Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33392e302f32342d3234203d3e20323634313037.roa
File:                     3133382e39342e33392e302f32342d3234203d3e20323634313037.roa (raw, json)
Hash identifier:          JSAChp2cKbT5o71GcT1zbRJKLosXWSBSIfFandJYlNA=
Subject key identifier:   F6:B4:E5:7D:9D:EE:BA:8B:DB:96:D4:BD:CF:A8:EA:F1:AB:C1:01:C7
Certificate issuer:       /CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
Certificate serial:       5AC56688DA04C16E3970CBD8E7DAABBBA79D03CF
Authority key identifier: EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33392e302f32342d3234203d3e20323634313037.roa
Signing time:             Thu 26 Sep 2024 20:36:47 +0000
ROA not before:           Thu 26 Sep 2024 20:31:47 +0000
ROA not after:            Thu 25 Sep 2025 20:36:47 +0000
asID:                     264107
IP address blocks:        138.94.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c5:66:88:da:04:c1:6e:39:70:cb:d8:e7:da:ab:bb:a7:9d:03:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAFB1EB50066E12838301F26F7B2DF7B736A78F
        Validity
            Not Before: Sep 26 20:31:47 2024 GMT
            Not After : Sep 25 20:36:47 2025 GMT
        Subject: CN=F6B4E57D9DEEBA8BDB96D4BDCFA8EAF1ABC101C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:ec:1c:8b:95:20:ca:91:d0:66:4e:e1:9d:
                    ab:6e:e5:0b:ca:63:82:04:c6:55:d0:24:92:d2:93:
                    75:57:31:fd:ac:1a:fe:1c:39:c3:85:f1:23:7a:6f:
                    ad:4b:f2:69:78:a7:e1:2e:21:1e:af:8f:44:13:3c:
                    29:3a:97:a6:7a:29:f4:42:dc:bc:a9:de:2c:4b:70:
                    a8:c0:dd:08:9a:a3:81:50:dc:63:1a:27:fb:ee:dc:
                    b8:74:d7:ea:b9:7a:98:e2:bd:87:3d:df:03:5c:23:
                    2e:6d:db:55:8e:ca:0b:45:3c:f9:36:d5:41:a8:42:
                    f7:42:4a:9d:d3:07:eb:f2:33:34:a9:9e:92:43:1c:
                    15:22:27:fc:83:c2:91:ce:74:a6:b8:c8:61:6b:84:
                    c4:10:f1:70:e0:58:67:c5:8c:e5:6c:2c:ee:80:b0:
                    42:f2:9a:2f:c9:9e:7b:9d:35:ed:28:bf:2f:b1:ea:
                    df:c1:be:ae:6c:1b:17:56:88:48:f5:00:93:a4:ad:
                    52:d4:31:44:8d:f8:e7:97:dd:7f:03:bc:a6:fb:10:
                    47:bb:74:cd:1d:8d:a6:c0:27:74:46:30:a6:c3:47:
                    40:53:d2:52:25:3d:88:a4:02:e8:df:3d:a1:ff:8d:
                    94:5e:05:d6:f0:f5:2d:b0:09:9f:17:9c:49:fa:f1:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:E5:7D:9D:EE:BA:8B:DB:96:D4:BD:CF:A8:EA:F1:AB:C1:01:C7
            X509v3 Authority Key Identifier:
                keyid:EF:AF:B1:EB:50:06:6E:12:83:83:01:F2:6F:7B:2D:F7:B7:36:A7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFAFB1EB50066E12838301F26F7B2DF7B736A78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HBh2AEbEFB6rWMdHLYS4tYza1MbYNK4x79riwawvZ9e/0/3133382e39342e33392e302f32342d3234203d3e20323634313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:04:80:1f:cf:42:87:6f:49:16:40:ba:88:ad:42:fe:91:12:
         ed:12:ed:7f:2d:50:74:bd:e7:a6:96:f6:65:aa:9e:b1:7a:31:
         44:8c:eb:97:fe:45:80:f5:fe:5d:62:66:3c:29:45:91:f8:d3:
         69:1f:6a:fc:3c:f1:1d:1a:dd:3c:9e:b1:67:7f:bb:e9:cb:29:
         2b:f2:66:6f:c1:86:c5:c8:09:8c:42:6b:78:e3:92:52:16:03:
         99:a8:84:88:cc:3e:cf:be:0e:8c:2a:cc:ec:ee:28:5f:7b:4c:
         e8:fc:79:fd:d5:12:52:7e:5f:4f:2a:b3:5f:a1:0c:3c:c7:a1:
         67:d7:73:0e:95:13:4a:a8:c9:7d:de:39:e7:f8:82:9e:45:a9:
         1d:06:28:74:3f:c6:86:e4:cc:22:3f:aa:c9:9c:a0:fb:11:f0:
         28:e2:33:14:b1:74:16:d3:e1:f7:eb:fe:d7:5d:05:60:9d:a7:
         0e:20:ae:8e:3d:e6:c7:3a:9d:9a:1f:7e:bd:e2:bb:31:ec:89:
         55:bc:a0:d1:7e:64:b6:3a:91:da:30:1a:c7:26:74:38:07:88:
         c7:90:39:a2:47:d8:2f:42:0d:0b:09:2e:36:ab:cc:ab:d7:12:
         68:8f:89:52:72:79:56:5c:f0:33:e1:10:26:8e:3c:04:8a:89:
         7e:25:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 00:34:41 2024 by rpki-client on console-ams.rpki-client.org