Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          XNIN363zXjQdf3MotNNL0fjP9DS6xJ2pqmbRjD3YBqs=
Subject key identifier:   10:CC:53:29:5B:15:3B:74:AB:24:C3:B8:46:71:46:44:BF:D5:24:35
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       6A0AE5636A67280186FA820D1A041F7E47605CB3
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
Signing time:             Tue 19 Mar 2024 12:21:39 +0000
ROA not before:           Tue 19 Mar 2024 12:16:39 +0000
ROA not after:            Tue 18 Mar 2025 12:21:39 +0000
asID:                     263650
IP address blocks:        138.255.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:e5:63:6a:67:28:01:86:fa:82:0d:1a:04:1f:7e:47:60:5c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Mar 19 12:16:39 2024 GMT
            Not After : Mar 18 12:21:39 2025 GMT
        Subject: CN=10CC53295B153B74AB24C3B846714644BFD52435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:40:c2:f2:9d:9c:c4:c9:45:61:f5:03:73:
                    4c:02:a9:f1:ad:b3:6c:2f:b7:7e:c6:c9:95:2d:f8:
                    cf:25:36:a5:56:3d:f1:10:3b:09:84:72:b4:d1:a0:
                    3f:58:ba:de:83:cb:c7:f7:6d:eb:7c:96:5c:2f:21:
                    c6:5a:f9:f8:1b:02:d2:e7:71:d5:81:19:36:f4:0b:
                    10:b1:dc:ae:79:89:b7:3b:4e:3c:9f:96:d9:ec:e0:
                    c2:87:bb:6d:73:64:cc:7a:cf:42:06:c1:7d:7d:05:
                    da:73:11:96:c3:52:d2:85:95:3a:cd:9b:1b:8c:68:
                    ec:99:e9:99:9e:18:3f:e3:34:df:c1:13:6e:cc:0a:
                    7a:db:d2:0c:e7:13:df:fd:ed:81:cb:51:49:ac:bf:
                    b0:cc:dc:b8:31:15:73:44:4c:b1:c4:9f:c8:8f:3c:
                    0e:4b:2f:56:4a:ad:1c:c6:34:12:b9:3a:26:e3:59:
                    9a:1b:97:2c:e8:6d:d8:30:62:76:05:a8:d3:4e:39:
                    37:ec:86:ba:27:89:25:69:36:f3:52:43:18:23:31:
                    80:67:0f:4b:93:42:3e:e4:cf:de:2a:ed:e0:dc:4c:
                    fd:3f:6a:86:6b:08:c5:37:ce:0f:76:2c:16:44:e0:
                    fe:30:47:bc:ca:36:50:a6:22:40:67:9f:38:0d:98:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:53:29:5B:15:3B:74:AB:24:C3:B8:46:71:46:44:BF:D5:24:35
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:40:6a:af:13:08:8a:84:13:a9:e0:67:c2:c3:cd:b4:6c:
         a4:65:06:ad:62:d3:94:dc:3d:39:cc:34:16:d6:9e:f5:f7:8f:
         84:2b:6d:4f:67:d6:07:24:8e:97:ef:db:d9:ce:9a:24:84:00:
         42:4b:19:cd:dc:8b:6e:c3:5c:99:24:4e:f1:a3:7f:99:91:9e:
         61:e6:af:52:00:19:22:69:64:ab:29:88:63:12:f6:e3:a4:4e:
         85:9a:a4:24:df:9f:fe:1b:9f:19:b6:a4:bf:d2:a8:59:8a:86:
         f2:fc:25:bf:57:b4:be:50:23:58:88:81:e1:4e:ea:18:d7:dc:
         db:48:bb:97:81:eb:26:64:a8:9b:39:dd:0d:bd:e2:e5:16:21:
         33:38:35:aa:63:34:66:5d:06:5f:d0:93:74:7a:46:17:d8:05:
         13:5f:0d:be:1a:e1:08:40:86:2b:ce:8a:55:47:9d:cd:0d:7e:
         5d:08:41:7d:ea:99:a0:80:92:51:25:24:f2:e1:0d:bf:58:9b:
         bc:be:0f:ac:48:45:e0:7e:c1:9f:d2:ac:b4:7f:2d:aa:bd:91:
         9e:5d:f4:cf:d3:ca:d2:68:58:b0:07:ea:b2:da:41:04:a9:80:
         30:33:f4:45:45:a1:90:80:cc:a8:5c:24:55:34:d9:4f:2d:d4:
         a7:c9:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org