Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa
File:                     3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa (raw, json)
Hash identifier:          /8MHPZefC24uXjpxmDZqCzSH32xdR6BrZZuX0tAN1mk=
Subject key identifier:   90:57:73:6C:18:D6:47:8A:A8:17:E3:31:F1:2D:6D:56:DF:88:38:CD
Certificate issuer:       /CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
Certificate serial:       71C13DBC03FD2635EEBA265C297E257CBF4ACB20
Authority key identifier: D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa
Signing time:             Thu 16 Nov 2023 13:16:00 +0000
ROA not before:           Thu 16 Nov 2023 13:11:00 +0000
ROA not after:            Thu 14 Nov 2024 13:16:00 +0000
asID:                     263902
IP address blocks:        138.204.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c1:3d:bc:03:fd:26:35:ee:ba:26:5c:29:7e:25:7c:bf:4a:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
        Validity
            Not Before: Nov 16 13:11:00 2023 GMT
            Not After : Nov 14 13:16:00 2024 GMT
        Subject: CN=9057736C18D6478AA817E331F12D6D56DF8838CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:b8:1a:70:cf:c8:96:ff:e1:f3:ab:6c:5b:
                    da:2f:f4:20:37:48:4d:9c:11:21:93:37:c2:b9:c3:
                    16:63:48:79:2c:57:ac:3f:6b:02:4d:11:70:15:94:
                    ff:8c:c3:b4:e0:11:45:9e:9d:68:b3:89:7f:09:93:
                    bd:c4:2b:10:eb:af:7e:e5:56:2a:cf:34:e5:8b:9c:
                    c0:cc:38:a3:e2:1b:60:85:64:b2:a4:54:72:43:8f:
                    ce:39:1d:23:0c:86:a9:87:8d:ff:10:52:1b:d4:47:
                    a1:eb:87:15:69:41:25:8f:7a:a5:0b:11:5e:4b:c0:
                    b2:a8:b5:b5:1c:80:f3:1c:7c:17:76:6e:94:11:e7:
                    c0:96:7d:99:89:98:52:9f:47:01:d1:dc:67:8b:8a:
                    66:93:70:5d:de:5a:a8:4a:c8:e1:48:4c:5b:d7:84:
                    9a:cb:ef:9d:e8:40:55:b4:ba:29:68:7c:e8:53:3d:
                    56:52:33:be:b1:a6:42:fc:57:26:f0:de:dd:1d:84:
                    0f:25:77:50:84:98:db:bd:91:bf:3c:37:74:ea:f9:
                    c4:48:a7:9d:e8:63:6f:b2:76:6f:2a:1d:e0:32:a4:
                    6d:3b:6d:5a:83:d1:8b:a0:d1:b3:df:14:e6:99:ae:
                    27:ae:be:3a:5d:b7:c3:ce:ca:6f:3b:61:1e:cc:80:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:57:73:6C:18:D6:47:8A:A8:17:E3:31:F1:2D:6D:56:DF:88:38:CD
            X509v3 Authority Key Identifier:
                keyid:D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3232203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:06:31:1b:c7:71:80:f9:90:42:26:ca:e8:8b:be:77:ed:a2:
         e8:12:3d:0a:eb:0b:0f:dd:55:a7:cf:59:d7:9f:25:f6:65:0f:
         1e:27:3f:e7:65:c1:81:44:77:40:76:d9:69:08:9c:2a:e1:f7:
         48:83:a9:b6:25:2b:f6:07:2b:56:e8:d6:f5:48:f2:c5:23:f5:
         4e:12:72:65:80:a2:26:08:b8:d5:e7:fb:c1:33:62:41:60:ac:
         36:e0:7d:7b:fe:13:21:08:de:99:f8:dd:a2:e1:3f:b6:08:dd:
         71:aa:c8:09:8f:0a:9b:f0:df:0b:36:92:ed:73:1c:31:54:2e:
         82:11:14:a1:9b:4b:0d:c6:91:06:44:11:4f:29:7f:b4:ed:0a:
         20:30:de:00:a9:39:67:2f:ef:09:20:d7:63:8a:05:c0:18:8c:
         e9:6f:4c:90:85:21:2f:22:4c:b5:64:93:25:ca:95:54:07:a5:
         ff:89:a2:38:23:7a:5f:64:28:f2:b0:42:81:5d:4d:6a:e4:d4:
         5d:cd:9a:23:9f:c4:34:e6:8f:1c:2b:07:7f:c6:5a:80:42:82:
         42:1e:af:25:46:8b:26:eb:18:28:67:a9:19:c7:31:d2:be:64:
         d7:4e:4f:f3:92:bb:e8:5e:3d:05:78:92:16:47:1a:56:11:40:
         a0:63:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org