Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133332e302f32342d3234203d3e20323634353830.roa
File:                     3133382e33362e3133332e302f32342d3234203d3e20323634353830.roa (raw, json)
Hash identifier:          lsbEGdQR/SHKP7JGcC8NsLlAgd/3UjMq6MMX2QqvHjw=
Subject key identifier:   45:83:F7:1F:7F:C8:28:BE:0E:3F:90:34:43:5E:B1:88:EC:52:AC:74
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       5ACCB3E4A196720CB755C9D44D7C098597802697
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133332e302f32342d3234203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:40 +0000
ROA not before:           Tue 05 Dec 2023 17:32:40 +0000
ROA not after:            Tue 03 Dec 2024 17:37:40 +0000
asID:                     264580
IP address blocks:        138.36.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cc:b3:e4:a1:96:72:0c:b7:55:c9:d4:4d:7c:09:85:97:80:26:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:40 2023 GMT
            Not After : Dec  3 17:37:40 2024 GMT
        Subject: CN=4583F71F7FC828BE0E3F9034435EB188EC52AC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:f5:d2:6c:db:a6:01:2c:65:61:7d:71:b8:
                    64:a8:7e:2e:77:3e:25:f2:80:64:60:53:1b:5a:27:
                    a3:40:2a:74:e5:fe:b6:f0:a1:f0:37:88:40:c0:ea:
                    20:e8:f7:77:90:c1:f6:98:df:ad:ba:c7:9f:7f:69:
                    8f:36:1f:83:cd:fe:90:be:b2:16:26:0b:96:33:93:
                    d8:6b:03:1d:9e:4d:9e:44:e5:37:c3:a3:a9:3b:96:
                    d0:92:9b:ce:06:73:75:53:bc:c1:18:fa:69:15:de:
                    cd:c6:92:f3:d9:8d:ae:9d:21:68:76:d9:5a:18:40:
                    8c:da:a3:89:1a:3b:d3:66:f7:57:3c:ae:15:c9:32:
                    01:41:56:0c:2b:c2:cb:6a:4d:a7:aa:0d:e1:44:3d:
                    46:da:9d:a3:78:86:58:17:d6:40:5c:93:f4:02:d2:
                    c4:7c:29:4b:37:61:3b:32:f8:dd:ba:bc:b8:4b:8a:
                    38:03:d1:4e:df:45:5d:5b:71:d0:65:c5:49:39:d9:
                    15:fc:a5:4c:05:58:e4:85:f6:65:a5:f7:e6:79:73:
                    85:0c:b1:9f:8a:b5:77:f3:73:f3:5b:09:2e:86:c7:
                    87:1c:f6:0a:36:ca:03:58:9a:f4:fe:c5:c9:79:02:
                    cf:3a:e6:ca:0c:1d:9b:7d:8e:84:4a:21:ff:b5:d5:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:F7:1F:7F:C8:28:BE:0E:3F:90:34:43:5E:B1:88:EC:52:AC:74
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133332e302f32342d3234203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:71:a4:5d:66:ea:aa:6b:0e:89:a6:89:20:e5:ed:07:40:82:
         f1:25:8c:98:84:d9:77:04:85:b9:4a:eb:b9:1a:80:1b:e9:bf:
         28:76:9e:e1:4c:0b:39:82:8a:8d:b6:0a:af:00:cd:79:df:28:
         60:17:8e:cc:8c:dc:cc:af:24:7a:05:33:c4:e0:1a:41:98:51:
         92:b0:46:da:50:e9:fe:f2:b5:52:12:4a:51:12:cd:46:68:e3:
         78:70:89:27:e2:a0:9a:5e:79:4a:d9:74:f7:8b:db:2f:a2:b1:
         93:96:e2:03:7a:1f:47:5d:81:ad:94:37:1d:4d:12:2a:73:7d:
         4b:4f:e1:db:8a:99:2c:ed:dc:b6:64:dc:16:19:3c:51:e4:e2:
         1c:e9:1b:12:6e:15:07:8b:29:32:7c:9d:61:1b:a7:13:1d:ef:
         4e:03:fb:4a:87:d7:d2:72:a4:eb:08:95:19:46:7c:9f:f6:04:
         ab:d5:a5:54:08:00:7a:7c:8f:4c:cd:a4:d3:10:25:35:72:c1:
         a5:c0:a1:bd:0f:88:d0:09:1f:29:8c:60:20:fa:04:89:30:7f:
         52:a9:02:8a:31:13:1d:9c:1a:5d:f1:48:9c:db:5a:57:16:f1:
         55:37:97:21:36:a7:ee:31:50:21:97:c0:de:26:9c:5a:59:d2:
         c9:7b:43:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org