Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa
File:                     3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa (raw, json)
Hash identifier:          rd+3uhbIS3RKjaztvLt2Uev7mzAdFPyTK17qob1xq8c=
Subject key identifier:   13:AD:31:E0:2A:BF:DD:B6:A4:73:8A:00:BC:6C:D0:B3:2A:A6:C2:D5
Certificate issuer:       /CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
Certificate serial:       1572A274CD81A614F58C3C8E0408CBCFE7DEE740
Authority key identifier: 76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa
Signing time:             Wed 07 Feb 2024 14:22:56 +0000
ROA not before:           Wed 07 Feb 2024 14:17:56 +0000
ROA not after:            Wed 05 Feb 2025 14:22:56 +0000
asID:                     262380
IP address blocks:        138.255.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:72:a2:74:cd:81:a6:14:f5:8c:3c:8e:04:08:cb:cf:e7:de:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
        Validity
            Not Before: Feb  7 14:17:56 2024 GMT
            Not After : Feb  5 14:22:56 2025 GMT
        Subject: CN=13AD31E02ABFDDB6A4738A00BC6CD0B32AA6C2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:74:05:ca:cd:b1:ce:4f:6a:93:09:4d:5b:
                    8c:78:d4:de:45:ab:b6:0c:0f:ed:79:b3:50:0b:67:
                    fe:86:02:c4:52:9d:81:a2:0d:7e:15:0a:58:b7:cb:
                    ee:d8:99:20:01:3a:12:d2:ad:5e:94:45:9a:d2:c1:
                    b3:64:48:8a:a4:fa:97:f4:8c:ab:07:0d:35:a3:70:
                    2c:29:70:c7:5e:e8:22:0e:73:98:78:f4:6e:c7:3d:
                    42:9b:c7:07:12:56:ff:60:38:9b:32:ab:54:21:4e:
                    bd:7e:a7:56:37:c3:0b:63:27:b8:81:ff:a9:d6:15:
                    a2:51:19:9e:4a:4b:62:ae:78:10:0e:bd:ec:5b:d3:
                    c2:23:37:df:81:99:85:8b:71:c6:08:12:65:5f:f5:
                    be:e1:3f:1a:ff:89:3f:ea:d0:9a:bc:2a:bf:3d:b3:
                    82:cc:e6:e2:84:b3:0b:71:b4:a6:e6:6d:c5:79:c2:
                    e8:0e:de:62:1b:6f:cb:1a:7c:67:6b:4f:84:7d:62:
                    4e:90:5e:b4:c7:77:ba:c1:bc:4d:dd:d5:70:1a:60:
                    9c:c4:a6:bd:81:c8:b2:0f:99:97:82:76:97:c1:2d:
                    3b:2d:63:f7:4c:0d:a3:e9:04:c1:7b:ec:f1:2a:33:
                    11:49:65:97:cc:e5:04:43:3c:77:2b:26:6f:69:0c:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:31:E0:2A:BF:DD:B6:A4:73:8A:00:BC:6C:D0:B3:2A:A6:C2:D5
            X509v3 Authority Key Identifier:
                keyid:76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133382e3235352e39322e302f32322d3234203d3e20323632333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:b2:69:aa:f7:ba:62:99:a6:28:be:41:41:8e:75:be:52:
         ae:af:43:5c:2e:67:61:71:b8:e9:d4:e8:53:20:b8:50:0b:24:
         4d:9a:73:05:dd:de:80:ad:8c:70:32:8f:c4:d8:18:f6:c3:cd:
         a1:fb:7b:12:ff:6b:42:45:2b:aa:4a:b3:4f:b1:96:1c:13:db:
         18:db:4a:7a:1b:cc:bc:b5:95:6f:57:da:d7:5d:9d:09:4c:0e:
         20:9c:28:b2:ea:3f:90:96:b5:a8:06:e9:16:6d:52:aa:7b:63:
         40:48:49:ed:eb:e8:3f:1a:08:d6:e0:31:ad:3d:a5:b7:64:dc:
         76:b5:8e:e2:ac:02:a3:4a:bc:24:e8:91:f9:7a:da:7d:45:1c:
         e9:b2:e7:94:45:5d:78:84:f5:5c:f9:37:da:00:95:ab:be:da:
         33:7e:33:73:f1:b6:84:6a:02:d7:81:75:5c:0b:d4:7c:98:d1:
         ff:ff:cf:66:66:71:83:c1:04:49:33:81:9b:06:d7:f9:46:94:
         70:b8:82:34:da:08:54:1e:45:8a:58:26:e1:a4:cf:15:9c:26:
         b1:4f:f3:54:1e:6b:57:c5:51:45:e5:1a:dc:26:f8:c1:7e:1b:
         d7:6a:27:e8:4d:85:7c:af:20:3e:91:74:6c:1d:71:a9:91:01:
         a7:c6:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org