Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          dF6C+0ZxmK3qH88tBEPKv7LROas8T3VQEZUsF8+nU3o=
Subject key identifier:   D8:01:99:E2:31:F2:A7:0F:A3:20:E1:CF:91:9F:89:78:AC:34:32:4B
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       774AF7A66DD270411FCE7187B558783BAB4FFCDA
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 13 Mar 2024 19:16:17 +0000
ROA not before:           Wed 13 Mar 2024 19:11:17 +0000
ROA not after:            Wed 12 Mar 2025 19:16:17 +0000
asID:                     61639
IP address blocks:        138.219.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4a:f7:a6:6d:d2:70:41:1f:ce:71:87:b5:58:78:3b:ab:4f:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Mar 13 19:11:17 2024 GMT
            Not After : Mar 12 19:16:17 2025 GMT
        Subject: CN=D80199E231F2A70FA320E1CF919F8978AC34324B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:87:5c:55:a2:93:e6:be:02:65:50:5b:1d:
                    3e:13:a1:b0:7c:6a:08:d5:58:75:ea:dd:e0:1c:d4:
                    a2:8c:fc:8a:da:74:d6:7d:b4:41:25:81:a7:f6:20:
                    4b:42:c1:b7:5c:09:0f:78:56:00:04:f7:76:6e:15:
                    0d:4e:b7:30:fe:56:e2:b0:b0:c1:6b:7e:68:4b:7d:
                    23:dd:36:c6:65:11:a4:a5:75:ef:d6:28:e0:1f:94:
                    a8:25:77:38:9e:62:32:f2:92:92:21:44:67:84:6f:
                    88:c1:cc:d6:08:7f:9e:a6:44:d8:82:34:be:eb:10:
                    16:03:97:8c:57:82:19:73:fd:41:73:7a:bf:23:cb:
                    43:dc:9f:ce:61:41:a6:23:20:7c:2e:cc:70:9a:41:
                    a1:8c:29:74:02:bc:16:f9:7a:58:09:42:f4:25:fb:
                    25:20:ed:48:f4:b7:ce:63:35:4e:34:5d:1f:fb:d5:
                    79:79:73:f8:6e:ab:36:39:be:7e:64:83:20:db:1c:
                    8c:97:26:27:2b:e3:75:b6:0d:1f:d0:80:97:be:61:
                    1a:33:07:32:d5:33:5c:0e:88:f2:25:34:1a:a1:1b:
                    88:a5:86:df:09:07:fe:50:aa:78:83:a9:ff:10:18:
                    6e:bb:64:e7:38:d0:49:4d:cf:e9:f3:40:e1:e4:37:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:01:99:E2:31:F2:A7:0F:A3:20:E1:CF:91:9F:89:78:AC:34:32:4B
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:fe:2e:f9:46:d3:b9:42:e2:7b:d0:79:db:9a:d7:0d:ce:ea:
         30:00:de:12:67:42:f2:15:6b:f9:57:c8:2e:d1:de:84:31:90:
         71:1c:d4:4f:c0:3e:ec:e9:a2:c8:82:be:76:fc:8f:a5:d9:48:
         62:6c:2e:23:d0:a4:50:be:6f:e6:94:ab:22:6b:82:5c:ed:eb:
         b2:3f:a7:76:41:9a:6d:7f:75:f6:27:a9:2c:5a:0e:97:38:68:
         1d:12:8d:75:52:e4:63:3a:ae:7d:ed:4c:81:1b:38:a2:8a:0c:
         93:28:d8:de:75:14:79:12:85:94:19:67:3c:cf:b7:82:c3:91:
         7b:8d:26:fb:ff:ae:7f:10:8f:cd:bb:f7:62:47:03:00:01:43:
         a2:92:19:79:69:b3:ba:ee:66:9d:e6:01:d4:6e:8e:9c:30:5c:
         2a:e3:f5:d1:51:3b:0a:27:f4:43:f6:bd:fe:f2:b6:49:7e:4e:
         27:7a:07:98:60:f3:3e:98:22:cc:55:cb:17:b5:6b:01:36:4c:
         3c:98:41:47:c3:42:e3:da:1e:ca:53:fc:3c:81:33:f1:21:20:
         f6:dc:27:32:81:86:3f:95:3d:d0:9e:4e:37:55:a7:0e:fb:56:
         5b:cc:b2:4c:f4:0e:c9:ef:d0:f1:24:dd:11:68:d0:9e:10:7c:
         c1:69:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org