Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139332e302f32342d3234203d3e20323634313333.roa
File:                     3133382e35392e3139332e302f32342d3234203d3e20323634313333.roa (raw, json)
Hash identifier:          rIJyP0Nqyzr1D5+VPqb8KxbCzwAFH9a3KCdr5HmAnm8=
Subject key identifier:   01:D4:2F:1F:E7:85:05:69:BC:1A:23:49:85:59:FA:3F:42:14:B7:FE
Certificate issuer:       /CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
Certificate serial:       411E1B1ED0689E7C44E6CA0EBEDDD35AA54D60B9
Authority key identifier: 7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139332e302f32342d3234203d3e20323634313333.roa
Signing time:             Tue 06 Feb 2024 17:08:03 +0000
ROA not before:           Tue 06 Feb 2024 17:03:03 +0000
ROA not after:            Tue 04 Feb 2025 17:08:03 +0000
asID:                     264133
IP address blocks:        138.59.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:1b:1e:d0:68:9e:7c:44:e6:ca:0e:be:dd:d3:5a:a5:4d:60:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
        Validity
            Not Before: Feb  6 17:03:03 2024 GMT
            Not After : Feb  4 17:08:03 2025 GMT
        Subject: CN=01D42F1FE7850569BC1A23498559FA3F4214B7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:41:ff:f1:02:6c:42:4d:b7:76:15:e5:ff:f1:
                    c3:66:d4:ea:9c:f2:92:1a:14:51:ab:0b:a7:31:1d:
                    e7:f7:a8:86:e0:85:55:a1:b3:70:f6:41:5f:11:33:
                    db:a6:97:bf:16:b3:68:a2:e9:65:29:8b:73:9f:b7:
                    d9:eb:b5:c7:19:bc:eb:e3:9e:d6:4f:fc:0b:b9:1a:
                    46:ae:8c:b9:65:45:98:e8:79:b7:52:0c:a5:6a:19:
                    7a:d4:53:63:c3:87:70:df:f9:7e:a6:4c:9b:25:ab:
                    14:e0:39:d6:0e:ca:a5:97:fb:a6:ba:4a:e1:cc:12:
                    ec:a5:cc:a7:5b:0b:07:e0:81:85:22:cc:56:4f:21:
                    e2:8c:78:19:06:b8:45:80:62:23:b3:6c:6e:23:52:
                    ab:6f:bd:7c:de:b6:74:dc:56:b5:7c:67:6a:d8:e1:
                    ee:ba:5d:5e:0e:ef:32:b6:27:0d:03:ec:f3:43:28:
                    4d:20:53:53:32:7f:9e:32:40:6a:83:60:79:f1:01:
                    91:db:64:61:7f:ab:46:5e:33:0d:e1:99:e2:87:51:
                    09:33:e8:75:0c:79:fb:b6:fa:62:69:bc:da:ed:f7:
                    07:a0:53:db:32:30:65:47:79:90:88:22:3a:68:ac:
                    f7:d6:df:d2:50:39:5f:ad:cd:14:bf:6c:97:fe:50:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D4:2F:1F:E7:85:05:69:BC:1A:23:49:85:59:FA:3F:42:14:B7:FE
            X509v3 Authority Key Identifier:
                keyid:7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139332e302f32342d3234203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:75:59:63:82:5d:b6:2d:7f:f8:ee:33:42:45:a6:45:20:59:
         b3:20:11:c6:77:2e:f6:14:b1:e5:55:75:7e:ae:60:9f:4f:d8:
         16:06:09:ef:55:fb:90:42:5d:75:1d:75:27:58:be:57:77:9f:
         cd:7c:79:16:25:37:71:56:83:d6:74:0e:c7:11:58:08:be:3f:
         0c:ab:30:cc:7e:ca:65:bb:5c:d0:9c:13:47:04:99:25:85:2d:
         95:f7:b2:36:6e:0c:5a:84:e9:c2:ff:19:89:e6:d1:c5:0b:6f:
         fe:a4:3f:81:83:5c:b4:bc:73:eb:18:4f:13:43:45:7c:6e:1a:
         c4:c4:a1:27:6a:f1:87:6b:42:8f:ca:5b:ae:57:2d:e6:f0:90:
         f2:69:d0:80:ef:dc:06:db:29:d6:ee:80:98:45:75:5d:19:78:
         08:8f:e6:a1:f2:08:d2:7b:9c:e5:50:42:0b:69:85:12:fa:da:
         2a:de:8a:ba:fa:e2:66:f3:3a:91:90:7e:e0:ae:70:3a:b8:b7:
         85:75:b6:3a:3f:c2:a1:41:d8:f6:d9:fa:6c:45:5a:83:87:ec:
         c6:9c:62:5c:e6:b5:c9:db:e5:bc:91:36:aa:5d:a2:e1:29:da:
         73:52:bc:4b:78:0e:24:e0:27:f8:5d:80:61:9b:7b:cf:66:ea:
         22:9f:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org