Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3138352e39362e302f32322d3234203d3e203238323130.roa
File:                     3133382e3138352e39362e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          c60BVt+ss+2SvRDnAmiJ5OVLSlhDchEWZ599Fe8WHxE=
Subject key identifier:   4F:CD:2C:19:A9:BA:30:13:B6:74:97:23:C3:A5:28:50:63:BF:26:5B
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       693F4BBB2E25BC42C60CCD063D13140A8621F644
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3138352e39362e302f32322d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:07:57 +0000
ROA not before:           Sat 04 Mar 2023 16:02:57 +0000
ROA not after:            Sat 02 Mar 2024 16:07:57 +0000
asID:                     28210
IP address blocks:        138.185.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3f:4b:bb:2e:25:bc:42:c6:0c:cd:06:3d:13:14:0a:86:21:f6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:02:57 2023 GMT
            Not After : Mar  2 16:07:57 2024 GMT
        Subject: CN=4FCD2C19A9BA3013B6749723C3A5285063BF265B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:81:f7:17:fe:29:24:9b:9e:db:14:3d:64:
                    31:5b:25:d1:62:81:5e:fe:09:7f:52:14:35:24:d1:
                    e0:12:f8:5d:d1:89:f4:dc:8d:4b:f4:ab:ce:f8:d3:
                    48:89:18:f5:4a:6a:65:3b:21:e4:22:d5:78:e0:79:
                    5d:5d:20:80:4c:2a:df:29:76:4f:b2:d8:ed:d6:85:
                    14:6e:e9:84:10:2c:93:93:0a:6c:f9:8e:6e:9d:10:
                    d8:84:dd:a1:d9:44:7e:c3:ff:dc:10:79:fe:f7:19:
                    75:f6:3a:7e:2f:27:35:72:ac:20:59:7c:c1:80:88:
                    29:70:7c:f2:fb:90:19:4b:35:c2:ef:34:1a:27:8d:
                    7e:8e:82:7a:46:44:0e:2c:df:f7:c8:a9:1a:81:44:
                    eb:9e:aa:10:33:3a:fd:ab:f0:b9:cb:c8:77:03:e8:
                    db:cb:b5:f9:53:5b:57:f2:06:78:71:ca:ce:dc:cc:
                    fb:85:a5:98:8b:21:5f:0e:df:5a:1c:dd:62:a4:c0:
                    8e:33:80:d7:85:d8:a6:ce:9d:aa:4f:06:37:ef:35:
                    3c:ed:85:c1:d8:57:e0:8f:38:cd:77:f0:d5:af:09:
                    62:2f:2b:dc:5d:03:6f:4b:fb:7b:43:61:45:58:e6:
                    48:b6:5a:10:93:67:e7:36:cb:c2:12:d3:72:23:9c:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CD:2C:19:A9:BA:30:13:B6:74:97:23:C3:A5:28:50:63:BF:26:5B
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3138352e39362e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:7a:a0:14:44:16:63:5e:4b:82:e3:71:e1:a9:d8:73:6e:
         01:e1:75:c9:c4:03:11:11:a1:f7:de:d8:61:da:c9:67:2c:e6:
         5a:04:37:bf:8f:09:a2:c4:27:f1:7a:81:4a:85:a6:50:76:13:
         54:bf:fe:dd:b3:6b:a6:b5:05:e9:f9:40:5f:3c:dd:a4:0d:ae:
         45:3a:14:f7:09:0b:2d:24:59:b0:5f:70:f0:33:f2:1c:a2:63:
         56:3a:b2:cc:cb:11:83:8b:5c:61:57:5e:12:85:a6:77:c7:39:
         8f:ea:ee:42:91:f6:e7:5f:05:13:17:2c:6e:bd:5b:58:92:3a:
         96:63:37:b1:29:8c:4e:5a:62:06:28:1b:2c:d5:22:3c:f5:53:
         5c:a1:39:56:93:b9:91:05:75:5c:d8:00:77:42:12:b2:12:58:
         7a:0b:f5:52:99:c7:38:6c:cc:f5:b6:49:66:58:d0:31:ab:1d:
         d9:ea:8e:4d:54:aa:0a:45:dd:31:32:10:9c:55:aa:6d:f9:27:
         0e:c8:17:2b:a7:86:95:89:de:2d:23:02:18:31:71:7c:a3:f1:
         0c:02:61:c4:bf:f9:1a:0e:2e:17:bb:9f:51:99:30:0c:1d:ad:
         53:9d:04:8d:c6:5c:a1:cd:80:2e:e6:45:a6:a4:b3:c5:0d:60:
         f2:ab:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org