Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231352e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231352e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          6uUPwgdym4K0uF6UDWdG5XIDYaYgPpv/ZHwOtjLz97c=
Subject key identifier:   CC:B0:D6:DE:DF:AD:3D:89:F7:A5:AC:A8:F6:EC:74:CE:2B:FB:39:A5
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       15697F891E5DA9B031AB77DE9A11DA28E7CDE27D
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231352e302f32342d3234203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:69:7f:89:1e:5d:a9:b0:31:ab:77:de:9a:11:da:28:e7:cd:e2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=CCB0D6DEDFAD3D89F7A5ACA8F6EC74CE2BFB39A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:71:da:d2:71:ad:66:1a:3f:f4:a7:72:0a:
                    2e:f3:59:ac:f4:f9:e6:a6:38:b8:39:9d:93:82:c0:
                    e0:8b:af:7b:c1:e8:5e:50:0f:35:ed:7f:dc:93:a1:
                    4a:14:d3:ff:b1:42:5b:d0:a2:80:bf:c0:d1:bc:f1:
                    a4:8a:f4:14:2a:37:09:6e:eb:34:da:35:5a:db:4c:
                    28:00:d6:cd:52:5f:7a:91:07:29:1a:3f:be:5f:ab:
                    ed:11:9d:3f:93:50:8b:6a:2c:52:ce:5c:43:03:fd:
                    26:b0:fb:eb:d1:8d:b2:c9:14:08:b0:33:cc:a8:f6:
                    91:39:72:fb:ed:dc:e3:00:66:22:b5:c9:c0:b5:fe:
                    f5:ff:ff:61:ae:b3:c4:fc:dc:40:5a:aa:f5:d4:9a:
                    80:d8:d5:f8:f2:77:e6:67:47:71:e8:d9:7f:7a:85:
                    3a:35:86:2a:5c:0d:5e:a0:65:24:e3:df:04:8d:3f:
                    85:54:17:58:83:b6:82:35:ac:0f:48:a5:5d:e5:b7:
                    92:43:7f:3f:84:cf:2f:3c:8c:34:d0:ba:ba:e0:8c:
                    9f:30:79:45:9b:8e:82:7b:a9:28:f8:af:05:65:ee:
                    b3:87:44:6b:13:31:38:97:f6:46:2e:da:89:dc:66:
                    6c:cd:59:6c:b3:e4:02:b4:75:4c:b6:b5:f9:69:e1:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:D6:DE:DF:AD:3D:89:F7:A5:AC:A8:F6:EC:74:CE:2B:FB:39:A5
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231352e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:18:24:12:b8:ae:63:54:23:44:2c:ff:7d:b7:fa:1c:b6:00:
         d9:56:c8:cb:34:66:4a:5f:a1:f9:0d:ec:0c:1c:34:6d:27:1e:
         e3:0e:2b:fd:6e:37:aa:c3:c3:ae:f9:60:57:d8:22:cf:81:2f:
         cd:a3:c8:9a:af:33:3d:42:86:42:f9:bb:f3:bf:49:f2:59:88:
         39:dd:db:a7:7d:78:5a:2a:95:f0:b8:0a:a5:e6:f1:df:2f:39:
         e2:25:95:a9:48:6d:4a:54:73:78:37:13:53:6e:a1:1d:f5:1a:
         da:56:53:51:0d:94:c1:5a:43:20:47:09:9a:e0:53:b1:e2:da:
         1b:d6:a9:74:d2:0e:ee:72:47:c6:4c:1a:a3:3b:17:b7:c4:62:
         ec:e1:d6:a8:c5:ae:b1:1e:5b:cf:dc:80:3d:aa:d0:47:ff:1a:
         7c:b3:fd:6d:27:a0:3b:85:81:ca:46:90:06:54:ac:42:e4:62:
         93:56:89:bb:47:9d:a0:e1:65:d2:b8:1a:ec:b3:37:30:43:9e:
         e8:5c:cc:a9:11:7f:28:41:6b:e2:05:b7:78:10:f5:7d:8b:38:
         70:26:96:0c:cf:03:fa:c1:50:2e:61:72:e2:90:10:31:b3:c4:
         c3:c3:59:5c:ba:fe:ad:b6:5d:43:15:3e:f1:cb:cf:91:f7:62:
         8c:4b:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org