Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3234203d3e20323730363632.roa
File:                     3133382e3131372e3234392e302f32342d3234203d3e20323730363632.roa (raw, json)
Hash identifier:          D+nGsBFY4sk7sTgrDVJkXW46QjAQFuFIEhY9ub2AFks=
Subject key identifier:   E5:81:9C:2B:0E:C5:DF:4F:CD:08:A4:5F:55:0E:5A:0D:AC:70:EE:6F
Certificate issuer:       /CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
Certificate serial:       4BE20FBD93EF383666BBA59B9C14CB5CF63D75F4
Authority key identifier: 4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3234203d3e20323730363632.roa
Signing time:             Mon 09 Oct 2023 13:48:20 +0000
ROA not before:           Mon 09 Oct 2023 13:43:20 +0000
ROA not after:            Mon 07 Oct 2024 13:48:20 +0000
asID:                     270662
IP address blocks:        138.117.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:0f:bd:93:ef:38:36:66:bb:a5:9b:9c:14:cb:5c:f6:3d:75:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
        Validity
            Not Before: Oct  9 13:43:20 2023 GMT
            Not After : Oct  7 13:48:20 2024 GMT
        Subject: CN=E5819C2B0EC5DF4FCD08A45F550E5A0DAC70EE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:9c:ec:8f:5a:52:9d:69:d1:1e:ba:59:46:
                    da:05:23:3b:50:ee:a3:f1:8a:53:be:c5:ff:a6:e6:
                    fc:e6:77:b1:5c:38:cc:d9:6d:d0:26:bb:42:a9:33:
                    20:01:a7:fe:77:48:38:e6:75:f2:ed:b6:ff:dc:99:
                    cd:fe:7a:19:4e:56:ca:ba:f1:11:bd:22:98:63:2e:
                    aa:2d:94:8e:1b:b3:e1:bd:76:a7:44:15:ab:3c:38:
                    12:d6:3a:fc:8b:bb:7d:a4:62:e0:1c:d5:17:46:5f:
                    2b:b3:2f:72:cf:90:2a:cf:c8:e2:60:f4:b3:0b:60:
                    f3:83:2e:8a:fc:8f:11:48:71:0d:01:a3:ed:79:f8:
                    95:83:40:04:f9:a0:eb:36:9f:e4:d9:fc:9e:93:76:
                    41:aa:0b:d6:88:0c:fc:1f:9f:e3:8f:e8:ef:dd:ca:
                    a8:98:bf:23:de:e9:2b:5a:ef:2b:1d:58:96:60:67:
                    34:df:61:ca:26:8d:0a:b8:51:1c:f5:c3:43:cd:f9:
                    82:8c:cc:2e:12:db:c7:0a:f9:b6:27:24:f7:5d:f8:
                    d2:f8:47:36:38:aa:b7:99:be:5f:42:6a:0e:2b:49:
                    d5:67:47:e2:29:f4:a9:fc:b2:6e:b9:c1:c0:49:82:
                    8f:2c:51:84:90:d1:61:ee:6d:04:a1:13:f1:84:1e:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:9C:2B:0E:C5:DF:4F:CD:08:A4:5F:55:0E:5A:0D:AC:70:EE:6F
            X509v3 Authority Key Identifier:
                keyid:4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3234203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:18:19:3c:bd:b4:4a:38:c5:b8:88:e4:4c:a4:d3:86:c8:
         ab:6b:03:8d:d6:82:2e:d4:1f:df:b9:0a:33:d5:56:99:eb:fb:
         6b:82:b3:f3:94:ad:77:88:51:69:5a:98:d2:ba:d4:0b:14:d8:
         3c:9c:f2:21:5d:8c:05:7c:f6:80:c3:96:64:6c:e4:90:36:ca:
         b6:83:b3:b7:ab:45:32:77:28:d0:57:75:6b:88:65:71:68:44:
         da:60:c4:d4:1f:d7:0b:8f:0b:91:f8:28:0b:92:46:9d:58:c4:
         16:af:9a:62:16:8c:7d:4f:a8:f7:70:d0:0e:f3:83:db:48:c3:
         1e:28:80:ea:af:eb:5f:c7:2f:fc:d5:1d:08:2f:32:e7:98:8c:
         43:e6:e7:8f:23:ea:77:a0:b8:a6:64:42:d9:7b:61:d8:4e:9c:
         26:48:99:63:9c:0e:fc:b3:b0:55:7d:f1:c2:79:3c:84:64:33:
         af:21:77:63:d7:aa:b2:7a:16:49:dc:b4:e7:02:57:9d:0b:4b:
         16:f8:52:05:30:74:94:be:42:fd:b2:e6:5b:ca:6a:a2:0e:01:
         98:a0:5d:c4:b8:68:94:08:0b:c9:4a:4d:5c:d7:76:27:33:15:
         e1:fe:0f:9f:03:9a:24:b3:02:89:92:24:67:fd:90:b4:64:ff:
         a9:ad:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org