Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (raw, json)
Hash identifier:          5+3DDldqIekMAQdtjxQfKBumWP39jqCQWzhMqMr/G2A=
Subject key identifier:   1A:5D:05:25:0B:88:70:BB:20:D3:4F:C4:19:D2:87:DD:F0:FD:9B:79
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       1034502E002921D878E4DB8109BB4F980501EAD9
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
Signing time:             Fri 18 Aug 2023 02:48:27 +0000
ROA not before:           Fri 18 Aug 2023 02:43:27 +0000
ROA not after:            Fri 16 Aug 2024 02:48:27 +0000
asID:                     264126
IP address blocks:        138.59.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:34:50:2e:00:29:21:d8:78:e4:db:81:09:bb:4f:98:05:01:ea:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Aug 18 02:43:27 2023 GMT
            Not After : Aug 16 02:48:27 2024 GMT
        Subject: CN=1A5D05250B8870BB20D34FC419D287DDF0FD9B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:57:75:80:73:15:e9:18:7b:91:51:74:ed:
                    02:b4:5f:72:df:c8:54:43:e4:5e:1e:69:66:2f:8a:
                    0b:90:83:53:b5:0b:4c:fa:cc:9c:76:c5:32:bd:93:
                    6f:d1:44:e8:22:5e:fa:b8:3e:7f:4f:e4:3a:0a:5e:
                    78:a2:cd:04:30:62:bc:d2:b9:d4:60:4e:29:1a:1e:
                    7f:85:44:3c:9d:9b:9b:88:ec:2f:5e:19:18:5d:6a:
                    e3:29:e9:dc:28:6e:d6:5e:c2:50:dd:c1:5c:f9:cb:
                    a2:21:d1:3f:e2:5a:25:fe:c8:15:6f:5e:81:e2:e8:
                    fe:cc:77:a4:33:4c:19:1d:0e:95:f0:d1:6d:df:3d:
                    8b:ce:a1:88:ac:0f:1a:6c:b3:2a:3f:d8:45:f5:8c:
                    0a:42:d1:68:25:e2:93:64:5a:71:95:02:9a:05:70:
                    5d:c0:19:94:d3:6d:95:d5:15:e6:06:5a:51:28:2f:
                    a7:97:c1:ff:7d:a5:be:ea:df:2e:bf:b1:c8:19:e6:
                    07:24:86:d5:b8:7a:d9:57:a2:16:55:5a:f5:55:95:
                    25:5a:7b:4a:dc:28:8e:92:aa:b2:e3:62:a2:62:82:
                    db:11:67:d2:23:46:c3:b1:c6:35:81:d9:1f:d3:39:
                    af:33:6e:0e:74:a4:dd:fc:3d:36:42:68:bb:0b:d8:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:05:25:0B:88:70:BB:20:D3:4F:C4:19:D2:87:DD:F0:FD:9B:79
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:1b:f9:a4:09:08:af:85:8e:f8:ef:d4:16:fc:fb:e6:dc:f4:
         fb:f7:c5:98:a5:4e:00:7f:fa:09:18:28:f4:dc:f1:b6:87:62:
         6b:b1:10:6f:16:87:86:d2:74:1e:10:f6:2c:61:2c:af:a5:7c:
         d4:b2:f1:d5:4c:d3:9b:57:f9:bb:66:85:1f:43:b8:96:8e:be:
         44:e6:a3:cb:b3:42:5b:f9:14:0b:07:cd:08:83:2d:64:f8:bc:
         88:92:32:13:60:c0:5e:03:0d:fa:2a:98:c6:72:6a:40:23:58:
         e0:04:b8:dd:52:2c:94:9d:f2:da:27:98:28:36:8c:1c:a5:b7:
         54:12:91:bb:0e:47:26:fa:67:d4:b1:0c:98:8f:87:72:84:2b:
         8c:d5:11:c0:7c:af:ca:0a:54:e1:b7:c0:dc:f1:80:94:76:be:
         81:3f:7b:c1:57:e6:ef:ee:98:5f:ee:83:a8:de:f0:d5:46:9e:
         28:7b:82:16:71:07:a1:2e:e9:4d:05:73:b2:c8:54:56:a7:94:
         eb:4b:46:7e:9e:f3:7d:9d:78:c0:a8:92:08:1c:8b:31:5c:dc:
         4d:f0:e6:50:3c:95:17:af:5e:95:94:4e:9f:ec:08:e2:8c:6b:
         36:e5:94:0d:94:d2:0c:73:42:c8:7a:9a:c6:08:b2:50:3e:11:
         b6:21:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org