037.roa
File:                     3133382e39342e33382e302f32342d3234203d3e20323634313037.roa (raw, json)
Hash identifier:          X9+4ASzH9QwQxPlM2sKban2vnjm55P3rKjT9T6m2G+I=
Subject key identifier:   9E:4A:C6:E8:B2:EF:50:E5:58:C1:D5:03:8C:1D:62:E2:DA:E0:2F:AA
Certificate issuer:       /CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
Certificate serial:       5C6149D11F861DB7F439FCEBD7C5B83E0296D685
Authority key identifier: EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33382e302f32342d3234203d3e20323634313037.roa
Signing time:             Thu 26 Sep 2024 20:36:47 +0000
ROA not before:           Thu 26 Sep 2024 20:31:47 +0000
ROA not after:            Thu 25 Sep 2025 20:36:47 +0000
asID:                     264107
IP address blocks:        138.94.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:61:49:d1:1f:86:1d:b7:f4:39:fc:eb:d7:c5:b8:3e:02:96:d6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
        Validity
            Not Before: Sep 26 20:31:47 2024 GMT
            Not After : Sep 25 20:36:47 2025 GMT
        Subject: CN=9E4AC6E8B2EF50E558C1D5038C1D62E2DAE02FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:57:0c:08:32:a7:3b:83:cb:59:2f:ce:a5:
                    07:0f:c4:69:d6:90:d4:47:62:a4:94:3e:17:92:00:
                    7b:83:0d:b2:72:16:db:fb:06:cb:2f:3a:d1:95:81:
                    31:b2:ee:1f:62:2e:30:92:dd:c5:f9:de:ce:42:9e:
                    f0:89:ce:ad:f5:44:be:1c:db:2e:f7:70:5e:19:e5:
                    74:d8:74:e9:d4:87:f6:7a:d4:d6:1c:e6:86:79:b7:
                    2b:f7:1c:63:20:0c:5a:9b:b1:18:9c:1f:37:3f:30:
                    d5:00:b9:29:26:b4:7e:97:7b:c6:67:b0:ad:da:9c:
                    4b:a2:91:f1:0b:47:37:93:2a:91:24:fa:fd:d0:37:
                    55:b9:f2:b5:fc:2d:63:5e:65:9e:e5:60:7b:4d:70:
                    d5:d2:ab:bb:6e:b4:56:d4:65:e6:28:8b:7f:a4:7b:
                    ac:9e:d7:b7:7a:4d:1e:27:8d:2a:d7:74:de:b5:38:
                    46:64:79:ec:b6:79:76:11:12:57:2a:55:35:55:e7:
                    68:ca:51:56:a0:2c:79:12:6f:5c:6c:f8:e3:a0:6e:
                    99:e5:40:59:4e:f5:6e:54:9b:84:43:0f:79:5b:c6:
                    0c:86:fb:61:96:d7:d6:13:30:cf:d4:8a:52:a3:c3:
                    21:fe:f3:6a:b0:74:ed:44:68:40:b1:50:f7:e4:60:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4A:C6:E8:B2:EF:50:E5:58:C1:D5:03:8C:1D:62:E2:DA:E0:2F:AA
            X509v3 Authority Key Identifier:
                keyid:EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33382e302f32342d3234203d3e20323634313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:12:3a:b5:47:73:39:25:0e:f0:43:79:d9:6f:1c:d5:35:
         da:6c:88:1a:c3:21:c2:8c:80:dd:ec:34:2d:57:2a:8e:64:4f:
         14:db:55:51:7a:13:b9:45:32:c9:69:50:81:fd:d5:a6:37:9d:
         a9:92:e2:24:ec:97:a5:9d:6d:52:d4:0d:ae:6a:40:29:6f:79:
         02:ed:59:cc:9e:40:c9:5f:2a:7e:b1:4a:78:5e:d4:f9:8e:4e:
         e1:54:51:b2:90:cb:d9:ec:ad:de:d1:d0:c3:3f:94:09:ee:ff:
         e1:82:f6:e8:bd:b5:54:ea:eb:00:ec:2e:b4:de:6e:5e:5b:5e:
         23:13:ad:dc:c0:27:b7:82:7c:b5:e4:81:e2:b5:cd:bd:a9:86:
         a3:5f:79:4f:27:b1:e3:40:4e:93:d6:30:33:38:e1:14:f3:be:
         66:7c:91:e4:da:06:ea:dd:01:5f:61:77:13:27:53:df:ae:08:
         2e:44:2c:04:11:02:62:47:42:5c:27:09:a9:be:0c:91:00:ff:
         c1:ac:0b:12:80:56:9c:d0:48:f5:ee:26:7e:50:a3:8d:05:da:
         bf:0f:52:c3:66:43:c2:f9:13:f9:0a:78:8a:33:6b:82:bf:3b:
         23:42:14:d1:7f:79:84:21:56:66:c3:43:57:a1:c0:0a:ee:96:
         b0:96:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 00:03:55 2024 by rpki-client on console-fra.rpki-client.org