Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231372e302f32342d3234203d3e20323634323534.roa
File:                     3133382e3131372e3231372e302f32342d3234203d3e20323634323534.roa (raw, json)
Hash identifier:          LcZQ4IEAN+hkTucAfFh2jaj47dq5rGNaqltOOehCwIo=
Subject key identifier:   12:B8:E1:9E:34:14:47:56:DC:7C:F6:29:58:D9:95:CB:DB:78:66:A9
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       7B762A33CFE1BD96A6E58B4479020EEE69A23786
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231372e302f32342d3234203d3e20323634323534.roa
Signing time:             Sat 03 Jun 2023 17:59:01 +0000
ROA not before:           Sat 03 Jun 2023 17:54:01 +0000
ROA not after:            Sat 01 Jun 2024 17:59:01 +0000
asID:                     264254
IP address blocks:        138.117.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:76:2a:33:cf:e1:bd:96:a6:e5:8b:44:79:02:0e:ee:69:a2:37:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  3 17:54:01 2023 GMT
            Not After : Jun  1 17:59:01 2024 GMT
        Subject: CN=12B8E19E34144756DC7CF62958D995CBDB7866A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:96:7e:c0:6d:47:3b:0c:80:af:41:e9:45:
                    b1:d2:49:cd:f9:41:a2:3c:85:35:23:3b:72:d0:41:
                    63:98:64:58:07:47:6a:15:6f:5b:7b:9f:8b:55:6b:
                    86:1e:3a:4d:ee:c5:45:c5:b8:b2:8f:2f:65:b6:67:
                    9f:14:c3:8b:3c:b4:d1:e5:78:74:91:42:45:36:f6:
                    d0:14:35:18:19:63:d7:c0:66:38:23:8a:48:52:60:
                    3d:e1:b1:5f:9c:19:c2:21:be:ba:2e:ec:b9:83:5f:
                    fb:30:41:9b:d0:03:db:2c:72:69:da:e3:02:98:43:
                    09:a8:24:af:5b:cf:f2:43:bc:c2:0e:98:a6:eb:40:
                    56:97:90:ac:36:63:b7:ee:44:84:19:a8:fb:ac:a2:
                    c5:d9:a1:c0:1c:35:2f:00:4a:9e:74:60:eb:64:7e:
                    17:24:90:d8:fe:d0:d3:0b:02:63:9d:00:b2:65:62:
                    e6:b3:e2:9c:d6:8d:31:8d:4e:22:f2:da:a3:be:d4:
                    60:7d:1f:ff:38:25:84:c2:70:3a:f2:82:3f:7b:82:
                    00:27:16:cf:c6:c3:77:d2:6c:72:26:bc:c1:9f:36:
                    1e:f6:e4:98:52:75:87:db:af:e4:52:2b:86:57:b3:
                    1e:2f:a7:6f:83:04:aa:30:f4:19:c9:0f:21:61:45:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:E1:9E:34:14:47:56:DC:7C:F6:29:58:D9:95:CB:DB:78:66:A9
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231372e302f32342d3234203d3e20323634323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:7d:1e:c6:a5:a0:16:63:05:ac:f6:22:c2:0f:b3:7c:fd:
         d5:da:57:74:f8:42:f2:5e:fa:a5:46:53:06:87:2e:56:86:12:
         d1:75:76:17:5d:60:c0:14:f1:85:8b:17:1b:cb:3c:54:f0:9a:
         dc:71:2f:95:7d:65:01:4e:6c:61:9c:7d:67:1f:b2:b5:cc:01:
         81:65:db:05:38:bb:18:f0:a6:57:ed:8c:d5:84:5b:6b:c2:cb:
         f7:53:18:ee:a0:31:11:69:84:19:a5:19:42:a0:8f:a8:e7:70:
         a0:b3:85:77:7f:dc:b4:76:23:1a:8d:04:ec:b3:b1:48:c0:33:
         23:c7:51:85:10:d6:69:1e:65:58:45:2e:7b:52:4e:28:17:d2:
         24:91:dd:62:3f:e8:1b:43:e8:8d:f7:71:46:4d:27:ed:5c:a8:
         51:45:d3:3e:3c:be:76:5d:e3:3b:96:f6:11:7c:68:ad:52:d4:
         25:85:56:24:fb:9c:38:ea:6c:14:00:c2:47:39:59:c2:9b:00:
         ac:22:be:46:94:c0:03:2e:ed:fc:a5:9f:de:f9:49:de:32:90:
         51:a5:51:98:f7:83:48:24:43:cc:c1:c1:9e:0c:b4:77:10:e7:
         c2:1b:aa:37:45:2d:41:52:e1:3b:f1:a7:27:9d:82:10:47:a4:
         9b:d5:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org