Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32342d3234203d3e20323632333136.roa
File:                     3133382e3131372e3139342e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          9S543YeBrxPQ2OlrlV+NMgIp/qzw2lcDU06ldiyewxY=
Subject key identifier:   92:16:69:AC:DB:47:E9:57:23:75:C4:DE:C4:75:05:07:87:07:C6:82
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       29BE32ABCA4F9D4738C3E76E4C257DABC21B6408
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:37 +0000
ROA not before:           Mon 21 Aug 2023 13:21:37 +0000
ROA not after:            Mon 19 Aug 2024 13:26:37 +0000
asID:                     262316
IP address blocks:        138.117.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:32:ab:ca:4f:9d:47:38:c3:e7:6e:4c:25:7d:ab:c2:1b:64:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:37 2023 GMT
            Not After : Aug 19 13:26:37 2024 GMT
        Subject: CN=921669ACDB47E9572375C4DEC47505078707C682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:5a:bc:57:65:37:ba:32:b7:e7:de:8d:64:
                    79:e0:52:dd:4f:71:fc:6d:3d:e9:65:00:ce:bc:65:
                    56:d4:25:6f:b7:87:52:52:c5:ad:27:11:e6:9c:cd:
                    d2:7c:c7:fe:9b:59:6d:1b:11:0d:20:18:76:03:5a:
                    a3:01:d5:12:06:0e:45:fd:a9:91:ed:6c:19:49:a1:
                    aa:6e:37:9b:70:38:ce:76:30:14:ae:9b:b2:54:09:
                    73:99:5b:ee:4d:f5:ca:fc:bc:f0:6f:a7:6f:10:fb:
                    d2:0f:08:03:6e:52:f1:6e:6a:af:a3:d4:04:41:7f:
                    30:93:7d:0e:44:ad:ba:65:07:88:0d:6d:43:5e:88:
                    db:e2:81:5a:81:d7:b0:d5:18:a7:6f:b2:e4:82:e4:
                    49:4b:78:96:a5:85:58:af:43:17:ea:ec:fd:e8:00:
                    c0:54:ce:b7:23:aa:7e:62:dc:6d:20:43:7d:f0:0c:
                    bf:14:23:a5:14:d7:e8:5a:ee:03:e0:17:a8:d5:a0:
                    9b:25:19:c1:61:fd:64:3f:ae:83:b0:64:07:83:4f:
                    b2:db:34:cc:9e:b5:cb:d8:f2:c0:cc:6f:a6:9a:58:
                    f4:73:29:0e:ab:cd:39:b5:2d:87:df:b0:6c:4b:c6:
                    64:d7:00:a8:0e:b9:c1:5d:73:02:e4:13:3e:26:89:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:69:AC:DB:47:E9:57:23:75:C4:DE:C4:75:05:07:87:07:C6:82
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:1f:b7:be:b1:9e:76:d6:fa:7c:d4:c7:3e:0b:5c:08:f2:fe:
         f7:39:f6:ae:94:cb:bb:a8:ac:9d:2b:cd:71:68:f8:68:fd:0c:
         23:ae:63:aa:8d:be:5f:ce:df:56:9c:e7:7a:81:c9:2f:52:09:
         96:95:3c:2c:08:68:10:e6:99:a6:8b:51:20:70:d2:39:33:90:
         af:12:46:40:08:33:00:07:ce:e3:fb:a6:c3:3f:a7:b7:e6:c8:
         1c:89:6c:f4:d5:2f:7c:5c:a9:17:85:de:5c:ed:29:c3:ee:91:
         4e:b5:9f:18:58:e2:47:86:ad:0a:ed:bc:51:13:d3:33:35:5d:
         e4:14:6c:a2:f7:ec:1e:77:94:de:81:fd:34:0b:fe:c7:7c:72:
         ec:34:85:ec:ae:4f:38:70:bd:28:b2:90:b2:42:f2:0f:d8:cf:
         78:ff:1c:cb:5e:6a:61:ad:2d:a7:04:7c:50:89:11:4d:71:76:
         b4:de:04:2e:2d:d4:59:d0:b9:3f:8f:81:81:ab:4c:22:4e:79:
         a3:c0:02:6e:db:28:6f:76:71:a0:e7:ca:9f:b0:17:37:18:b6:
         d6:1b:7e:60:f6:1b:3b:c3:80:53:78:d1:d5:d7:3f:30:ba:fc:
         1b:32:6b:62:e0:da:0a:03:b8:02:38:cf:ca:37:36:57:93:85:
         56:3f:e4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org