Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134372e302f32342d3234203d3e20323634353636.roa
File:                     3133382e302e3134372e302f32342d3234203d3e20323634353636.roa (raw, json)
Hash identifier:          9FzvH4R/5hhvqeT9O4jQphgEqJYc4hRJ9PDjnLUZAxE=
Subject key identifier:   A9:C5:B6:09:B8:6C:E2:E6:A6:D7:38:A0:E7:CB:6D:11:0A:40:F8:80
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       641DDFCB90A9315D4F72C452CAD35D953B90BD11
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134372e302f32342d3234203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:11:16 +0000
ROA not before:           Wed 23 Feb 2022 19:06:16 +0000
ROA not after:            Wed 22 Feb 2023 19:11:16 +0000
asID:                     264566
IP address blocks:        138.0.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1d:df:cb:90:a9:31:5d:4f:72:c4:52:ca:d3:5d:95:3b:90:bd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:06:16 2022 GMT
            Not After : Feb 22 19:11:16 2023 GMT
        Subject: CN=A9C5B609B86CE2E6A6D738A0E7CB6D110A40F880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:21:c9:7c:ac:6d:05:30:0f:76:a1:0e:a7:
                    02:2b:51:4f:3b:99:27:d8:37:5f:3a:21:cf:05:78:
                    a7:a9:f8:a5:ab:85:62:18:64:36:63:b3:cf:9a:98:
                    bf:eb:48:f0:31:bc:15:1a:a2:9d:92:f0:9b:22:b7:
                    ec:2d:ff:f9:92:d8:90:63:90:65:c3:95:04:5a:07:
                    d3:a7:da:7a:96:34:25:65:63:fe:a5:4a:7b:45:23:
                    d2:ad:1f:59:5d:90:b0:8a:8e:15:14:2b:11:5f:c6:
                    5f:0c:ff:27:03:df:69:be:21:67:e2:e3:18:11:28:
                    4c:66:54:15:13:ed:53:3b:4e:b7:24:ac:8e:3f:d3:
                    a8:80:73:a9:74:10:80:5b:e3:8a:e5:dc:f0:5c:ec:
                    4f:16:46:0a:10:bb:74:49:4d:72:f6:6b:fe:b0:3b:
                    69:df:0e:ee:a1:f9:0a:f2:3d:31:49:3a:6a:72:45:
                    b2:47:07:9b:c2:e5:46:ba:1f:9c:6b:a6:33:10:55:
                    75:f4:88:70:72:0c:8a:77:c2:d7:21:d2:99:83:bd:
                    6d:69:10:dd:8f:22:be:d7:58:2c:c3:a3:89:fe:19:
                    9c:f3:66:48:b4:75:1b:22:10:cf:b0:cd:f1:ab:ed:
                    ef:69:fd:f5:51:56:a8:f9:14:6b:b0:fd:fc:96:67:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:B6:09:B8:6C:E2:E6:A6:D7:38:A0:E7:CB:6D:11:0A:40:F8:80
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134372e302f32342d3234203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:09:4b:ca:3d:f4:0c:78:8f:23:cd:d7:c4:03:c0:e8:41:36:
         2d:ed:d1:7b:1e:c5:67:35:31:1a:77:5c:01:f8:ba:51:64:01:
         4f:05:1f:a0:3e:fa:2f:7b:e4:47:f7:e7:1a:b2:55:27:46:48:
         33:94:56:1f:ac:44:e5:86:1a:36:4f:cc:97:5c:4d:b3:e4:35:
         af:6f:19:52:ac:dd:3d:c5:ab:42:c2:5e:e7:b5:80:ae:42:58:
         95:ec:2c:e5:13:f9:69:24:62:60:99:f9:6f:8c:87:92:cc:50:
         67:b8:27:ec:58:66:e2:33:b7:7c:bc:99:b9:4d:1a:45:41:72:
         6e:82:e1:a8:f1:91:dd:b8:a8:f7:58:5b:3e:7f:63:42:24:76:
         e9:9e:59:e6:f0:ae:92:e4:f8:3f:9b:b9:2c:ea:84:8d:3f:62:
         3d:37:a6:2f:75:b9:82:d2:3d:59:d9:bd:04:33:a5:71:fe:63:
         2c:2a:80:6a:2c:03:50:93:7b:f5:43:eb:a5:fa:96:4c:ea:d4:
         22:eb:1e:99:4f:eb:ae:68:29:a1:f7:e0:03:de:0d:0e:cc:68:
         ee:23:93:cd:7e:e1:7c:e9:1a:60:b1:62:de:94:fd:0c:ec:75:
         b5:04:30:91:e7:f8:f2:69:ab:87:0f:9d:aa:0d:b8:01:2a:03:
         21:b1:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org