Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139352e302f32342d3234203d3e20323632333136.roa
File:                     3133382e3131372e3139352e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          Z+PiYouSYhn4pa6aDRlv1jg+WLMHeCzGwNYIjkZeJJ4=
Subject key identifier:   A9:21:FB:63:30:47:4A:2B:04:0A:EC:62:BF:EB:25:20:8C:3C:9C:8B
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       6453EA82881343DDEF22348863EAF9E78668E4CB
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139352e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:37 +0000
ROA not before:           Mon 21 Aug 2023 13:21:37 +0000
ROA not after:            Mon 19 Aug 2024 13:26:37 +0000
asID:                     262316
IP address blocks:        138.117.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:53:ea:82:88:13:43:dd:ef:22:34:88:63:ea:f9:e7:86:68:e4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:37 2023 GMT
            Not After : Aug 19 13:26:37 2024 GMT
        Subject: CN=A921FB6330474A2B040AEC62BFEB25208C3C9C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:05:9b:f7:1f:9b:12:9d:93:3c:fc:b7:58:
                    96:16:67:06:8b:8b:82:20:49:99:ad:b3:e4:b9:c7:
                    7a:1a:ee:1d:d6:81:96:04:8a:cc:82:1b:f0:bf:d7:
                    58:f3:f5:52:19:fd:11:8a:df:69:4f:85:b1:89:01:
                    c3:5b:5b:74:66:d3:d2:23:2c:57:7f:62:19:d4:1e:
                    30:e0:57:1b:45:5a:6a:ea:a5:1a:33:90:a8:fd:0e:
                    f0:f2:b5:25:ae:36:31:eb:7a:75:47:99:ad:59:36:
                    86:59:84:43:eb:34:db:27:13:ca:e1:0a:9b:52:ba:
                    17:7f:03:23:f7:2b:0a:cf:6b:b1:83:dc:47:57:e8:
                    cb:27:4e:e0:f2:e4:fc:69:d8:3e:1f:1d:b4:29:2d:
                    80:c8:2b:29:c8:94:8a:e8:30:92:b4:2f:a4:c3:59:
                    ec:68:06:57:72:e9:53:28:9f:2e:50:1f:f7:bb:b4:
                    21:d6:28:df:fc:b1:92:fe:27:0b:27:bf:72:b0:05:
                    cb:64:1b:39:d7:c0:ef:16:56:d4:2c:20:b4:ff:62:
                    54:d0:dc:ff:38:b5:68:66:13:fd:75:9b:92:d6:72:
                    76:65:3a:55:d7:34:fe:43:55:66:c6:da:48:a6:d2:
                    01:10:61:b8:c8:ec:5d:d1:28:35:17:c4:54:33:a8:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:FB:63:30:47:4A:2B:04:0A:EC:62:BF:EB:25:20:8C:3C:9C:8B
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139352e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:cc:b9:f8:1c:04:43:6d:41:b6:e3:63:ea:af:a3:52:2c:
         36:43:03:50:3c:b9:9e:6b:b6:81:27:c6:ac:68:d6:0d:c4:78:
         f0:a5:27:cf:8b:cc:62:0f:5d:88:8c:a7:e4:ef:f8:d7:96:cf:
         40:01:98:6d:ee:89:ea:b3:6f:15:b1:0a:0d:9b:93:13:4a:e2:
         41:5f:d1:8d:da:d2:cf:b4:24:26:75:f6:02:0c:0e:ff:0c:ad:
         53:2e:67:01:35:52:82:b5:59:fd:a8:7e:9d:04:84:49:ae:2c:
         49:8f:5d:f7:0c:5b:ee:cb:0d:7b:7f:76:96:b7:49:ea:51:19:
         f4:25:95:c5:f1:4b:0c:76:9e:f0:9e:ba:5c:74:1b:0a:54:65:
         55:e8:5e:96:1a:da:06:0d:e8:92:37:01:eb:23:b1:c3:31:b5:
         74:06:e0:94:2c:7e:24:ef:e6:56:40:9a:fe:53:df:db:45:bb:
         84:c1:da:1c:d4:95:e6:38:7f:23:21:d4:3c:68:24:90:8b:aa:
         28:59:ee:84:00:80:c6:7b:71:c3:0a:45:d7:86:3b:ea:dd:09:
         32:b8:dc:a8:0b:2a:86:fa:a5:54:64:97:a6:11:aa:55:b1:28:
         cf:64:10:f4:c1:de:b4:ae:8c:f3:de:e2:59:1c:ce:57:c6:e9:
         a8:82:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org