Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (raw, json)
Hash identifier:          I+k+EAqIQNMppJCJo7VRKWBWB5UvGKvbQHR8NYIbL1c=
Subject key identifier:   2A:24:0D:6B:D4:48:D1:01:8C:02:CF:22:5D:5A:12:D4:7E:7F:98:65
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       306AF79D8193168CAC31190E56CD3DB1745B86E1
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa
Signing time:             Sat 30 Dec 2023 13:00:00 +0000
ROA not before:           Sat 30 Dec 2023 12:55:00 +0000
ROA not after:            Sat 28 Dec 2024 13:00:00 +0000
asID:                     264126
IP address blocks:        138.59.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6a:f7:9d:81:93:16:8c:ac:31:19:0e:56:cd:3d:b1:74:5b:86:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Dec 30 12:55:00 2023 GMT
            Not After : Dec 28 13:00:00 2024 GMT
        Subject: CN=2A240D6BD448D1018C02CF225D5A12D47E7F9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:65:e0:a8:f0:c5:f0:2a:80:90:ed:2f:e7:
                    b0:66:d0:07:ca:a7:2f:b0:d6:b7:80:7f:9d:01:cf:
                    c9:22:7d:8b:fe:3d:19:7d:0b:6d:ca:96:74:d1:28:
                    ae:ff:12:f0:c9:f9:b7:ff:67:64:9a:36:17:86:14:
                    71:67:94:1d:c4:6d:bc:4c:eb:8f:0e:46:0c:fe:09:
                    91:35:42:cb:6a:5b:28:65:3d:fb:0f:43:37:54:5d:
                    84:70:89:29:72:63:ac:b3:70:e9:ab:8e:8e:07:8c:
                    da:7a:d4:fc:83:3d:fd:06:0c:5d:b5:52:26:e9:ce:
                    9c:da:42:0b:49:01:37:b0:a6:a8:7e:bb:c2:64:d8:
                    5a:e8:61:c6:57:8e:a7:0f:8b:a2:03:a1:b6:e8:f3:
                    68:88:2f:ee:50:5b:fd:38:8c:70:17:b4:89:9f:bf:
                    fe:8c:2d:03:78:96:1f:ae:2b:2d:b3:28:39:44:c5:
                    48:1d:80:66:87:17:a9:29:52:33:05:b5:59:e6:ab:
                    4a:ce:98:39:c5:06:1c:7e:6f:45:42:39:b5:48:9a:
                    01:cb:01:0a:94:79:1c:2e:74:a2:f4:82:33:de:e5:
                    a2:c1:ed:c8:52:ee:73:17:ef:f5:89:35:81:d3:40:
                    01:64:b5:9e:13:34:ad:d8:bb:f1:3a:aa:88:bc:6a:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:24:0D:6B:D4:48:D1:01:8C:02:CF:22:5D:5A:12:D4:7E:7F:98:65
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:c6:c6:3c:f3:db:7e:db:d0:46:16:bf:b9:95:e5:d3:a4:
         dc:25:6b:34:05:93:72:1c:21:b8:68:30:57:5d:ae:0a:4c:3b:
         ec:65:04:0a:b0:b3:06:4e:14:76:48:32:c4:ed:ac:fe:ec:35:
         d2:5e:8a:f6:24:93:b9:59:c5:74:77:7d:2d:e3:b2:ba:92:9e:
         26:5e:d7:f5:b6:6e:21:99:a1:9d:ab:9a:c9:62:94:46:4f:57:
         44:de:1f:e3:c2:53:f8:f2:75:51:fd:83:1a:0a:5f:04:0b:ba:
         f7:8b:56:62:17:ae:f4:d2:36:04:0b:5c:f3:e8:8d:10:a1:6d:
         d7:19:85:f4:bc:bb:a1:9c:e4:fa:91:ee:d1:3a:bf:47:be:1f:
         11:73:00:26:34:0e:65:03:09:d4:39:74:c7:30:f1:6c:65:a5:
         82:06:e8:1b:93:80:57:be:54:59:64:58:6e:e2:1d:d7:d6:4c:
         36:e3:06:92:05:a7:56:10:7f:28:b2:32:26:1d:c6:ba:5d:4b:
         e8:76:58:da:7a:44:7b:19:52:4a:15:bc:fc:d2:27:18:8c:9b:
         0c:b6:db:4e:a5:4c:7a:82:e4:db:a2:7c:9a:56:86:c0:92:bc:
         47:77:9b:44:a9:2d:9e:bb:db:59:a3:ef:42:97:a9:7c:a2:d7:
         5d:55:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org