Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          ubyRb2cRgBa8DzKPB8PxoG9ygH9Xn4PZlIX/YmvZmbE=
Subject key identifier:   08:53:55:5B:56:77:15:CA:12:98:0F:FE:FF:83:46:1B:5C:49:50:2B
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       165A707825296B3EC1C116C676A2A20347D7F7DD
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:70:78:25:29:6b:3e:c1:c1:16:c6:76:a2:a2:03:47:d7:f7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=0853555B567715CA12980FFEFF83461B5C49502B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:56:4c:a3:0a:21:02:32:a9:95:93:47:89:
                    58:18:c5:3a:e3:60:a6:0c:c1:2d:3d:4d:e2:5b:4a:
                    97:c2:a3:03:2a:e8:52:8e:46:d6:0c:58:b6:64:a6:
                    0a:7f:b1:6a:9a:fd:13:09:18:92:10:b0:00:e8:59:
                    71:65:35:3d:02:67:32:1f:59:44:f4:8f:c8:f8:ec:
                    bf:4b:3a:d3:91:7a:fa:53:d2:34:20:06:a5:1d:3c:
                    66:b8:fc:e5:5c:74:a9:0f:97:50:fc:74:76:a6:97:
                    cd:5b:6e:fc:0d:0c:99:7e:b4:a4:7a:9e:a7:df:14:
                    46:3a:0f:3f:ae:3d:03:6a:3e:87:cc:d2:47:86:cd:
                    92:dd:7c:98:98:f1:66:a5:d7:18:52:d5:67:1a:08:
                    97:6c:cb:5d:08:8e:f8:f1:64:f7:b6:fc:ee:59:8e:
                    6d:9e:d0:12:d7:e9:7d:30:d2:7a:cf:a8:1b:05:fb:
                    64:2a:40:78:5a:b0:ce:6b:67:50:4f:ef:a4:18:fc:
                    b6:44:63:26:aa:74:c1:20:ba:11:89:63:f2:ed:d3:
                    09:c1:1d:e3:46:f7:8f:b1:a6:fd:4f:fb:1e:fc:b0:
                    73:de:51:88:db:e1:df:f4:c8:27:3d:96:de:03:70:
                    e8:96:62:e4:18:5f:4a:49:8a:df:d8:ec:5a:75:9d:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:55:5B:56:77:15:CA:12:98:0F:FE:FF:83:46:1B:5C:49:50:2B
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:15:c8:e5:96:a8:b2:aa:00:53:5e:6e:31:04:5a:ec:dc:e7:
         15:b4:10:42:d2:12:21:6c:a0:d1:7b:a7:0c:d9:29:91:cc:33:
         a0:ad:a7:de:d5:47:5b:f2:9c:2a:ba:1b:59:3f:37:29:f1:b9:
         c4:04:28:dc:fc:c8:21:de:ff:01:73:ce:8f:57:64:09:2d:f5:
         36:60:77:9e:e9:d3:51:4c:d4:41:1c:54:5a:c7:75:5c:a2:0a:
         97:d0:17:a4:be:0d:82:d8:b6:d2:a7:cd:be:b2:8f:53:37:c4:
         c0:42:65:b8:69:95:6b:bb:7a:8b:04:88:6f:ad:8d:d9:62:0a:
         30:4f:05:11:a1:b9:6a:45:c4:26:9a:d0:d0:b0:8a:04:7d:12:
         56:a8:08:b0:4a:c8:17:08:ae:fa:13:6f:3e:e9:c1:d6:1b:51:
         49:88:92:9b:0e:2b:e8:e6:b1:7e:46:16:15:c3:b7:16:8b:94:
         09:3d:7c:38:0f:d2:de:3d:55:c7:c3:2d:ba:cb:27:7a:9f:e9:
         79:99:5c:1d:a4:f0:2c:97:f3:59:e7:05:68:95:bf:da:6e:05:
         b9:a7:a9:08:41:a7:fa:a1:b8:f3:d7:42:0d:4c:51:35:f3:78:
         88:35:40:fd:33:b0:aa:bb:25:7b:07:c9:88:09:35:b9:db:ea:
         b5:d8:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org