Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
File:                     3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          dl3SKCRA1k7SvnHvHJWciuVQVKPIlyaa9UxTjNmIcZU=
Subject key identifier:   79:93:06:3E:B9:ED:14:83:17:78:68:73:3E:9F:EC:0E:1E:5A:A3:6F
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       70E7C0ECDD9963C1C5AE1D41CB09708C0AA200D2
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:32 +0000
ROA not before:           Mon 08 Apr 2024 20:06:32 +0000
ROA not after:            Mon 07 Apr 2025 20:11:32 +0000
asID:                     263665
IP address blocks:        138.255.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e7:c0:ec:dd:99:63:c1:c5:ae:1d:41:cb:09:70:8c:0a:a2:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:32 2024 GMT
            Not After : Apr  7 20:11:32 2025 GMT
        Subject: CN=7993063EB9ED1483177868733E9FEC0E1E5AA36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:ef:b1:b0:de:0d:b1:91:cd:58:91:43:4c:
                    3e:a5:5d:4b:6a:fe:a7:b7:8c:6d:51:12:05:1c:1d:
                    e7:98:e6:ea:e0:ac:ea:65:2a:0e:87:bf:90:33:0d:
                    72:ae:6d:c6:86:68:d6:75:33:8e:39:1e:07:94:21:
                    c0:8a:23:ee:50:39:9c:91:cd:72:88:33:e0:5d:3c:
                    0a:e4:7e:24:bf:e8:bd:bb:27:50:c9:72:dd:5c:be:
                    cf:83:d3:c5:a8:76:18:64:87:9c:22:fd:cc:cc:de:
                    94:54:68:26:d3:94:6b:c3:c4:54:ba:d0:0e:9d:dd:
                    4c:96:7c:ec:3d:02:9b:ee:83:a2:a1:0f:0d:65:62:
                    a3:2f:e1:a8:38:80:3a:7c:a2:89:19:32:7e:9c:cb:
                    3d:4f:3f:a7:2d:a5:fa:3a:c6:11:bd:d3:49:bf:b7:
                    53:64:7b:be:51:df:9b:60:35:2c:ce:3d:71:7f:d3:
                    42:c2:2c:85:08:dd:a6:5a:a8:50:43:e0:9f:36:b3:
                    fe:e9:eb:5c:9a:1a:b4:fb:a9:01:a5:37:2f:96:83:
                    5b:1d:6e:94:49:ba:af:7f:f2:fa:55:0d:ad:b5:47:
                    1d:32:b4:9e:23:79:3e:ba:be:9a:c5:f6:92:40:e1:
                    f4:a2:7d:0b:3b:b7:88:f6:2f:a5:b0:0b:31:80:d8:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:93:06:3E:B9:ED:14:83:17:78:68:73:3E:9F:EC:0E:1E:5A:A3:6F
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:42:0e:2c:a6:c2:62:74:4c:7c:5c:2d:1a:41:c9:a3:47:7c:
         bf:fc:0c:39:e0:13:03:04:ad:bd:03:ea:b3:82:cd:a5:a7:bd:
         b1:18:49:21:af:ca:b1:56:0c:ee:e5:f4:e9:d5:b9:6d:7e:a5:
         3d:4e:80:72:0c:ca:cb:b8:b7:0c:cc:e9:bc:cb:3d:70:6a:75:
         31:b8:01:3b:6a:fb:ed:f0:13:0a:fe:36:d9:79:b2:ec:c3:0a:
         a8:73:41:ca:ba:7f:cb:36:ba:f4:74:e6:1f:f9:0b:a4:c3:b5:
         fa:9e:7d:6e:e1:34:ac:70:83:18:b6:11:e6:bd:39:90:d9:01:
         af:c7:35:dd:93:99:66:5e:e4:83:53:26:7f:42:3f:18:59:fd:
         83:71:a3:f7:19:9d:c3:4f:a0:1d:c1:8d:2b:24:2a:0f:ff:4d:
         6b:89:4c:30:1f:35:63:e3:05:d6:eb:5c:5c:6a:b3:ac:24:2c:
         ca:d8:57:95:82:65:b8:22:3f:de:86:7b:1f:2a:37:f3:eb:f4:
         d4:7d:80:02:a0:26:ad:fe:14:4b:31:36:14:fc:d5:25:58:c9:
         f1:e9:10:03:64:a3:9b:20:ae:4f:7c:5b:9f:7e:ee:e9:06:29:
         a9:b2:98:29:65:b0:81:fa:4f:40:33:11:4f:86:76:94:52:db:
         71:50:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org