Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
File:                     3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          D98xriesdo8gckh2Jgtx4QkZzAckIUvjsIFsKgwed2c=
Subject key identifier:   D1:FF:A7:38:2D:6E:8C:BC:8C:34:E6:15:5F:11:0B:BD:BB:1C:9E:5B
Certificate issuer:       /CN=19BE0ECF1929D351B8E8680C771D8EA7AFDEE677
Certificate serial:       4277EAB4AB90E43B2080230402DF70A30A33B229
Authority key identifier: 19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
Signing time:             Wed 14 Feb 2024 14:43:04 +0000
ROA not before:           Wed 14 Feb 2024 14:38:04 +0000
ROA not after:            Wed 12 Feb 2025 14:43:04 +0000
asID:                     264241
IP address blocks:        138.118.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:77:ea:b4:ab:90:e4:3b:20:80:23:04:02:df:70:a3:0a:33:b2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19BE0ECF1929D351B8E8680C771D8EA7AFDEE677
        Validity
            Not Before: Feb 14 14:38:04 2024 GMT
            Not After : Feb 12 14:43:04 2025 GMT
        Subject: CN=D1FFA7382D6E8CBC8C34E6155F110BBDBB1C9E5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:3b:df:a7:0e:a3:1f:c9:80:e4:f5:39:0a:
                    d4:1c:02:79:5a:93:92:73:6e:05:d8:6a:f5:d7:46:
                    18:a9:7f:c6:1a:e2:01:6a:be:1d:64:92:80:ff:6b:
                    6f:0b:6b:f5:1e:de:0f:56:f5:2d:38:f1:b4:49:d6:
                    7a:d5:47:a8:13:bc:c7:2f:ea:1f:5b:51:b8:e2:bf:
                    29:b5:25:22:b0:f4:36:16:24:15:09:27:4e:cc:89:
                    9d:13:bb:5a:72:9d:49:8f:49:2d:df:5e:d5:5e:47:
                    cf:5d:db:c3:f2:97:dc:61:63:ba:b6:1d:33:ed:29:
                    8c:d2:94:2a:3d:b1:13:60:dd:d6:70:1c:0b:e4:b1:
                    24:58:bb:05:41:cb:22:74:45:f1:4e:2e:e6:e1:00:
                    72:15:53:4d:1d:13:3d:19:57:c8:ac:e7:c5:4d:41:
                    45:6a:8a:f5:5c:56:d1:1f:d5:b8:2a:6d:5a:04:3c:
                    f5:e5:cf:48:a8:63:58:c0:71:28:17:5c:69:f3:f2:
                    75:83:dd:df:99:88:62:d1:35:06:13:9f:b4:ae:e2:
                    3c:2b:15:da:da:0c:2f:0f:20:18:2b:8d:66:00:64:
                    61:32:5a:6b:34:68:fb:f7:52:65:2a:02:d2:37:0d:
                    53:a0:f5:9f:18:5a:03:87:dd:e5:c4:8d:8f:9e:4d:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:A7:38:2D:6E:8C:BC:8C:34:E6:15:5F:11:0B:BD:BB:1C:9E:5B
            X509v3 Authority Key Identifier:
                keyid:19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:01:c9:f2:b2:33:aa:e6:a0:22:dd:8d:ce:cb:97:6e:61:0a:
         c8:6d:04:5b:59:d6:71:c1:19:43:6b:17:46:c2:36:59:cd:98:
         a5:bd:82:d1:3e:74:87:a0:bc:25:fc:48:ba:bd:18:49:c2:10:
         08:73:1f:a8:ac:c2:40:de:e7:35:89:4e:d0:50:e8:ba:52:73:
         18:03:61:e4:bc:22:e4:02:9b:74:d2:ed:81:d7:3e:c9:4a:da:
         58:55:ea:ae:33:20:f9:bf:84:db:d0:71:f6:f8:1b:0c:5e:ad:
         89:80:4a:9d:09:b6:36:59:77:99:14:50:d8:ca:ed:43:d3:9f:
         f8:ab:87:aa:93:2d:d7:5b:45:74:74:b6:59:31:88:72:c4:c3:
         92:1f:0b:ad:07:7b:5b:07:36:27:82:1a:b1:38:06:07:ef:1a:
         7a:bb:b6:11:9e:65:6d:3d:74:29:d3:8a:9a:2b:f7:95:0f:cd:
         82:7c:90:eb:fc:21:bb:04:ff:ea:b5:50:f2:82:a8:83:1e:8e:
         cc:85:04:3a:02:d3:8d:24:a5:36:35:f8:ad:5a:89:fb:77:96:
         87:9b:21:ca:6b:1d:e1:29:99:ca:67:ae:72:56:c7:e9:3e:75:
         6e:65:de:a3:c4:87:4a:ba:82:3b:12:cf:10:6b:7a:79:02:98:
         33:a5:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org