Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
File:                     3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (raw, json)
Hash identifier:          tz88vBMb8/Re6EtZzzldegXk2jwtPk/NO6BO30N0OZk=
Subject key identifier:   6E:EB:97:BA:73:FF:A8:B0:AD:33:25:D8:78:BF:27:48:48:4B:52:7B
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       3B865CF1996C0272B715DF168CDA9AE227F4227A
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
Signing time:             Fri 15 Mar 2024 19:32:36 +0000
ROA not before:           Fri 15 Mar 2024 19:27:36 +0000
ROA not after:            Fri 14 Mar 2025 19:32:36 +0000
asID:                     263650
IP address blocks:        138.255.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:5c:f1:99:6c:02:72:b7:15:df:16:8c:da:9a:e2:27:f4:22:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Mar 15 19:27:36 2024 GMT
            Not After : Mar 14 19:32:36 2025 GMT
        Subject: CN=6EEB97BA73FFA8B0AD3325D878BF2748484B527B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:68:b4:75:65:83:f3:c5:3f:39:3b:4d:3d:
                    f7:8c:d1:5d:e5:9b:d5:d9:ae:2c:6c:42:78:82:18:
                    cc:11:a5:70:5d:ab:bb:1b:ee:d4:85:1a:d4:ec:5a:
                    0e:f4:db:84:5a:c0:4e:75:51:0c:e8:52:60:f0:2b:
                    ae:c4:12:d8:0c:a8:58:c4:5a:cd:8a:93:ac:e4:9c:
                    b6:c5:ea:5e:9b:5f:cd:d6:bc:71:4e:63:32:ce:ea:
                    6e:45:0e:ef:c8:b8:90:07:0d:e1:ef:d0:22:32:b8:
                    30:61:d1:ef:17:d4:c8:b1:07:76:82:69:5a:7a:8a:
                    00:9b:c6:b8:f0:f5:98:dd:4d:52:89:fd:37:23:04:
                    d2:c8:f4:61:0f:84:99:e4:a9:84:ad:da:56:07:b2:
                    af:d9:58:c0:5d:e8:d0:d9:82:df:77:74:8f:20:e7:
                    f0:af:4e:72:77:87:2d:10:18:62:fc:2f:82:d8:b1:
                    18:fd:fe:22:7c:58:94:fa:66:19:e5:0b:fe:4f:ca:
                    2b:13:7d:48:2c:5b:01:b0:d4:09:7a:90:27:4b:db:
                    6b:ab:2e:62:a0:a1:d1:22:01:9e:89:19:ce:c3:71:
                    f1:17:e9:42:80:d9:b7:74:a1:94:08:2a:30:2d:79:
                    90:45:ce:4e:81:ee:83:29:62:bb:70:3e:1c:79:b7:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:97:BA:73:FF:A8:B0:AD:33:25:D8:78:BF:27:48:48:4B:52:7B
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:66:1c:85:c7:0b:ac:99:39:33:ad:97:29:38:58:a6:5e:62:
         5e:da:73:cd:bc:81:2f:68:e1:51:44:b7:31:04:d1:bb:d6:e8:
         ad:1f:7c:1c:2a:1e:2f:2d:4e:0a:15:c0:80:55:10:46:21:5d:
         09:86:8a:aa:9a:d8:41:2c:9e:f0:ff:f5:9f:36:f7:66:73:2d:
         6a:07:5f:0f:46:3d:d3:4c:b8:72:c6:5b:fe:34:d7:d2:82:f2:
         d2:46:b4:91:f0:c5:cb:98:6c:ad:ad:34:04:2a:ee:18:b5:15:
         b9:2c:fa:30:c5:c3:10:67:6f:e2:e8:7c:f2:18:66:71:4e:c5:
         d6:d1:01:80:7a:c7:f4:bd:8c:7d:ed:64:20:9c:f6:b4:1f:56:
         9b:72:e8:95:91:66:63:15:63:14:9a:ed:7d:c4:36:73:c9:c7:
         62:a3:04:1b:aa:89:b6:4a:66:19:63:64:ce:b6:cc:43:58:68:
         0c:c0:3d:bb:9b:1b:f1:ea:ca:0c:54:d1:f4:11:5c:11:02:f8:
         61:77:27:69:cf:48:6c:48:ab:32:a7:5d:44:79:20:0b:fa:a3:
         8c:d9:56:c1:f9:17:b0:77:2a:ba:5c:68:30:d3:2e:4c:2d:0d:
         26:0e:7f:87:1d:98:01:62:1d:02:2d:2b:1d:dc:38:35:53:0a:
         2a:6b:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org