Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32342d3234203d3e20323730363632.roa
File:                     3133382e3131372e3234382e302f32342d3234203d3e20323730363632.roa (raw, json)
Hash identifier:          HWMe4rMB8DJBDO5DT229+9u8l2DdYmj74SeNrJdT4Ng=
Subject key identifier:   02:73:61:7A:DE:F3:00:E5:A3:C5:0A:AC:61:A6:E4:E1:1C:40:2B:BE
Certificate issuer:       /CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
Certificate serial:       54E952DA777E31E2B8B07CBE56F8C8E3614D0C3E
Authority key identifier: 4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32342d3234203d3e20323730363632.roa
Signing time:             Mon 09 Oct 2023 13:48:07 +0000
ROA not before:           Mon 09 Oct 2023 13:43:07 +0000
ROA not after:            Mon 07 Oct 2024 13:48:07 +0000
asID:                     270662
IP address blocks:        138.117.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e9:52:da:77:7e:31:e2:b8:b0:7c:be:56:f8:c8:e3:61:4d:0c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
        Validity
            Not Before: Oct  9 13:43:07 2023 GMT
            Not After : Oct  7 13:48:07 2024 GMT
        Subject: CN=0273617ADEF300E5A3C50AAC61A6E4E11C402BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:1d:60:fc:51:25:e2:28:00:e3:69:67:bb:
                    80:a2:33:71:e2:4f:f5:46:6f:f3:59:66:48:c5:0e:
                    9d:5f:10:81:37:33:32:3f:d1:da:d6:f3:ca:18:31:
                    15:75:2b:f8:01:e1:ac:ad:c6:2a:17:a9:a3:37:64:
                    e6:c2:9b:03:0f:be:0f:88:7e:e4:97:30:44:cf:16:
                    bf:77:72:aa:f0:1f:ea:14:1a:56:aa:29:06:96:cc:
                    e3:16:0d:51:02:f5:b0:e9:27:ef:cf:18:ca:e7:db:
                    07:a2:b3:80:88:47:84:5c:81:4d:ae:fa:7b:53:58:
                    d8:05:a9:e3:11:7b:9c:8c:5e:da:eb:2a:5b:53:44:
                    93:c1:f5:f4:18:21:4f:50:92:54:ed:ed:b2:d1:a4:
                    a1:bf:33:e8:e3:3b:66:36:09:1b:b2:84:b5:86:ef:
                    7c:a0:1d:07:2d:61:52:a0:2e:00:fb:48:bf:36:30:
                    ed:48:3a:9c:eb:7f:7f:94:92:1f:2a:54:51:91:4d:
                    19:3b:75:97:06:3d:37:3e:1b:2b:f0:33:17:ab:a0:
                    8d:0f:fb:e7:b2:96:92:14:8b:cd:e4:af:9f:80:22:
                    ae:f2:10:3f:82:ba:73:f2:87:33:8a:cb:68:b5:96:
                    25:f3:a9:cb:6a:c5:d6:63:e2:d0:1e:2a:c2:da:ae:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:73:61:7A:DE:F3:00:E5:A3:C5:0A:AC:61:A6:E4:E1:1C:40:2B:BE
            X509v3 Authority Key Identifier:
                keyid:4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32342d3234203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:c2:f8:55:21:4e:69:1e:f9:cf:a2:89:0b:76:d9:81:62:
         00:2f:41:ba:4f:41:93:42:27:e0:42:12:77:84:75:98:c1:ee:
         59:b8:5e:c1:61:af:69:c4:e7:f0:07:ee:ea:46:1d:2b:e3:d9:
         94:8b:95:eb:71:1a:66:60:21:54:f0:62:b5:e0:be:ed:d0:c9:
         9b:50:72:79:7a:04:f7:5a:71:aa:a7:99:0e:b4:ba:12:c9:8e:
         3c:50:36:b8:7c:0d:1f:68:db:1c:be:15:26:50:a8:23:37:b7:
         f2:76:8e:ea:f6:7b:11:dc:b6:76:85:04:86:a9:fe:dd:d1:2f:
         a7:4e:31:27:16:d9:eb:6d:22:2a:25:a7:cb:e5:8d:e8:8f:40:
         8c:8d:f4:85:b9:0e:88:24:6a:3a:13:38:ee:9f:f1:89:a5:ca:
         0d:cf:b3:0d:0b:c5:10:21:ee:e2:54:4b:5b:e6:3e:8e:c7:4a:
         9b:b1:29:46:b3:87:24:65:d4:2e:df:45:9c:b6:7e:55:53:5b:
         72:d1:67:cd:73:12:93:93:50:3b:00:0f:dd:f3:f8:71:d9:93:
         82:09:68:6f:67:d9:44:5d:a0:7b:93:49:07:7a:37:e5:95:9b:
         f6:a4:20:52:1d:23:aa:8b:53:17:ec:8b:9d:5e:8a:f3:2e:29:
         7a:0c:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org