Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32332e302f32342d3332203d3e20323634333038.roa
File:                     3133382e3132322e32332e302f32342d3332203d3e20323634333038.roa (raw, json)
Hash identifier:          H9xyP6h/IvB7CYPRkvRDeqsjM2Np1G9pbtdgZCn0m1w=
Subject key identifier:   E2:48:71:6F:33:9D:94:48:E8:29:FB:09:4B:33:49:62:57:A6:68:E7
Certificate issuer:       /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial:       49E860ADEC052F0013203E55EE85C1060712E470
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32332e302f32342d3332203d3e20323634333038.roa
Signing time:             Wed 07 Dec 2022 12:47:30 +0000
ROA not before:           Wed 07 Dec 2022 12:42:30 +0000
ROA not after:            Wed 06 Dec 2023 12:47:30 +0000
asID:                     264308
IP address blocks:        138.122.23.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:60:ad:ec:05:2f:00:13:20:3e:55:ee:85:c1:06:07:12:e4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Validity
            Not Before: Dec  7 12:42:30 2022 GMT
            Not After : Dec  6 12:47:30 2023 GMT
        Subject: CN=E248716F339D9448E829FB094B33496257A668E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:da:41:c8:b7:bd:b2:13:9d:2d:e3:06:55:
                    12:64:d0:9c:e3:75:84:4e:00:55:d1:5b:e2:2e:ed:
                    48:34:21:53:7a:3d:05:0e:4e:2b:fc:26:b2:2b:2c:
                    a7:d3:49:59:65:7c:5f:69:91:2b:a3:04:22:e7:1b:
                    24:2c:b3:31:ce:93:d8:4c:0b:75:c6:48:9f:c1:66:
                    33:d0:8e:3a:d6:46:34:60:05:ff:6e:34:a4:ef:02:
                    a5:12:ce:64:bd:9e:54:2d:fa:44:3f:0b:cd:31:85:
                    0f:ab:5d:65:31:90:a4:4e:8c:47:63:85:36:a3:56:
                    3e:a5:9c:38:c2:63:84:e7:29:b2:cb:cd:29:6d:23:
                    52:be:9b:ec:90:30:70:a8:2c:19:0d:78:ec:2d:cf:
                    fa:83:cb:7c:dd:37:60:04:6d:2c:d6:6a:f8:0e:f1:
                    03:0e:b3:7b:70:1a:b4:6d:20:d6:f0:f6:3f:6b:37:
                    52:93:ec:38:8b:86:68:6b:59:dd:a1:23:90:b9:6b:
                    33:90:42:ce:26:78:8f:1f:a4:b6:76:f7:a7:f6:3f:
                    e3:11:e3:12:c7:d3:e9:44:5a:ef:1d:db:1e:cc:7e:
                    2c:ed:3d:f1:eb:c6:e6:93:d8:84:4a:4d:31:67:42:
                    f3:58:f7:7b:c7:a5:c7:85:51:a4:5e:b9:d7:01:97:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:48:71:6F:33:9D:94:48:E8:29:FB:09:4B:33:49:62:57:A6:68:E7
            X509v3 Authority Key Identifier:
                keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32332e302f32342d3332203d3e20323634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:f0:df:c7:3b:55:88:1b:ed:b7:ea:4c:72:f8:e9:79:10:
         e0:ed:42:1a:1b:5a:85:c1:28:e4:ce:9e:9b:4b:8b:c5:d4:1d:
         f7:9e:77:82:ca:9a:88:76:3d:19:ae:bc:93:e8:a1:09:fd:07:
         c9:bf:b0:93:1f:92:95:c0:e5:88:e6:3a:41:30:6d:29:d1:ee:
         55:97:fc:b3:35:b3:88:19:13:8e:8c:aa:fc:b5:15:f6:92:f6:
         3a:4d:0d:25:4e:86:9f:73:34:5f:88:c5:87:66:56:33:24:ef:
         1d:c4:de:6a:2a:28:72:b5:ac:cf:18:0f:0f:f9:46:ca:c7:42:
         b1:02:6a:f1:cd:b1:01:32:5e:a3:6a:ff:e0:8e:b3:75:64:b4:
         47:f0:8d:71:a9:3d:b4:90:9a:12:b5:1c:8e:83:d4:c3:68:75:
         d2:d3:09:b7:53:d5:90:81:db:43:1b:97:ab:19:5e:79:cb:ee:
         b1:98:32:76:dc:14:1c:b9:dd:37:42:43:46:f5:e1:c6:25:ea:
         0f:76:62:d1:a8:cd:de:0a:f0:92:dc:9f:49:0b:d7:4c:5c:60:
         93:dd:87:a8:a8:11:6b:5b:0c:b2:05:b7:51:6c:e8:52:de:ae:
         bd:30:08:2b:1d:4a:c6:86:7e:ca:49:8f:39:44:df:dd:43:4f:
         7e:cb:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org