Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3234203d3e20323730363632.roa
File:                     3133382e3131372e3235312e302f32342d3234203d3e20323730363632.roa (raw, json)
Hash identifier:          lBt0MX2lRnlFMH7B9TZCqOxhGg8mnx5oLJTDueJLXVM=
Subject key identifier:   A0:D0:98:E2:CA:24:F3:13:67:9C:B6:65:2C:F8:52:A0:43:18:D7:23
Certificate issuer:       /CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
Certificate serial:       0B07A8A8CF70F1C94B3EEAAA445B5F868236D5F4
Authority key identifier: 4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3234203d3e20323730363632.roa
Signing time:             Mon 09 Oct 2023 13:48:25 +0000
ROA not before:           Mon 09 Oct 2023 13:43:25 +0000
ROA not after:            Mon 07 Oct 2024 13:48:25 +0000
asID:                     270662
IP address blocks:        138.117.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:a8:a8:cf:70:f1:c9:4b:3e:ea:aa:44:5b:5f:86:82:36:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
        Validity
            Not Before: Oct  9 13:43:25 2023 GMT
            Not After : Oct  7 13:48:25 2024 GMT
        Subject: CN=A0D098E2CA24F313679CB6652CF852A04318D723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:29:f2:bb:77:3c:94:f7:87:b4:96:b4:cb:
                    c7:ce:66:1f:a6:b3:ee:15:01:96:4e:9b:cc:7c:5a:
                    20:22:84:f5:b0:2b:fa:fd:33:4d:53:49:f6:76:f8:
                    26:86:4b:16:c3:3d:8d:a5:b6:e4:78:ed:05:35:bd:
                    85:1e:8d:a1:b9:f8:4f:05:40:5b:c3:b3:af:6a:a1:
                    07:c3:81:7e:ef:c7:d7:e6:a7:67:31:7b:05:4a:e1:
                    b6:25:09:b6:1e:1d:12:d7:a5:fd:f9:d8:b4:37:ed:
                    e4:ea:a8:52:04:db:6f:61:6b:81:18:a3:7d:81:2b:
                    43:99:e0:77:cb:1a:66:c4:d8:d8:88:81:aa:80:9b:
                    bb:d6:45:0e:6b:1e:d2:3b:47:c0:d2:1a:00:9a:cb:
                    56:b1:5c:86:f3:1c:87:5e:6a:a2:d8:ae:24:11:af:
                    62:4e:e2:1e:6c:8f:d1:69:f4:81:ac:e9:2b:17:d1:
                    73:1b:c1:b9:51:05:24:43:74:4e:bc:64:25:af:e7:
                    3e:c7:a9:70:c5:45:14:2a:23:cd:74:d8:ea:4a:0b:
                    fa:62:bf:bf:0d:71:5e:80:7b:1c:67:97:29:4a:84:
                    bf:74:6e:60:dc:9f:59:41:6a:ff:7a:6a:6e:c1:be:
                    37:46:b5:e7:2b:0c:25:c2:9a:ae:30:0d:79:1c:4e:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:98:E2:CA:24:F3:13:67:9C:B6:65:2C:F8:52:A0:43:18:D7:23
            X509v3 Authority Key Identifier:
                keyid:4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3234203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:c8:c8:a6:f2:56:4c:df:09:92:e2:78:34:a1:e9:0d:23:
         c7:d2:a2:c6:4b:dc:55:4a:15:b2:c7:65:fa:ed:1e:f2:fb:c9:
         56:34:9d:2f:84:f9:81:1e:64:e1:69:d8:6a:3d:18:db:cc:11:
         64:f7:04:82:74:62:2c:84:cc:cf:1e:77:90:13:18:10:d1:7b:
         68:51:e6:c6:76:38:64:f2:26:49:0c:f1:de:28:de:6f:c6:65:
         10:73:dd:2d:97:da:f0:92:11:50:1c:20:fd:11:18:b8:df:2c:
         87:c8:e5:2f:13:d6:c4:a7:ed:3b:c3:99:ee:57:d4:12:b6:c1:
         86:fc:52:fe:17:12:a6:d1:e6:7f:41:c3:27:56:ba:e2:1e:ea:
         bc:c7:cb:ab:58:7c:5a:62:d2:46:42:8b:2e:ae:77:97:75:69:
         23:63:9f:92:43:6d:e8:b7:7c:7f:0d:94:45:bd:dc:f1:e2:3b:
         ef:89:78:07:f8:9b:7a:1e:19:33:30:54:93:da:a1:d3:81:c9:
         d8:9a:4c:bc:63:c6:5a:89:b5:cc:64:bb:ac:93:bb:be:87:64:
         b4:85:ca:a4:80:e5:30:28:dd:38:8a:8c:1e:f8:29:e2:8e:af:
         35:56:f0:38:a0:f0:4e:48:2c:73:cd:56:41:e1:0a:ac:6e:d5:
         aa:dd:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org