Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32342d3234203d3e20323633383738.roa
File:                     3133382e3230342e32302e302f32342d3234203d3e20323633383738.roa (raw, json)
Hash identifier:          nMfReBeSdRd8V2ZrAgwexoGCtjaVaQXf3Sbv15fdOPw=
Subject key identifier:   D9:59:5F:63:4F:FF:7C:3E:EF:F9:EF:DB:DE:56:3C:61:52:B9:9F:5D
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       0ABB9B15C88C527F4AE07B11C62BF86A9324EAC7
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32342d3234203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:32:01 +0000
ROA not before:           Tue 16 Jan 2024 13:27:01 +0000
ROA not after:            Tue 14 Jan 2025 13:32:01 +0000
asID:                     263878
IP address blocks:        138.204.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:9b:15:c8:8c:52:7f:4a:e0:7b:11:c6:2b:f8:6a:93:24:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:27:01 2024 GMT
            Not After : Jan 14 13:32:01 2025 GMT
        Subject: CN=D9595F634FFF7C3EEFF9EFDBDE563C6152B99F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:26:a1:02:86:59:22:24:7e:2a:fe:c2:e0:
                    d7:7e:2e:6a:8e:d7:9a:dc:52:db:27:95:e1:3c:a5:
                    af:e3:9d:58:72:51:bb:38:d6:f7:cc:62:6c:7a:b8:
                    e1:80:aa:21:43:82:0f:0a:40:80:06:f6:ad:d6:da:
                    d3:27:31:8b:16:aa:a6:c5:b7:7d:dd:a5:79:de:e3:
                    88:41:e4:85:d6:3c:e2:9d:cc:53:e6:ca:1e:af:ae:
                    ef:8c:28:ab:b6:35:ca:14:8a:3b:80:a7:be:5e:4e:
                    35:f2:ae:61:ff:6a:21:ec:91:8c:1d:58:3b:70:52:
                    2d:ce:03:5c:e4:41:ae:66:81:3a:d5:82:1f:11:8d:
                    9b:1e:e1:77:2e:75:19:34:78:11:64:a8:cb:6f:4e:
                    f7:ca:14:a0:5d:01:9e:6a:38:e2:8a:56:b5:f4:f2:
                    8b:c5:9c:85:bb:70:e6:95:c2:36:3d:98:90:62:56:
                    d5:92:1f:cc:08:89:c4:8c:79:72:74:c9:30:97:5f:
                    58:f5:73:0d:9d:69:76:5e:7d:22:00:87:3d:aa:21:
                    a5:cd:1c:10:0a:11:2e:23:51:20:1d:45:11:a4:55:
                    f8:83:ce:21:b5:e0:d3:50:63:13:34:5a:2d:e6:8d:
                    12:ad:5e:fe:1e:5e:4d:d6:b8:47:7c:13:64:d2:c5:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:5F:63:4F:FF:7C:3E:EF:F9:EF:DB:DE:56:3C:61:52:B9:9F:5D
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32342d3234203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:1b:9a:0a:e0:7c:03:1c:ce:a7:bf:82:5d:6b:d2:e1:8f:
         89:5b:83:d9:bc:f6:58:ed:17:87:08:cf:73:f8:3c:4c:37:24:
         8c:7d:8d:ae:c9:54:6e:74:65:88:60:61:62:3c:94:dd:6f:a4:
         fe:e8:fb:3e:10:e5:58:db:03:79:55:57:ed:e0:38:b4:29:9b:
         5c:75:cc:1a:cb:8e:a9:49:2d:cd:79:27:78:26:7f:15:36:8e:
         99:8d:de:a4:b2:61:1b:a1:f7:c7:c8:d0:a0:08:07:a0:09:81:
         4e:82:25:5b:4c:08:94:cc:11:bd:e3:8d:67:8e:e2:22:cf:02:
         ce:53:9f:a5:10:b4:a9:97:23:02:d3:3b:b2:96:3a:2d:c3:77:
         ee:91:70:95:3e:fb:69:66:3a:2b:e5:4f:9c:06:3d:e4:05:90:
         09:ee:f0:e4:79:e5:27:78:fc:6e:98:73:31:0f:18:51:b9:16:
         7b:22:bd:e8:30:16:cc:8e:f7:8a:db:cb:e8:bb:32:9b:93:9e:
         13:81:6b:ca:15:82:f0:64:8e:e9:97:66:ce:96:3e:5b:b9:0f:
         33:a2:e9:3b:75:6d:e0:23:fa:68:2f:f8:e3:43:45:bd:03:62:
         7d:e3:72:63:91:4b:f1:42:8e:4a:af:9e:8d:f1:ca:3d:9c:9d:
         63:cd:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org