Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3234203d3e203238323130.roa
File:                     3133382e3235352e3134342e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          yg9FtSuV8KBObSkQ1tt1pN3TUbMUPdQ4yjw7EjdMAhc=
Subject key identifier:   DE:5C:FB:40:29:A5:05:B1:D0:5A:FF:8E:AE:CC:44:1C:E3:63:AF:8E
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       37CFAAEB7FC1CC5D27162494D98F37EA63B968A6
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:21 +0000
ROA not before:           Sat 04 Mar 2023 16:03:21 +0000
ROA not after:            Sat 02 Mar 2024 16:08:21 +0000
asID:                     28210
IP address blocks:        138.255.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cf:aa:eb:7f:c1:cc:5d:27:16:24:94:d9:8f:37:ea:63:b9:68:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:21 2023 GMT
            Not After : Mar  2 16:08:21 2024 GMT
        Subject: CN=DE5CFB4029A505B1D05AFF8EAECC441CE363AF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:a9:53:3f:cb:9e:7b:ec:f6:df:90:54:67:
                    f0:b6:9c:41:6c:ca:f0:d5:7c:9d:3f:dd:40:77:a6:
                    65:40:56:c6:69:64:89:a9:53:cf:89:f6:67:b1:da:
                    f3:a0:8c:a7:ab:7d:61:3a:40:36:49:20:81:30:66:
                    04:14:0c:e1:56:e8:da:c2:a9:77:3a:4f:db:d0:93:
                    1f:21:90:63:22:24:35:2c:74:cd:c0:70:fd:25:8e:
                    ed:0a:45:12:3f:9e:02:cd:4e:01:93:bd:ea:66:cf:
                    8d:9e:68:72:61:da:9a:86:45:74:37:0b:96:f6:79:
                    57:50:40:9c:a3:f9:9d:9e:b6:4c:48:0f:f1:72:7e:
                    5f:4d:7c:54:29:ca:f6:a8:9a:a7:0d:66:d5:13:67:
                    1e:d8:f7:6a:a4:d4:f9:06:30:78:90:fb:3b:eb:39:
                    dd:ba:f0:cb:7f:8b:6c:93:74:bd:f1:4e:04:5c:db:
                    e3:c8:46:f0:07:78:54:db:8b:5f:c5:03:89:6c:da:
                    72:d5:66:81:37:76:b0:41:c7:ac:62:b1:a4:68:51:
                    f3:9e:9f:e4:23:86:55:82:92:84:5c:e3:7d:35:ec:
                    6e:15:c8:4a:fe:66:d3:75:a4:37:bd:d0:2d:74:7a:
                    65:b3:80:a5:03:36:e8:71:b0:0a:f8:f2:92:fd:52:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5C:FB:40:29:A5:05:B1:D0:5A:FF:8E:AE:CC:44:1C:E3:63:AF:8E
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3235352e3134342e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:85:e6:ff:c4:e3:1e:ec:ff:b8:d3:82:c1:37:d5:dd:e9:23:
         c7:53:7f:4f:0e:9a:15:3d:22:fd:c1:43:7b:14:79:af:a1:2a:
         2e:4b:6c:50:b4:1f:f7:c5:1d:8a:ab:67:fa:23:a7:97:00:43:
         8e:ef:b9:28:14:0a:44:02:67:44:86:d5:5c:79:aa:ce:34:a4:
         ac:e9:08:59:79:a1:7c:c8:37:92:ed:ae:6e:3c:e5:b8:9b:7b:
         eb:a1:34:6f:9f:8e:d7:fc:ba:c2:42:9c:af:0a:5c:1b:6b:46:
         bf:05:e2:6c:70:17:57:43:82:9b:8b:3b:95:e7:89:31:30:34:
         d2:19:c0:b0:95:c8:f0:f0:41:41:bd:ae:7f:e3:29:c7:f7:b6:
         01:5d:51:4a:5c:cb:37:a2:ac:9a:37:30:24:03:97:44:c6:4c:
         9a:94:05:4e:2f:7a:38:16:4c:4e:e9:da:b7:43:75:2f:7d:35:
         ed:61:e3:74:e1:3c:cd:63:31:22:ed:9e:a9:cf:62:56:eb:50:
         dd:42:55:dc:3f:27:ad:d7:61:d3:d9:1c:31:1e:9f:d2:db:49:
         a6:da:39:12:63:56:ec:c4:56:66:c3:f9:30:82:fd:91:06:9c:
         68:fd:4a:46:53:db:94:5c:12:c6:03:66:68:2a:49:bd:c0:16:
         7a:ce:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org