Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
File:                     3133382e302e3139322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          YtnJiaBroZBsQWx4/34PhQ75qvjxojR8PUwdj3x9/Bs=
Subject key identifier:   1C:73:D3:3A:2C:ED:03:F5:0C:28:8D:C2:79:32:E8:5B:BE:16:EC:A7
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       1466AFEBB69BEBC34218EE9723F52E4386273F3F
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:44:54 +0000
ROA not before:           Mon 16 Oct 2023 20:39:54 +0000
ROA not after:            Mon 14 Oct 2024 20:44:54 +0000
asID:                     28131
IP address blocks:        138.0.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:af:eb:b6:9b:eb:c3:42:18:ee:97:23:f5:2e:43:86:27:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:39:54 2023 GMT
            Not After : Oct 14 20:44:54 2024 GMT
        Subject: CN=1C73D33A2CED03F50C288DC27932E85BBE16ECA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:72:82:fd:f0:34:04:bb:aa:15:0e:6d:7f:
                    37:c2:67:7d:5d:2c:27:c7:6c:b6:9b:d1:c2:eb:f8:
                    3c:b2:c4:a6:67:88:ef:d7:dd:49:03:cf:82:d4:bc:
                    03:40:fd:80:e9:2f:e7:b9:53:0b:a8:e3:23:5b:8d:
                    34:26:95:1d:9c:03:73:23:ec:c6:bc:10:4c:37:02:
                    20:cd:eb:79:a7:4a:0a:97:3b:e2:52:c1:9b:88:cd:
                    db:6c:c4:14:e8:dc:e9:13:03:d1:29:e2:d2:11:9e:
                    75:85:c9:e6:66:98:b7:84:71:9e:10:2f:46:01:fe:
                    ce:89:6a:0c:a7:60:c2:0b:63:63:6d:4e:bc:6f:4a:
                    67:aa:d2:72:a9:7c:b2:e3:51:57:78:85:6f:16:13:
                    1b:8d:2e:0f:8c:3f:dd:64:c8:79:8d:f7:6c:99:22:
                    6e:93:72:c0:f3:bd:5e:53:ad:3a:11:56:64:86:55:
                    64:3c:6c:c7:86:0a:b9:26:a7:ee:d4:6c:33:4b:2a:
                    00:d3:88:ac:14:c7:5f:31:30:b9:a1:85:07:95:a9:
                    89:69:46:3a:1c:85:c4:d2:d4:0b:a1:25:e4:fa:07:
                    7c:cf:09:38:81:2a:b7:f4:7a:8b:ec:c5:73:d9:52:
                    88:f9:8a:d6:3a:fb:ee:da:0e:ab:d7:7f:9d:4b:33:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:D3:3A:2C:ED:03:F5:0C:28:8D:C2:79:32:E8:5B:BE:16:EC:A7
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:86:13:a4:06:00:dd:53:fc:64:44:bd:eb:fb:f5:c7:06:21:
         58:e3:c4:0c:45:ff:cb:26:aa:68:61:16:36:fb:f8:6e:15:1e:
         9f:cc:54:39:26:34:f9:d3:67:1c:be:49:13:84:9b:b5:ba:8a:
         44:b9:72:c0:2f:48:8e:ad:f6:3a:e5:fd:2c:9a:4e:bd:1f:7d:
         3e:ae:96:f5:d1:15:78:bb:15:46:24:ef:e7:61:51:f3:cd:0b:
         40:e4:20:43:80:ce:fa:7b:e0:55:04:7a:3a:48:89:0e:64:9d:
         0e:99:ec:69:65:4c:fc:66:e2:64:28:a3:cd:b2:32:9c:d9:f6:
         b1:70:2d:b0:76:cc:cd:9e:4d:85:35:8e:9a:57:8e:0f:7d:0e:
         62:87:8d:37:f3:d9:c1:ef:fe:d3:d5:fe:10:f1:5c:c7:7f:19:
         71:0a:be:33:ec:68:ad:d1:b2:24:bd:47:b2:b1:0a:13:71:45:
         f6:fb:c6:0e:60:cb:b6:fe:e0:32:2d:75:4c:15:ae:f5:b9:7f:
         75:24:6e:a9:ea:2d:6e:0a:97:a3:2c:a7:bf:15:37:a9:f6:5a:
         7b:26:81:29:36:21:ff:8e:31:b8:fb:b5:56:3d:f3:b2:94:9a:
         3e:0e:d1:c7:46:39:83:d5:31:a4:67:5f:3d:45:86:90:09:cc:
         37:fa:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org