Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32342d3234203d3e20323633393334.roa
File:                     3133382e3231392e3132382e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier:          /Gy3U8XHloA3ljo6lFb9vA+59p6TruMllbWMpftbze4=
Subject key identifier:   B4:6C:71:57:34:52:03:65:BA:92:33:7D:B2:20:B9:47:9E:65:DA:77
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       3E4B331008AC64935D3FEC895BC5E799565C375B
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32342d3234203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:21:45 +0000
ROA not before:           Fri 27 Jan 2023 20:16:45 +0000
ROA not after:            Fri 26 Jan 2024 20:21:45 +0000
asID:                     263934
IP address blocks:        138.219.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:33:10:08:ac:64:93:5d:3f:ec:89:5b:c5:e7:99:56:5c:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:16:45 2023 GMT
            Not After : Jan 26 20:21:45 2024 GMT
        Subject: CN=B46C715734520365BA92337DB220B9479E65DA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:39:08:b7:22:70:68:e7:2d:2b:72:95:44:
                    22:6c:c9:1c:89:7c:58:da:63:79:c4:eb:3d:d3:f4:
                    28:fc:2d:28:88:36:89:19:dc:fe:74:14:85:29:d1:
                    1e:0d:c3:26:4d:de:5a:dd:34:ba:13:8d:4e:c3:55:
                    8f:2f:11:90:5a:63:ad:f8:3c:de:1d:b6:ad:8d:cb:
                    f1:3c:4f:e8:aa:46:e1:41:0c:e9:07:ce:76:ba:aa:
                    28:84:d6:8a:cf:78:17:20:02:72:09:a0:8b:68:85:
                    45:11:c3:2c:ad:7c:37:7c:a3:47:86:09:1b:45:12:
                    e7:6f:2d:fd:68:7e:4e:ad:dd:c9:0e:4e:fd:8c:bb:
                    b2:e9:92:1b:7c:05:e7:b3:a1:b8:8f:a7:51:ff:c5:
                    6e:6b:e2:98:0c:8d:aa:a4:20:a1:b9:1a:ba:30:49:
                    c7:1f:08:a6:9f:f3:8d:f8:d9:2c:ec:ff:a4:60:15:
                    6b:90:bf:6f:e8:36:70:d4:a7:53:cb:c3:a1:c2:8c:
                    4c:60:13:b2:d4:fd:88:fe:34:e9:1a:1b:f4:fa:88:
                    f8:58:ad:5c:a9:1a:55:18:31:e7:c1:23:60:b9:c4:
                    d0:aa:0d:94:6d:68:68:c5:57:e5:c9:9e:bf:9d:31:
                    9f:17:42:31:5a:be:63:db:56:df:24:0e:12:f9:f6:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:71:57:34:52:03:65:BA:92:33:7D:B2:20:B9:47:9E:65:DA:77
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32342d3234203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:19:8a:c3:e6:ef:42:5d:9c:99:4e:5b:5b:e3:16:f3:57:23:
         92:96:94:96:14:84:f6:15:23:a3:6b:7a:fc:ca:33:11:07:47:
         d5:e6:4c:9e:77:31:58:e0:fa:2a:1a:4f:be:84:c7:f3:32:9c:
         8e:6a:87:02:4e:b2:72:de:c6:00:32:cb:cd:f2:82:bf:ac:f2:
         0d:a0:6a:69:2b:1a:36:78:b1:d2:eb:c1:d4:3c:dd:4d:57:8f:
         82:46:c4:bf:e0:47:9b:73:bc:4a:9d:02:38:b6:ff:94:d6:f4:
         62:67:03:39:96:d6:58:be:ca:ee:77:01:60:3d:09:51:d7:89:
         59:7c:4f:a0:8f:a0:1f:82:e7:75:85:80:55:e5:ce:9c:2b:18:
         42:3a:26:18:b9:92:07:99:99:d3:33:9a:27:bb:c2:f1:0f:28:
         da:12:d1:b7:ae:8f:78:c8:84:ed:9e:02:d3:86:71:24:5a:58:
         5e:35:7f:d0:d3:bf:0f:f6:3d:44:c9:c1:f6:67:6f:b1:c3:ce:
         42:43:80:8c:c9:ac:a1:eb:02:4a:c6:1f:f5:7b:02:43:78:d2:
         a4:48:e5:60:ff:34:5c:ed:e9:17:f5:41:0e:5b:b7:a2:2e:f7:
         da:ce:57:49:dd:43:74:56:f2:a2:ab:e0:2d:c5:b9:8b:3a:ba:
         b8:3d:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org