Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          m/zq1TsVuDn2E0EBJh1MC3vukoUatoEdr+JDhlAYxZg=
Subject key identifier:   42:51:EF:A3:48:9B:DF:18:E4:DB:15:8C:06:E9:A7:C7:29:04:89:AC
Certificate issuer:       /CN=188606675901F040B07DF306712C0B8EAFD6ACFE
Certificate serial:       23DF2493B36A050E50E69C4A43EE87203B2E5A89
Authority key identifier: 18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa
Signing time:             Fri 05 Apr 2024 03:19:15 +0000
ROA not before:           Fri 05 Apr 2024 03:14:15 +0000
ROA not after:            Fri 04 Apr 2025 03:19:15 +0000
asID:                     263995
IP address blocks:        138.255.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:df:24:93:b3:6a:05:0e:50:e6:9c:4a:43:ee:87:20:3b:2e:5a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188606675901F040B07DF306712C0B8EAFD6ACFE
        Validity
            Not Before: Apr  5 03:14:15 2024 GMT
            Not After : Apr  4 03:19:15 2025 GMT
        Subject: CN=4251EFA3489BDF18E4DB158C06E9A7C7290489AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:18:32:58:05:75:a0:6c:bf:a4:eb:6e:22:17:
                    f7:0e:6a:a1:e1:d2:bc:21:68:3b:d7:7b:30:8d:48:
                    80:e8:70:65:dc:28:06:03:48:ba:0f:81:65:c6:e5:
                    6d:d0:3c:39:7c:97:a1:c7:9f:41:26:d1:15:5a:c2:
                    76:e1:33:21:44:e5:46:62:b3:93:c2:ca:a0:e2:0c:
                    dd:e8:3c:b5:9d:a6:44:3d:86:a6:6e:ba:7a:ed:d8:
                    cc:1e:43:83:20:4a:e6:27:11:ee:3b:f8:bd:aa:78:
                    c9:ef:46:9c:55:1b:65:cc:a5:e3:2e:b5:ad:63:38:
                    bc:c6:15:f7:bd:60:87:a2:73:2a:4e:5a:d7:eb:05:
                    71:80:65:0d:88:6e:a8:9e:f5:9d:32:31:50:ee:5d:
                    22:7a:e0:91:a0:61:89:1c:54:46:54:3f:5c:5a:6b:
                    94:38:b3:c3:43:ef:de:9f:26:3e:4a:32:c0:3f:15:
                    09:1f:f5:21:51:34:2c:7d:78:02:65:65:24:9d:87:
                    b3:2a:73:04:8d:4c:02:d2:09:1d:e7:94:99:64:44:
                    98:d5:c1:b7:b8:6a:72:03:ca:e1:e9:b7:de:a1:a4:
                    9f:f1:b5:29:56:1e:56:57:a2:eb:ff:9a:1e:29:21:
                    90:07:46:9d:75:3a:9f:d6:78:e5:92:4e:ce:d6:8e:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:EF:A3:48:9B:DF:18:E4:DB:15:8C:06:E9:A7:C7:29:04:89:AC
            X509v3 Authority Key Identifier:
                keyid:18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/188606675901F040B07DF306712C0B8EAFD6ACFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:cd:eb:5b:76:8b:4d:fa:1d:c9:54:31:ab:2e:d2:68:a0:
         7c:bb:ef:f2:d3:78:92:02:c2:f6:b0:64:19:0d:50:07:1c:5c:
         a3:a8:a2:20:bc:c4:fe:fc:7b:96:de:15:a1:ed:d3:30:2e:0a:
         24:8e:99:c2:22:c7:a3:fc:e0:14:9e:d1:22:86:80:a1:14:ac:
         7e:fb:ed:7f:9c:cb:04:2d:f2:ca:81:fe:76:cb:ef:f8:3b:eb:
         a4:82:28:28:1c:2f:34:50:57:c5:27:56:3f:72:6d:ed:a8:3a:
         cd:08:d1:39:0a:9a:a6:35:95:c1:3f:ab:e2:a3:66:0e:2e:c7:
         0a:1a:77:1f:22:99:82:47:a6:c3:63:79:f5:ea:e1:2b:41:69:
         34:84:18:4b:f3:f4:2e:b8:af:4e:9f:48:10:4b:c7:f7:09:ba:
         ab:8c:50:f6:19:48:44:22:7f:86:1e:71:83:13:d3:a3:41:de:
         2e:07:34:09:7b:34:14:f1:93:3d:76:af:67:4a:de:11:9d:92:
         c7:a3:e5:ac:2c:20:cf:60:e4:4f:ce:50:13:19:9a:2c:28:87:
         70:b1:28:1b:58:5f:2f:b7:cb:fa:b0:ac:1e:83:a6:3d:56:ea:
         3e:10:2f:e4:65:be:c8:3b:f3:bb:72:27:c6:ad:fd:3e:c3:3d:
         73:46:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org