Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          LNUr3FoEnOtVEgCBRirvEhM2OeaDqxbtCHkZZwBGA+k=
Subject key identifier:   D4:B4:23:5F:14:E8:D1:51:63:39:0F:E8:A7:AB:7C:0F:B7:16:C0:5A
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       3C5154752D5DF1637C4FF2E739B1452B4FD574CD
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
Signing time:             Sat 30 Dec 2023 13:00:00 +0000
ROA not before:           Sat 30 Dec 2023 12:55:00 +0000
ROA not after:            Sat 28 Dec 2024 13:00:00 +0000
asID:                     264126
IP address blocks:        138.59.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:54:75:2d:5d:f1:63:7c:4f:f2:e7:39:b1:45:2b:4f:d5:74:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Dec 30 12:55:00 2023 GMT
            Not After : Dec 28 13:00:00 2024 GMT
        Subject: CN=D4B4235F14E8D15163390FE8A7AB7C0FB716C05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:80:7f:0d:33:cc:4f:aa:ff:9d:82:5b:4b:
                    75:06:1f:b4:e1:da:c5:10:1d:8f:7a:6b:77:dc:9a:
                    85:0b:8c:2c:a1:41:5a:56:e4:6e:f2:22:2b:6d:08:
                    19:20:4f:ba:ba:ef:4c:a5:f3:05:e1:fc:94:bb:be:
                    7b:2b:3b:90:75:b9:3b:5a:ee:61:42:96:4f:0e:fd:
                    b5:1f:71:9a:f7:c2:0e:81:d9:7c:2f:86:fc:43:78:
                    5d:9f:65:aa:02:f5:22:5d:e8:a1:5d:76:1b:15:1f:
                    80:18:96:d5:ae:a2:1f:96:2b:48:f4:33:01:0b:2d:
                    d6:34:39:ab:46:b0:74:9a:59:67:44:4b:99:e8:5d:
                    73:bf:f2:a7:82:47:71:8a:84:c9:48:50:52:69:b2:
                    8b:71:2e:b3:12:5e:e3:cb:04:d0:d4:cd:06:38:10:
                    64:a0:2d:b9:08:6f:31:51:be:ab:49:f4:6d:13:8f:
                    0c:7c:f8:21:69:24:60:12:81:46:35:62:8d:d8:01:
                    5e:cf:e9:bb:d0:1c:32:d4:d4:1f:ce:43:4a:8a:a0:
                    dd:27:44:09:7f:3f:99:4a:9a:92:1e:4c:b0:c9:f6:
                    d1:bb:b6:35:19:60:ad:cc:7a:7c:df:ee:cb:56:e5:
                    ba:9b:54:bc:cf:bf:f6:44:54:40:7e:e4:1b:75:12:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B4:23:5F:14:E8:D1:51:63:39:0F:E8:A7:AB:7C:0F:B7:16:C0:5A
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:68:42:5a:9d:e3:e9:c0:e0:32:94:ab:f3:6d:87:1d:8d:
         bd:71:5d:83:5b:2f:d6:24:32:ca:42:83:da:db:20:43:c8:b7:
         71:21:54:3d:f8:ed:a1:e5:da:8c:df:4d:5f:a2:fb:20:a3:56:
         ac:4c:4c:fc:62:0b:59:ae:7f:cf:88:32:1c:e0:ed:09:74:70:
         36:18:a1:29:67:49:1b:db:d4:35:97:bd:f6:b9:76:50:29:ce:
         0c:9a:ca:7a:71:21:ef:b2:88:8c:c0:4f:55:d9:c6:49:51:1b:
         6b:a6:c0:c0:d8:57:76:87:0c:6a:6d:3a:52:f8:b4:a8:5a:53:
         4d:cd:ff:93:d4:a5:61:46:63:35:33:e2:a5:86:f1:7e:4c:a5:
         a4:4b:f6:23:5f:99:ac:58:71:0d:d8:d7:11:22:c3:4e:19:57:
         9a:bf:64:ad:31:0f:5a:da:d6:b2:82:d6:51:c2:eb:26:63:df:
         1b:b6:b7:09:3c:28:7f:1b:66:62:d5:b6:92:a8:8f:7d:30:4b:
         81:3b:85:2d:f9:24:d8:85:26:2c:7b:37:31:27:3a:f3:76:93:
         7a:1d:b8:fb:83:e0:56:1d:f7:b4:05:4d:6f:4c:48:e0:33:95:
         47:a6:0a:87:4d:a9:21:3c:98:03:c3:c6:1e:0c:cd:1c:5c:8e:
         ba:dc:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org