Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3234203d3e20323634323639.roa
File:                     3133382e3131382e3235302e302f32332d3234203d3e20323634323639.roa (raw, json)
Hash identifier:          CLBvE2Ezr116jFgnbMBFMxdpx2ecwSLc975Kpqfv4jM=
Subject key identifier:   E8:74:27:2E:D2:8B:C3:D6:3F:85:8E:05:90:EB:52:DC:DA:6F:09:F1
Certificate issuer:       /CN=3B343946F3FD21D5939F0642FCE83BCD3BDC05CE
Certificate serial:       2E07B85C7D092B5F63211D61F2C73C9E792BF696
Authority key identifier: 3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3234203d3e20323634323639.roa
Signing time:             Wed 25 Oct 2023 15:10:22 +0000
ROA not before:           Wed 25 Oct 2023 15:05:22 +0000
ROA not after:            Wed 23 Oct 2024 15:10:22 +0000
asID:                     264269
IP address blocks:        138.118.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:07:b8:5c:7d:09:2b:5f:63:21:1d:61:f2:c7:3c:9e:79:2b:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B343946F3FD21D5939F0642FCE83BCD3BDC05CE
        Validity
            Not Before: Oct 25 15:05:22 2023 GMT
            Not After : Oct 23 15:10:22 2024 GMT
        Subject: CN=E874272ED28BC3D63F858E0590EB52DCDA6F09F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:46:70:ab:4b:0b:9c:d3:a3:a8:97:2c:cb:
                    a9:1a:66:65:20:ea:f1:95:bf:bf:95:69:a8:54:20:
                    af:29:85:49:d4:da:23:24:62:7d:9a:2a:3d:6c:66:
                    31:4b:28:cb:30:5f:c3:18:2d:c8:3c:0f:39:78:d1:
                    33:14:6f:6b:90:bf:40:ac:cb:b0:95:e4:28:a7:c3:
                    53:09:4f:e7:79:ee:30:68:e6:af:f3:8a:06:e9:db:
                    f5:16:4a:8f:2c:b1:6e:a6:a2:ff:58:c1:b0:40:4e:
                    a0:20:20:b7:3f:43:d6:89:f9:71:e0:0a:fd:b5:de:
                    5d:44:cb:41:e7:89:10:7d:55:7a:07:08:bb:a3:95:
                    03:17:31:0c:b5:00:b7:e2:f8:39:02:d1:df:56:81:
                    2b:87:3b:02:53:8a:72:3e:37:b8:ac:39:35:a7:d8:
                    ba:eb:30:f5:c5:51:fb:72:e8:ad:24:ec:96:00:33:
                    44:0d:6a:41:30:46:af:96:48:fb:b7:47:36:7a:99:
                    b6:82:c2:8f:6e:4f:3e:4e:ba:2e:c2:4f:80:70:eb:
                    80:50:23:a3:13:d1:6f:13:cf:a4:68:0a:d0:73:b3:
                    d0:ee:24:1e:da:bd:70:82:a9:b7:43:e4:69:d9:2d:
                    66:6a:19:98:bc:ca:94:18:8b:ad:4e:bc:84:c4:48:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:27:2E:D2:8B:C3:D6:3F:85:8E:05:90:EB:52:DC:DA:6F:09:F1
            X509v3 Authority Key Identifier:
                keyid:3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3234203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:10:f2:e9:ac:85:00:42:26:32:46:22:3f:5e:ab:48:30:5a:
         0b:36:81:08:0a:14:a3:e0:5b:4c:b0:7d:36:53:80:66:26:2c:
         fa:62:be:a3:a6:c2:d3:66:26:bf:d3:32:d9:d8:76:69:f1:1c:
         84:d2:78:37:05:71:a0:d6:29:9b:c6:8a:05:3d:fe:a2:38:b4:
         48:24:96:66:0f:f1:2c:43:ac:4b:4c:fd:56:44:a9:ca:31:92:
         61:e4:af:61:02:63:77:0c:85:d1:4e:b2:b3:4a:f8:4e:94:56:
         b7:2b:0c:85:77:63:84:be:15:39:7c:04:f8:53:89:78:43:37:
         0a:a5:92:5b:37:d5:cf:e0:54:c7:5e:ea:d8:e9:8f:64:42:42:
         ff:af:12:52:9d:c7:80:20:15:78:c3:7a:d1:8d:e8:fa:d9:56:
         7a:e8:31:88:81:02:94:ca:c4:f9:84:a7:1b:82:1b:d7:32:62:
         c8:b5:4e:ae:30:18:f3:f4:50:c4:1e:ab:7a:c4:f0:84:72:07:
         6d:2d:d8:ab:56:26:52:1a:71:9b:8f:95:49:49:22:a2:68:67:
         7f:c1:f2:76:7a:16:07:8f:e6:2a:4a:93:4c:6e:1f:66:4e:99:
         70:10:74:89:e4:95:07:12:69:be:b8:6c:16:4c:14:ec:ff:5f:
         2c:78:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org