Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          Z3WhyV1RFEfZb0hXuDaKZDk9DgPy0edZ8/KZ90rGwdg=
Subject key identifier:   C7:94:CA:05:A6:10:36:FA:A6:7B:19:4C:C9:C7:1A:EE:E3:2D:E6:D5
Certificate issuer:       /CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
Certificate serial:       20D713DF5DA83254F20E452CC5B83072EDC510B2
Authority key identifier: 54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa
Signing time:             Mon 19 Aug 2024 20:22:18 +0000
ROA not before:           Mon 19 Aug 2024 20:17:18 +0000
ROA not after:            Mon 18 Aug 2025 20:22:18 +0000
asID:                     264585
IP address blocks:        138.36.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d7:13:df:5d:a8:32:54:f2:0e:45:2c:c5:b8:30:72:ed:c5:10:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Validity
            Not Before: Aug 19 20:17:18 2024 GMT
            Not After : Aug 18 20:22:18 2025 GMT
        Subject: CN=C794CA05A61036FAA67B194CC9C71AEEE32DE6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:f0:eb:5c:09:46:5b:a7:76:4f:89:3b:a0:
                    41:c3:73:3e:f3:cb:10:17:a8:4e:97:1a:0f:ef:ef:
                    99:b6:8a:4d:56:d8:ad:5e:7f:8f:64:33:3a:d3:fa:
                    c0:df:6a:2c:fc:ec:31:69:a2:e6:4c:24:f3:42:0b:
                    09:f3:bd:d0:ed:3f:72:74:9d:cd:74:f6:18:a5:aa:
                    71:e1:b3:d5:46:82:09:29:d1:14:ba:a0:38:b9:68:
                    db:e2:20:04:7e:a9:75:c7:30:e3:a6:c4:65:6f:fc:
                    50:45:21:d6:a5:da:ea:72:09:71:fc:6d:a8:e6:c8:
                    97:b9:f9:10:2b:db:b2:dd:06:b0:22:d4:96:c6:da:
                    a7:43:c1:79:ba:dd:cd:24:cb:8d:b5:61:fd:37:19:
                    6c:66:d8:f6:21:db:0b:30:32:70:49:21:d6:64:b9:
                    ca:32:00:e1:a9:87:a5:6c:54:e1:aa:24:4e:36:e2:
                    bc:ff:a7:98:63:5a:67:2d:dd:e9:8b:6d:2c:9d:a7:
                    f2:06:c4:10:32:13:bc:c4:ad:c9:cf:b7:e7:c5:e6:
                    a8:53:5f:6a:cd:b1:6e:fe:01:41:e4:f4:1b:51:22:
                    9e:df:cc:aa:eb:15:58:1a:ef:f7:77:b2:65:19:18:
                    32:36:fe:5b:87:d0:da:44:97:23:ec:af:11:62:f0:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:CA:05:A6:10:36:FA:A6:7B:19:4C:C9:C7:1A:EE:E3:2D:E6:D5
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139332e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:f7:91:a4:0b:29:a7:30:ba:0b:85:5b:b4:d1:79:9a:b0:
         67:fc:96:fd:cf:35:40:88:70:ff:22:60:6b:69:5e:b7:57:b9:
         60:e8:84:48:22:35:b6:94:20:4e:5b:04:96:e3:58:b8:5c:8c:
         52:48:38:e9:50:4a:e3:46:30:ac:6a:b5:5f:e6:5b:d0:d7:6e:
         c1:e1:78:46:c9:58:62:c1:1d:dc:3c:2b:97:6d:b0:55:46:94:
         61:50:d3:cb:13:fa:61:88:13:98:89:b2:d3:64:4d:22:26:3a:
         ab:58:23:c7:36:05:6b:11:4f:d1:23:95:ca:3c:29:89:f0:a7:
         40:e6:9e:53:1e:f9:ac:e9:74:ac:bf:67:d7:4a:41:ee:67:50:
         91:e6:b1:92:7e:e4:7f:7a:11:a1:4c:f5:7a:c4:61:f6:77:65:
         da:a5:f3:b9:e8:00:e2:5f:87:10:72:c5:1f:9e:00:fa:56:fb:
         26:b6:02:aa:e6:4c:9d:51:b1:47:78:8c:cb:6c:6e:71:b2:8c:
         bc:33:92:43:3a:ee:39:eb:ff:31:aa:df:5e:8e:e0:7c:b4:64:
         fd:80:10:b8:0b:5b:98:98:d6:30:36:20:e7:91:f1:eb:7f:ae:
         c1:d3:6c:be:e8:19:fd:9e:b1:63:23:f2:d7:6e:e5:85:01:be:
         55:6b:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 15:34:12 2024 by rpki-client on console-fra.rpki-client.org