Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          uCZuwZ4tQ7HptVRiCANtMG+6h3DQzJqfufiUFJqntuk=
Subject key identifier:   C7:15:B3:A5:E0:16:F5:65:8E:4F:E2:5C:DF:D1:0C:1D:76:08:5C:B0
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       7BA4C6F0A79686E504C8B9EA411A0FF0631E59BC
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a4:c6:f0:a7:96:86:e5:04:c8:b9:ea:41:1a:0f:f0:63:1e:59:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=C715B3A5E016F5658E4FE25CDFD10C1D76085CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:fc:97:8b:e3:3e:e0:38:45:b9:62:58:ed:
                    b3:5a:a1:70:72:d8:8c:0f:85:1c:0c:da:59:db:ff:
                    0c:07:ac:36:87:03:e6:5e:07:8c:46:69:49:88:69:
                    34:3e:03:27:0d:a0:e3:1f:04:bc:19:ee:30:71:20:
                    e2:d3:cd:23:0b:06:c8:03:81:1f:22:9f:29:36:a9:
                    16:85:47:f7:6a:d9:1d:3a:34:92:48:d3:b1:38:26:
                    ec:1e:ca:27:2d:44:cb:da:df:91:70:1e:a1:cb:42:
                    31:33:81:9c:c7:5f:e1:c2:7e:6b:37:91:26:04:77:
                    16:84:58:44:f3:1c:9f:25:a0:84:f6:3b:e3:3f:d4:
                    ff:f5:90:70:4e:1f:9b:2c:1d:67:4f:19:8e:c8:b8:
                    f6:e8:a0:0f:01:c4:d2:84:99:62:b8:1e:9d:67:13:
                    bb:4b:cd:f4:09:aa:68:36:e4:e7:98:95:b4:f6:c7:
                    2c:d9:03:d3:0b:4f:36:de:44:9a:96:a3:eb:8a:5d:
                    fc:92:4a:f4:a9:98:27:11:9b:d5:15:14:1b:e1:0e:
                    b6:48:1d:b5:2a:d5:6a:80:fd:fb:6a:ec:66:76:2d:
                    87:72:87:b4:32:e1:2c:e0:b9:b2:2a:76:85:47:0a:
                    81:f5:a5:ad:f5:61:ac:07:2b:1d:b2:0d:ea:54:92:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:15:B3:A5:E0:16:F5:65:8E:4F:E2:5C:DF:D1:0C:1D:76:08:5C:B0
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:80:56:ce:dd:97:dc:63:db:3b:0b:d7:81:e8:52:c7:e5:1b:
         34:5e:80:01:08:b8:6d:4f:80:83:31:43:c2:aa:3c:29:fd:e4:
         ed:bb:d4:55:de:0d:ed:5a:a8:61:75:62:c3:0c:51:d0:a6:31:
         ac:08:e2:14:12:8c:7d:e0:86:f1:82:62:42:9b:79:9c:92:3a:
         33:db:e5:aa:62:b3:19:3f:85:88:83:86:cd:78:8b:fb:fe:f3:
         e8:88:69:91:1f:68:8e:55:1d:53:77:2c:e7:a4:48:78:36:48:
         d8:f5:d6:bd:65:42:7d:e7:e8:96:ff:2c:e7:09:8d:1b:4c:79:
         f1:ab:14:69:5a:c3:0d:d0:16:1f:05:84:79:9d:51:e1:72:3b:
         4c:a5:6e:68:7d:df:4b:99:2e:95:f9:02:a7:b6:31:2e:88:e5:
         0f:22:3d:08:5f:db:13:f0:a6:4b:4f:a7:df:85:df:2c:0b:7e:
         f2:f9:08:a1:d8:ce:6b:49:13:75:17:d9:c4:a7:f1:17:ff:f1:
         0f:53:fe:ff:81:97:68:24:14:11:d8:d9:89:91:e6:6c:a4:7f:
         1e:8f:48:1a:2f:b8:45:45:8b:68:54:8f:bd:f4:57:2f:c6:5e:
         93:fa:cf:1f:1e:42:9a:91:77:17:d1:b7:90:72:33:75:02:32:
         20:e3:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org