Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/3133382e3231392e3138342e302f32322d3234203d3e20323633393534.roa
File:                     3133382e3231392e3138342e302f32322d3234203d3e20323633393534.roa (raw, json)
Hash identifier:          bZBJgPaF+NEH0gvun3+l/YAZ2HeF589cJll1ZDIIafs=
Subject key identifier:   46:70:10:82:D1:FB:4D:68:6F:3C:3D:21:31:1F:D8:F8:45:19:41:8B
Certificate issuer:       /CN=5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7
Certificate serial:       0EB16915300FABF2B2D2544B1846DB9202AD1C4C
Authority key identifier: 5A:11:A5:5C:C2:03:13:8D:0E:7E:C8:37:60:D6:5D:AA:1A:FA:D9:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/3133382e3231392e3138342e302f32322d3234203d3e20323633393534.roa
Signing time:             Tue 21 Mar 2023 02:00:02 +0000
ROA not before:           Tue 21 Mar 2023 01:55:02 +0000
ROA not after:            Tue 19 Mar 2024 02:00:02 +0000
asID:                     263954
IP address blocks:        138.219.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:69:15:30:0f:ab:f2:b2:d2:54:4b:18:46:db:92:02:ad:1c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7
        Validity
            Not Before: Mar 21 01:55:02 2023 GMT
            Not After : Mar 19 02:00:02 2024 GMT
        Subject: CN=3082010A0282010100DF630C8729E51E119AC679F4B923B98A84F0E976193B131CD02889654FCF97DC7B92B6786694066D07AB2D15E408735BC24C1736FC7D6ED5EDE5BE082383C2A7DD455C883E272236FFE6746282EFF2C19624BA97DCF690E57D2CC479D31817E479F9075647EC36FA24A5EF6D11CEDAFFF8418DFB9041BB76F65F9C1615542D1A16337CC9256144868D5FBDB18F28A21ED9D99A8302CC432DE02B7E95776AC07C44651D78112B034ABE227E03CA96FD0EA5B1B58185E773FE7D6287EA4BA6A1C308D3470BDA7440D31C39B469C1685C905066AE5BF433DECDDA4FB9D906C10131B4ECA3C2B83C97E54CDF15EC28470D5CC9D47792C5F4F543DBD0BCAD02B165DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:0c:87:29:e5:1e:11:9a:c6:79:f4:b9:23:
                    b9:8a:84:f0:e9:76:19:3b:13:1c:d0:28:89:65:4f:
                    cf:97:dc:7b:92:b6:78:66:94:06:6d:07:ab:2d:15:
                    e4:08:73:5b:c2:4c:17:36:fc:7d:6e:d5:ed:e5:be:
                    08:23:83:c2:a7:dd:45:5c:88:3e:27:22:36:ff:e6:
                    74:62:82:ef:f2:c1:96:24:ba:97:dc:f6:90:e5:7d:
                    2c:c4:79:d3:18:17:e4:79:f9:07:56:47:ec:36:fa:
                    24:a5:ef:6d:11:ce:da:ff:f8:41:8d:fb:90:41:bb:
                    76:f6:5f:9c:16:15:54:2d:1a:16:33:7c:c9:25:61:
                    44:86:8d:5f:bd:b1:8f:28:a2:1e:d9:d9:9a:83:02:
                    cc:43:2d:e0:2b:7e:95:77:6a:c0:7c:44:65:1d:78:
                    11:2b:03:4a:be:22:7e:03:ca:96:fd:0e:a5:b1:b5:
                    81:85:e7:73:fe:7d:62:87:ea:4b:a6:a1:c3:08:d3:
                    47:0b:da:74:40:d3:1c:39:b4:69:c1:68:5c:90:50:
                    66:ae:5b:f4:33:de:cd:da:4f:b9:d9:06:c1:01:31:
                    b4:ec:a3:c2:b8:3c:97:e5:4c:df:15:ec:28:47:0d:
                    5c:c9:d4:77:92:c5:f4:f5:43:db:d0:bc:ad:02:b1:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:10:82:D1:FB:4D:68:6F:3C:3D:21:31:1F:D8:F8:45:19:41:8B
            X509v3 Authority Key Identifier:
                keyid:5A:11:A5:5C:C2:03:13:8D:0E:7E:C8:37:60:D6:5D:AA:1A:FA:D9:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/3133382e3231392e3138342e302f32322d3234203d3e20323633393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:47:35:92:1c:4b:bd:94:33:e8:5a:c0:e0:1f:17:46:92:99:
         b7:e6:fb:40:b2:e3:48:b9:47:a0:7f:aa:7f:8a:e9:d9:63:f2:
         73:09:9f:5c:9f:a7:eb:24:2c:0e:2e:68:4c:d3:09:49:32:07:
         b8:88:37:11:83:aa:cc:b2:b2:ab:96:69:0b:8c:f8:bc:18:4b:
         60:a9:e6:04:6d:f7:be:45:49:5f:74:b0:e5:74:0a:2e:18:91:
         e8:83:a8:40:94:bf:1e:60:0f:28:f9:64:93:c8:36:be:82:dd:
         cc:95:50:e4:f8:70:21:3d:f9:dc:c1:af:04:a8:a0:1d:88:b9:
         19:4f:d2:b0:4d:66:b8:fd:be:a3:89:2a:75:f4:65:13:38:c7:
         11:b3:a6:9f:e4:94:a6:2b:e1:39:4a:8c:a5:dc:35:cb:cb:7c:
         44:ac:5e:f3:24:43:de:62:de:05:fb:d2:d6:4c:7d:cd:2d:c8:
         f8:55:bd:dc:a2:1a:f0:5b:05:9d:b8:73:67:39:2a:68:04:98:
         70:f3:5d:a1:c5:0d:81:8e:e4:68:bb:2b:8b:8a:72:ed:d0:87:
         ac:07:73:81:47:51:c4:15:20:49:6e:e7:ff:47:36:2c:00:f4:
         ab:53:74:d5:bb:59:4b:42:85:91:8b:28:97:23:6d:28:b3:08:
         df:17:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org