Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36332e302f32342d3234203d3e20323634323438.roa
File:                     3133382e3131382e36332e302f32342d3234203d3e20323634323438.roa (raw, json)
Hash identifier:          I+bTmMifRzdsXTDYzPImBCnOCaqBVoujd3SBy/yo8R4=
Subject key identifier:   C5:54:C2:D2:D1:76:84:2C:76:46:D7:0C:67:BB:BC:04:26:A6:8E:D9
Certificate issuer:       /CN=329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A
Certificate serial:       3B9E90115934CDC92F593A0266AAAE57C54256F2
Authority key identifier: 32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36332e302f32342d3234203d3e20323634323438.roa
Signing time:             Mon 19 Dec 2022 19:25:10 +0000
ROA not before:           Mon 19 Dec 2022 19:20:10 +0000
ROA not after:            Mon 18 Dec 2023 19:25:10 +0000
asID:                     264248
IP address blocks:        138.118.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9e:90:11:59:34:cd:c9:2f:59:3a:02:66:aa:ae:57:c5:42:56:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A
        Validity
            Not Before: Dec 19 19:20:10 2022 GMT
            Not After : Dec 18 19:25:10 2023 GMT
        Subject: CN=C554C2D2D176842C7646D70C67BBBC0426A68ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:80:8c:44:5c:62:20:60:3d:f5:ee:a3:30:
                    9c:1e:2e:14:06:3b:76:9c:fe:86:55:ab:8f:7f:9c:
                    f2:6a:8c:43:12:fe:c7:2a:5c:ca:22:6e:9f:c4:1b:
                    ce:62:d8:22:b4:8b:e1:8f:83:a5:e9:e5:35:c5:9e:
                    ef:61:ce:d9:4f:12:ab:37:f3:dd:39:49:7f:f9:c4:
                    b3:ab:2b:9f:d1:e6:9a:47:2f:05:00:c0:aa:4a:55:
                    60:07:6b:44:9b:02:7b:3f:b5:24:e5:d1:66:8b:ea:
                    82:9a:66:a6:8f:4a:1f:01:e3:66:df:29:f5:a8:b5:
                    fb:60:72:c3:66:75:ae:99:c9:42:9f:17:7c:96:19:
                    85:9c:45:65:3c:ac:c7:bf:63:40:d8:e3:c6:4f:55:
                    29:a3:9a:34:d7:4d:92:47:ed:d1:2c:2d:3e:ca:b8:
                    25:b3:6b:45:b6:b2:0f:12:f1:66:05:9e:66:94:b3:
                    ae:6d:73:7a:95:34:2b:fb:e9:59:e2:60:da:a9:9d:
                    2c:b1:df:fa:f8:28:58:44:e7:e6:e6:f6:a9:66:9d:
                    e7:17:87:55:39:4a:23:41:b4:86:27:bd:62:81:dc:
                    63:88:02:1f:d4:fa:97:6a:cb:55:e5:21:e6:35:65:
                    38:3e:ed:7f:c8:38:1b:3d:9a:37:f2:e4:45:bf:e3:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:54:C2:D2:D1:76:84:2C:76:46:D7:0C:67:BB:BC:04:26:A6:8E:D9
            X509v3 Authority Key Identifier:
                keyid:32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36332e302f32342d3234203d3e20323634323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:29:ff:96:7d:ec:60:2d:4e:ab:30:29:e4:d0:44:a4:b4:cb:
         fa:4a:0d:b1:3b:73:55:f7:73:fc:6b:62:47:49:ec:23:db:d7:
         54:e7:e0:94:3d:15:32:8d:a4:1d:b1:57:3b:c9:00:5c:2c:b6:
         f8:de:93:88:6b:ef:aa:45:ab:02:18:ec:6d:44:57:ef:49:44:
         5b:b0:62:d6:36:ff:90:cf:10:7b:ed:ec:8b:1d:7d:ba:c5:90:
         7b:cf:9b:58:b3:d2:35:8e:43:6c:a4:0d:e0:83:1c:e2:85:a8:
         66:18:e9:f1:55:80:c3:e8:ae:fa:37:18:05:b2:6e:c7:cb:9e:
         ee:66:fa:82:0d:05:4b:86:53:c9:a2:17:49:f4:9e:91:26:b3:
         45:fd:ad:d9:c0:04:ba:19:55:6d:a1:3e:81:ee:47:f2:1b:6d:
         79:a8:86:8c:56:82:58:f8:8b:db:d9:22:12:04:14:74:a1:31:
         7d:c5:a5:0c:de:ab:a6:ea:1d:1b:f2:f6:92:d9:6e:36:e7:0a:
         4a:eb:e9:49:be:68:42:98:b2:43:c2:cb:5d:9b:00:86:e6:8c:
         bf:3f:9b:af:8c:37:76:aa:e9:a7:e0:ad:e5:a0:b6:fb:8d:d4:
         02:7b:1f:5b:de:87:33:21:46:ed:2c:16:7f:d0:d9:d1:62:e4:
         ec:e5:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org