Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
File:                     3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (raw, json)
Hash identifier:          20fQXQ2vQNLr7g8LOUc+vt1qkdMZXQw1muvxsTUDvfQ=
Subject key identifier:   08:5D:FB:88:76:90:E2:40:57:80:02:E8:78:2B:CF:61:E1:DA:A5:BB
Certificate issuer:       /CN=70060F52A42F07BEE6FBE76F1922D47B9DABA070
Certificate serial:       23967EEAA21FFF3CBD5B293648211E2F94CA9FEE
Authority key identifier: 70:06:0F:52:A4:2F:07:BE:E6:FB:E7:6F:19:22:D4:7B:9D:AB:A0:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
Signing time:             Wed 18 Oct 2023 18:00:00 +0000
ROA not before:           Wed 18 Oct 2023 17:55:00 +0000
ROA not after:            Wed 16 Oct 2024 18:00:00 +0000
asID:                     263869
IP address blocks:        138.186.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:96:7e:ea:a2:1f:ff:3c:bd:5b:29:36:48:21:1e:2f:94:ca:9f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70060F52A42F07BEE6FBE76F1922D47B9DABA070
        Validity
            Not Before: Oct 18 17:55:00 2023 GMT
            Not After : Oct 16 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:0b:5f:98:de:2b:2d:f2:87:69:a7:2c:6e:
                    d7:f8:bd:7a:9f:38:b4:e0:cb:0a:dd:a6:ca:c3:25:
                    4a:29:b6:bd:5d:c1:7c:3f:64:78:27:e2:d4:b1:b0:
                    bc:62:e1:2a:1a:fd:35:b7:58:3f:0c:89:79:31:b8:
                    7b:5e:53:1b:d0:17:1b:7d:a0:74:16:3e:03:9c:f6:
                    da:ab:bb:be:8b:31:50:c9:50:de:3f:ba:cc:d9:f9:
                    db:ad:55:93:c0:8b:93:1f:95:56:91:8e:d5:4c:54:
                    ba:60:10:29:43:36:1e:6a:97:74:09:e4:82:46:31:
                    22:30:23:f2:f1:c8:b9:17:b5:ce:f7:51:84:6a:ce:
                    a7:0e:5f:c5:4f:c0:d9:94:65:12:1d:3a:02:2e:92:
                    7d:a4:97:37:51:f9:ac:b4:5f:88:6b:77:87:fc:d0:
                    5a:8c:ca:1a:df:7a:84:73:f4:7d:58:c2:b5:84:69:
                    63:8e:39:44:cc:9c:ac:1a:20:a8:ff:13:47:ac:3d:
                    e5:70:e1:f4:bf:5b:20:a7:bc:d4:c5:bb:f8:ae:4a:
                    fe:c4:ec:4d:69:03:4f:e0:79:87:6c:58:5c:ff:3e:
                    50:05:59:e6:30:77:66:71:41:ce:e0:d2:79:7a:28:
                    06:e1:82:e6:ff:cc:06:0a:26:e9:52:cb:fa:0a:c6:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5D:FB:88:76:90:E2:40:57:80:02:E8:78:2B:CF:61:E1:DA:A5:BB
            X509v3 Authority Key Identifier:
                keyid:70:06:0F:52:A4:2F:07:BE:E6:FB:E7:6F:19:22:D4:7B:9D:AB:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70060F52A42F07BEE6FBE76F1922D47B9DABA070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/0/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:41:28:94:e5:54:a9:6a:fe:fd:6f:5c:a1:8e:01:68:a8:88:
         cb:f4:d5:2c:13:35:c8:2a:20:fc:0d:ab:7a:a5:10:4f:20:24:
         17:bf:0d:93:1f:ef:24:06:42:5d:90:82:b4:18:13:64:b8:1d:
         5b:a8:81:8f:b6:da:b1:25:42:40:0c:63:25:4c:f7:d0:9a:a1:
         22:8e:77:0b:d2:0a:cd:5e:2a:23:20:82:25:6d:b8:44:d9:39:
         71:db:af:f7:ca:50:84:f8:92:31:1c:c4:1c:07:f4:84:1f:3f:
         a1:9c:5b:84:a6:87:1c:6b:e8:c4:b9:66:9a:35:22:38:0b:27:
         e7:67:a0:25:e1:83:ca:c6:1e:51:93:71:28:d4:d0:28:70:fe:
         36:29:f7:81:08:92:5e:73:24:ee:e0:35:3a:25:00:e4:c9:93:
         10:b5:37:a2:20:d8:1d:89:a6:03:dd:74:57:69:5c:36:30:87:
         42:f0:ff:00:23:68:d5:9d:5c:fa:e2:c0:5f:aa:2d:59:43:4f:
         87:1f:d1:1b:aa:67:8d:ef:21:aa:87:fa:6c:ed:cf:14:d9:74:
         c2:34:e2:81:2a:63:85:dd:0c:71:02:2e:2b:78:c9:1f:04:7d:
         89:9b:90:1e:01:8a:0d:8c:70:e1:fc:d6:46:64:a3:d2:47:d8:
         4c:f1:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org