Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3234203d3e20323634313335.roa
File:                     3133382e39342e36342e302f32322d3234203d3e20323634313335.roa (raw, json)
Hash identifier:          04qo49x0eD5UAt2MUZAwB20oKKDN6tMNw4AeouoA2c4=
Subject key identifier:   7E:E7:12:3C:DE:50:00:53:D9:35:42:7E:9E:2E:84:6F:A1:6A:35:0E
Certificate issuer:       /CN=9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE
Certificate serial:       5C275D59F945C27BB9C921C4D199D731C51E4405
Authority key identifier: 9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3234203d3e20323634313335.roa
Signing time:             Thu 20 Jul 2023 14:00:00 +0000
ROA not before:           Thu 20 Jul 2023 13:55:00 +0000
ROA not after:            Thu 18 Jul 2024 14:00:00 +0000
asID:                     264135
IP address blocks:        138.94.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:27:5d:59:f9:45:c2:7b:b9:c9:21:c4:d1:99:d7:31:c5:1e:44:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE
        Validity
            Not Before: Jul 20 13:55:00 2023 GMT
            Not After : Jul 18 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:da:f1:8b:3f:5d:f2:97:c3:53:2d:9b:f9:
                    21:74:79:8a:75:e7:ad:76:f1:80:c3:47:dc:8f:f6:
                    b2:2c:c7:2d:c3:af:13:b0:a6:b6:cc:a0:3b:bc:8a:
                    bf:32:b6:c7:0a:42:a4:71:c3:56:f0:e5:7f:92:43:
                    dc:2b:18:4d:5d:0d:ca:40:90:e9:4e:91:01:f1:b9:
                    3a:ac:01:0d:6e:01:47:1c:6b:27:8a:3a:c7:c0:43:
                    57:b6:b0:d7:c4:d5:63:06:40:a0:7e:c5:11:c7:a7:
                    e5:32:7d:b6:1b:59:78:f2:c5:21:20:50:9f:88:2a:
                    f9:dd:5d:b9:85:6d:d6:c7:e1:2f:16:1d:b3:e5:d8:
                    07:08:d6:fe:74:c8:a4:72:26:47:94:2e:df:10:73:
                    33:68:f2:b7:e8:a7:ad:ac:68:20:17:ae:14:c2:e4:
                    a8:8b:e5:42:b8:8c:01:d3:9c:5b:e8:0f:08:47:c5:
                    54:3a:7b:6e:e2:20:88:b3:d2:3a:9c:a3:b0:27:71:
                    b0:f2:27:89:7c:01:c8:5d:b6:ac:46:5d:a2:13:6b:
                    55:7c:21:7b:48:65:8e:fd:21:8e:70:74:22:d6:de:
                    d2:3c:99:7f:34:18:9f:bc:7f:a5:62:38:1e:e4:90:
                    ec:fe:d0:f1:27:ff:16:dd:c9:ab:a7:fa:d9:8d:d2:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:12:3C:DE:50:00:53:D9:35:42:7E:9E:2E:84:6F:A1:6A:35:0E
            X509v3 Authority Key Identifier:
                keyid:9A:1A:6D:73:94:0C:2D:9C:DA:54:9F:ED:8C:13:7F:C8:FE:EC:38:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A1A6D73940C2D9CDA549FED8C137FC8FEEC38FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/3133382e39342e36342e302f32322d3234203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:6f:e7:be:b9:e1:96:76:71:df:39:79:0a:ac:d6:df:08:
         59:b7:d8:37:97:bb:9e:33:c4:f5:8a:33:28:88:88:f6:cc:51:
         fb:a7:b8:72:fb:d3:c5:d4:a2:e0:ee:48:f6:3d:6e:f8:8e:97:
         e4:c1:1f:51:da:f5:48:a2:5a:a9:22:09:c9:32:16:cc:1d:28:
         c2:43:4e:61:d5:3f:a1:d0:12:92:98:7a:48:0d:fb:89:1b:b1:
         2a:48:c6:b2:d4:6d:8e:db:d6:03:2a:a6:74:cf:d8:f5:79:85:
         2d:c4:12:42:97:6a:12:25:39:de:2b:d6:4a:12:e2:c7:45:3c:
         ef:ed:92:9f:41:fa:8e:a5:4f:cf:05:2d:7c:d6:55:5f:b7:99:
         1f:1c:66:be:31:dc:a5:20:7a:61:cb:7c:ca:c0:bc:52:7b:b7:
         fd:3d:96:bb:2e:d2:4f:72:c7:2e:c8:ee:a5:63:95:10:75:64:
         8e:f1:c8:62:b0:5d:6a:7a:6f:65:25:01:eb:bc:0f:82:95:24:
         8e:ea:43:19:20:cd:3b:eb:4b:ee:bf:31:46:02:07:70:79:df:
         2b:52:80:e9:6d:0b:20:46:7b:b9:e6:af:dd:33:11:64:bd:86:
         20:70:7d:31:7c:ee:11:2a:88:8b:56:5a:23:c7:aa:9f:67:2f:
         15:9d:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org