Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
File:                     3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa (raw, json)
Hash identifier:          YAQ4gTtjPvo/ld9tMzOGEabfs5xsOIbyH/DND7zsndY=
Subject key identifier:   A1:9B:DA:A4:2B:E9:20:2B:14:44:82:2F:6C:67:77:2E:DD:09:BA:C6
Certificate issuer:       /CN=39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F
Certificate serial:       43B217266252961A639D055A26CE02E26EB73B41
Authority key identifier: 39:E9:F9:6C:5F:F5:7D:64:7F:0B:A0:40:AC:A9:DF:57:9D:0C:C1:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa
Signing time:             Thu 04 Apr 2024 21:34:02 +0000
ROA not before:           Thu 04 Apr 2024 21:29:02 +0000
ROA not after:            Thu 03 Apr 2025 21:34:02 +0000
asID:                     53160
IP address blocks:        138.186.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:17:26:62:52:96:1a:63:9d:05:5a:26:ce:02:e2:6e:b7:3b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F
        Validity
            Not Before: Apr  4 21:29:02 2024 GMT
            Not After : Apr  3 21:34:02 2025 GMT
        Subject: CN=A19BDAA42BE9202B1444822F6C67772EDD09BAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:89:60:ad:a9:be:6b:bc:dc:ce:77:a1:63:
                    3d:3c:76:63:15:49:ac:20:5b:16:9f:13:77:f9:1e:
                    04:ed:be:cc:04:db:45:f2:c6:26:eb:1b:25:3c:bb:
                    af:e9:0e:d1:aa:31:2f:e7:f9:29:b4:01:b8:0e:f0:
                    0a:07:7e:d6:89:70:c5:15:27:a5:1a:b5:f4:f5:c2:
                    8d:d3:fc:46:62:b8:11:c6:61:57:82:49:a1:29:01:
                    54:e6:68:4e:e2:a3:14:ee:bf:45:2a:e0:8d:34:6b:
                    f7:19:44:55:7c:17:6e:b2:35:f1:a7:f9:5f:30:94:
                    ed:3c:ea:6f:35:53:07:4a:d8:7d:6f:45:34:72:8c:
                    87:b7:e6:dc:ef:7b:06:3d:45:1d:82:ca:c5:75:8d:
                    16:2d:0d:74:10:f2:56:09:2d:1b:6c:31:0f:15:dc:
                    0c:8d:95:6d:bf:50:37:f2:29:59:e2:b3:42:c4:1b:
                    59:ef:97:bd:25:86:eb:e8:39:fd:6b:7e:29:5b:24:
                    d4:ea:5b:74:a0:42:60:2b:7a:41:d0:27:0b:ed:20:
                    82:96:b5:cc:2f:77:ec:83:a6:80:d2:6f:96:82:16:
                    28:ca:4d:8e:fb:fe:1a:a1:00:10:78:ba:4d:22:d6:
                    c9:79:e9:b6:43:ee:24:34:a7:22:98:24:e9:e0:27:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:DA:A4:2B:E9:20:2B:14:44:82:2F:6C:67:77:2E:DD:09:BA:C6
            X509v3 Authority Key Identifier:
                keyid:39:E9:F9:6C:5F:F5:7D:64:7F:0B:A0:40:AC:A9:DF:57:9D:0C:C1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9F96C5FF57D647F0BA040ACA9DF579D0CC13F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/1/3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:43:0c:2c:ca:fe:b8:37:f4:09:36:d2:cb:98:5c:79:21:ef:
         e6:c8:9d:a8:ec:8e:f2:29:3a:79:07:63:0e:7a:b0:93:1b:a9:
         e7:36:8b:ca:37:aa:78:5a:e3:3c:b0:9d:ce:9f:28:1d:a9:30:
         3a:6a:4c:69:66:dd:0c:8b:01:47:3b:3c:4f:b2:6c:e2:77:f5:
         02:97:4d:bd:69:5f:8f:2a:9a:51:2e:ca:19:d4:a3:75:7a:93:
         0d:bb:38:d2:d9:2b:5d:66:55:df:15:01:3f:bc:d6:f0:0f:a1:
         61:96:0d:33:4d:c7:2c:34:19:23:b6:29:e9:97:bf:53:09:c9:
         f7:12:0e:39:f3:ee:d4:fa:f7:65:5f:fc:6e:5f:2a:9d:c0:bc:
         a0:41:66:93:51:77:b1:ae:b8:33:70:b3:89:84:5a:eb:8d:fa:
         56:36:dd:b8:c7:53:dc:1e:55:7e:e9:48:6c:67:e6:86:fc:97:
         34:b5:71:8a:19:55:e6:65:73:84:1a:ee:a8:93:c0:b6:da:51:
         4f:5b:9d:b9:24:4b:84:3a:41:af:7d:51:ed:47:81:28:d4:2b:
         f0:84:ca:8e:6e:60:ce:64:f4:35:bb:a3:c1:59:8a:ce:bd:45:
         56:31:a9:52:95:80:22:04:1b:eb:ca:45:01:c1:69:5a:4d:e4:
         51:2a:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org