Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32332e302f32342d3234203d3e20323633383738.roa
File:                     3133382e3230342e32332e302f32342d3234203d3e20323633383738.roa (raw, json)
Hash identifier:          AP5jt61ABxn6SZK3PbvTX9iZQ9noP1nZlF8noz1ZKGA=
Subject key identifier:   52:35:DD:1F:8F:A7:CB:32:D1:81:94:78:62:38:5F:E8:E8:EA:BB:C3
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       49D31F4457B69A17AB0913F33D4A2E32D52E64B2
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32332e302f32342d3234203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:32:52 +0000
ROA not before:           Tue 16 Jan 2024 13:27:52 +0000
ROA not after:            Tue 14 Jan 2025 13:32:52 +0000
asID:                     263878
IP address blocks:        138.204.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d3:1f:44:57:b6:9a:17:ab:09:13:f3:3d:4a:2e:32:d5:2e:64:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:27:52 2024 GMT
            Not After : Jan 14 13:32:52 2025 GMT
        Subject: CN=5235DD1F8FA7CB32D181947862385FE8E8EABBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:07:df:84:5b:cb:d4:34:f3:d9:bd:2d:e5:
                    af:93:b2:aa:0e:81:a3:1e:80:ee:63:b2:c3:21:f2:
                    b3:46:71:85:13:01:88:0c:d6:f6:10:60:d6:4f:5c:
                    d7:8b:a3:d4:41:e0:f2:ae:dd:b9:d0:51:ab:6e:d5:
                    5e:d1:bb:27:09:65:c0:b0:86:2d:44:33:5c:22:3a:
                    d3:df:4d:33:d9:a2:61:08:f3:25:16:77:f0:81:8a:
                    5c:70:6b:51:6f:7d:b3:7f:46:5e:54:5b:2d:49:f8:
                    20:02:27:2e:8c:60:9f:3f:4f:15:70:9e:2a:b0:48:
                    45:b5:aa:54:eb:94:78:a8:51:79:57:14:27:75:2e:
                    6b:de:8b:02:bc:00:4a:7e:bb:e5:1e:00:b3:d5:63:
                    4d:e8:4d:ac:bc:87:35:c4:1f:18:0a:3c:3b:31:89:
                    7b:8b:da:b3:78:ec:ba:1f:5b:6f:21:ed:e3:8b:da:
                    40:00:26:5b:f9:ec:99:8f:42:5b:f4:7e:62:55:25:
                    2f:78:42:5f:f8:c4:12:3a:04:ba:a1:e9:e3:1d:d4:
                    3d:65:53:b4:44:08:fb:0e:87:5b:76:69:6e:8b:08:
                    72:a8:72:f8:22:1b:4c:80:ee:cf:02:7c:4b:9e:87:
                    e9:37:c8:3b:72:55:d6:46:c5:28:9a:84:8c:8b:35:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:35:DD:1F:8F:A7:CB:32:D1:81:94:78:62:38:5F:E8:E8:EA:BB:C3
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32332e302f32342d3234203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:2b:6e:08:de:2c:69:f9:17:8c:b8:a6:78:f5:9a:21:72:
         a0:53:17:e6:7f:df:1a:31:90:57:21:96:16:f7:2c:4d:b3:f5:
         92:7c:43:4f:69:a6:ad:78:7d:ae:3a:37:04:ae:c7:ed:fe:9c:
         b4:85:f1:70:ab:70:f7:cb:54:27:64:95:7b:25:90:0d:f6:e1:
         ee:6d:4b:e2:21:bb:93:70:5f:d9:87:0d:14:ca:55:11:f2:64:
         c3:cc:5d:c8:e2:54:9f:44:f9:15:39:da:15:00:c4:24:6b:82:
         f6:c3:63:9e:15:4e:4d:a7:ee:3a:c1:17:10:c3:b4:b3:99:1b:
         24:8e:63:01:37:4d:16:b2:2c:44:0c:e0:d6:61:38:91:b0:11:
         7b:45:0b:91:b0:c5:e5:7e:3f:4d:13:1e:58:6d:4a:c3:d0:aa:
         85:16:06:c0:56:be:e0:5e:0a:2b:c8:a9:69:6a:27:bb:cc:f3:
         3d:70:0f:02:81:a1:94:d0:8a:f4:f8:d8:27:b5:79:3a:a8:99:
         3a:98:ec:22:74:63:83:be:5b:58:3d:77:7f:e0:6c:c7:78:e0:
         40:fa:09:1f:18:e6:86:7c:1a:5c:9a:f3:1f:f8:fb:b7:dd:2e:
         17:fa:17:6b:a2:ad:e7:0b:c4:04:99:8b:a1:44:dc:80:ee:95:
         be:9e:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org