Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134352e302f32342d3234203d3e20323634353636.roa
File:                     3133382e302e3134352e302f32342d3234203d3e20323634353636.roa (raw, json)
Hash identifier:          /jGC4dNbvkqd2bJI7ooJ3aIDZDcgrYykIqc39WlMxSU=
Subject key identifier:   89:A1:2E:2B:6D:A9:D4:72:E3:E8:EB:18:10:87:32:84:0C:A3:41:89
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       103D1FF11E52A32C71F0A406E5B588EC3EC5778B
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134352e302f32342d3234203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:11:08 +0000
ROA not before:           Wed 23 Feb 2022 19:06:08 +0000
ROA not after:            Wed 22 Feb 2023 19:11:08 +0000
asID:                     264566
IP address blocks:        138.0.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3d:1f:f1:1e:52:a3:2c:71:f0:a4:06:e5:b5:88:ec:3e:c5:77:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:06:08 2022 GMT
            Not After : Feb 22 19:11:08 2023 GMT
        Subject: CN=89A12E2B6DA9D472E3E8EB18108732840CA34189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:30:4e:61:11:2d:10:55:19:9c:8e:36:69:
                    5d:78:29:9f:05:97:47:93:10:22:c2:d4:0c:88:d8:
                    54:26:7b:29:04:fb:d6:33:14:e7:60:99:bc:50:ef:
                    3d:bd:1e:9d:7c:03:89:a2:ec:34:95:e9:30:70:36:
                    08:26:97:d1:8b:f2:1f:14:d0:e5:1b:49:c4:9d:40:
                    f5:f6:a0:65:5c:b6:30:25:da:4e:ff:0c:b0:b1:fc:
                    e4:cf:b6:53:b7:d3:51:3c:bf:f0:9f:fc:8c:c5:c3:
                    9a:51:69:20:4c:4a:f0:44:2a:e2:58:67:62:57:5e:
                    22:1b:79:18:2d:ab:5f:67:99:a6:5a:a9:67:c7:f8:
                    25:3d:96:de:49:3f:5e:e4:79:72:c4:03:ef:0c:41:
                    73:25:1b:f2:81:24:fd:f7:43:8c:ff:09:b1:36:cf:
                    bc:0f:16:c5:57:ba:7f:14:a0:47:67:8a:c6:47:7d:
                    f4:4e:61:6d:e8:38:4a:39:e8:d4:c1:ee:42:f3:cd:
                    84:4a:7c:cf:9d:46:95:9f:db:df:72:d4:be:37:1a:
                    d7:76:c7:fd:db:7d:10:22:82:25:a3:2b:24:45:d3:
                    25:e1:2b:2f:95:91:1c:dc:e6:3c:47:f0:af:3a:cc:
                    32:d6:91:fb:9a:28:37:52:c0:6d:21:20:ae:9e:3f:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:2E:2B:6D:A9:D4:72:E3:E8:EB:18:10:87:32:84:0C:A3:41:89
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134352e302f32342d3234203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:94:3a:2a:0b:1b:53:eb:dd:92:17:6c:f5:74:2f:67:f0:
         19:02:f5:e5:b8:26:60:23:14:40:d9:60:21:c3:a6:22:74:fe:
         a4:2f:0c:cb:c7:04:9c:48:e2:b7:1d:c7:c8:b0:ec:67:05:37:
         c4:6a:0c:88:3e:51:42:28:bc:b4:08:8e:20:60:e4:a5:ab:a1:
         3c:ff:1f:d2:8e:3c:32:50:2c:9e:15:75:0e:fc:0e:85:1f:c5:
         0f:e3:ab:b9:e4:50:dd:de:ee:eb:ef:d0:f2:a4:03:e6:c7:9e:
         03:a0:b9:83:7e:62:05:e5:0f:13:9f:4a:32:f2:fc:bd:54:3f:
         43:c2:ba:62:5f:8b:d7:41:34:da:6d:75:62:72:29:4d:bc:ba:
         03:b1:81:d6:76:50:6b:76:6c:57:b2:ab:ee:dd:91:38:58:8f:
         e4:da:8e:22:c9:c9:53:99:ef:e8:a2:6a:b8:b5:93:57:3f:53:
         93:90:14:0c:da:29:34:4f:6c:ba:4a:d7:1f:48:c7:b9:43:73:
         fd:eb:24:1c:2f:4e:26:ae:67:88:7e:6e:fb:82:ce:11:f1:57:
         d5:1c:55:8d:25:d6:e4:19:01:6d:11:ad:d9:04:7e:e9:f8:30:
         42:f8:28:99:b0:4d:5e:9b:f6:7a:79:15:1a:24:a3:40:68:f7:
         96:c0:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org