Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
File:                     3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa (raw, json)
Hash identifier:          vGheHH0xp0LzYQuHmKnwcoLl4ZK13bRFPqiWMJ4Na8Q=
Subject key identifier:   B9:83:28:15:DC:B8:33:5B:36:D5:40:6A:0D:8A:58:48:EF:26:B5:13
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       1E0AADE01E2E7058F2C616DF1BBC01F2A94BD669
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0a:ad:e0:1e:2e:70:58:f2:c6:16:df:1b:bc:01:f2:a9:4b:d6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=B9832815DCB8335B36D5406A0D8A5848EF26B513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:fb:89:cf:d0:a4:6f:e4:5a:96:9a:e7:da:
                    8d:81:ab:80:43:3e:53:60:fc:60:e2:c5:77:87:43:
                    83:4c:12:cc:0d:14:cb:4a:2d:c4:67:91:3a:f1:9a:
                    b3:b6:eb:66:9f:b1:94:00:a1:f7:91:ea:d7:d9:f6:
                    b5:da:64:c3:e7:6d:71:60:ee:40:0d:dc:47:22:a0:
                    fe:d5:d2:68:c8:0d:45:88:d0:30:e8:20:4c:d4:c4:
                    35:5e:ae:e7:5d:a2:53:0d:96:9f:31:7b:21:9f:5f:
                    cd:fb:62:a5:02:ec:58:5b:33:4c:88:87:6f:88:5a:
                    84:0e:df:e7:a8:c4:1f:b4:9e:6b:4e:8c:44:f3:e2:
                    d2:e0:4c:e9:29:94:a8:b7:65:4f:bd:bc:d3:26:3e:
                    56:37:c0:23:6f:03:c5:fd:db:c1:11:6e:e9:48:69:
                    ce:81:e8:8a:66:a7:93:a7:c8:2f:dc:cf:8e:68:43:
                    46:e4:49:e7:64:97:47:d0:62:ab:6c:68:c6:ae:79:
                    02:98:9b:0a:74:57:14:c5:8c:bd:dc:f7:8a:79:ee:
                    8a:f3:df:8b:2e:05:ce:3f:be:7f:d5:ab:a1:a2:6e:
                    6d:89:bd:d2:71:d0:e2:e2:64:3a:33:22:1f:72:f8:
                    e0:71:46:c5:22:3a:f3:4c:82:bb:85:88:68:1b:df:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:83:28:15:DC:B8:33:5B:36:D5:40:6A:0D:8A:58:48:EF:26:B5:13
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:71:79:1a:b9:ff:39:e2:eb:9c:dd:6e:2f:cc:b8:b4:92:
         a6:2b:86:95:11:26:27:32:6a:58:75:91:41:43:05:bd:80:af:
         fd:b5:e7:a0:ba:ff:17:0c:55:6f:32:fb:16:00:7a:48:67:08:
         b6:00:61:84:9b:8d:3b:29:40:8c:dc:4d:40:f1:76:a5:e6:51:
         64:68:f4:58:59:2a:3e:1c:a6:78:c6:73:ea:04:8d:71:99:e8:
         19:ff:3c:87:a5:4f:07:fe:f5:f5:6d:d6:bf:d9:8c:ba:6b:7b:
         87:10:22:0c:d3:11:e7:19:f0:42:4e:b8:29:05:f1:1b:cf:69:
         05:55:b6:c4:7d:e9:55:55:0a:cb:eb:16:87:52:3d:82:70:32:
         76:dc:8d:86:8f:03:10:56:42:60:14:b4:a7:aa:66:8d:86:0b:
         2e:8e:82:ae:77:c8:0c:93:52:b4:02:49:10:fc:df:0e:84:00:
         9c:f9:88:ed:07:d0:0a:5b:55:a0:e4:fd:1b:79:08:ad:62:9e:
         9a:ce:a4:41:2c:91:45:34:c5:be:61:d7:20:10:dc:71:60:ea:
         b6:4c:6d:c9:94:85:b0:3b:58:40:c7:fc:97:fe:49:16:03:c6:
         6d:c1:98:53:26:f9:61:7e:ca:5f:93:e0:bc:23:40:ad:e9:89:
         d0:9f:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org