Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          yyJRLLu8TIdtO5Gt2tDIKqQFW91hVnljcttBcKMOvGw=
Subject key identifier:   5C:EE:5C:F5:17:B0:C8:F5:EE:C1:33:4C:FE:C3:35:AC:A5:F3:1C:21
Certificate issuer:       /CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
Certificate serial:       7AEB39FF99937050E5E2F9962960D37F2DCEDD75
Authority key identifier: 54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
Signing time:             Mon 19 Aug 2024 20:22:17 +0000
ROA not before:           Mon 19 Aug 2024 20:17:17 +0000
ROA not after:            Mon 18 Aug 2025 20:22:17 +0000
asID:                     264585
IP address blocks:        138.36.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:eb:39:ff:99:93:70:50:e5:e2:f9:96:29:60:d3:7f:2d:ce:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Validity
            Not Before: Aug 19 20:17:17 2024 GMT
            Not After : Aug 18 20:22:17 2025 GMT
        Subject: CN=5CEE5CF517B0C8F5EEC1334CFEC335ACA5F31C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:d8:af:a9:b1:3c:de:17:d0:40:b9:b0:e7:
                    da:58:4d:c1:c5:c4:d8:64:56:8c:60:75:51:cb:c9:
                    b6:9b:5b:87:12:9e:b5:17:ae:c0:c0:b4:42:b6:f5:
                    15:1f:ae:f5:e4:21:f8:89:90:01:51:63:00:47:18:
                    37:e1:41:80:31:87:67:d2:b4:d6:f0:c9:2f:4f:4b:
                    2d:7b:34:33:2c:7d:d3:28:3c:63:a4:c4:2a:60:62:
                    53:80:41:8a:eb:78:5b:ee:5d:f7:2f:61:be:f9:15:
                    84:d9:ed:60:e9:9d:4a:74:24:45:70:9f:48:97:ab:
                    0b:d6:86:87:0b:8a:65:44:e5:cc:fb:64:65:83:57:
                    5f:bd:06:92:f3:51:18:f0:12:f8:64:e6:f7:34:2c:
                    d7:72:5b:96:21:27:b4:2e:57:ca:35:70:d6:31:74:
                    76:4c:ce:fe:e5:21:17:d9:c8:af:2e:8f:f4:3f:2a:
                    45:6f:83:e8:88:a1:47:d1:d7:19:93:cd:03:54:5a:
                    99:27:1a:47:9a:3c:db:a9:64:f9:79:dd:77:b1:6e:
                    af:bb:97:68:83:8d:0e:21:c6:21:0b:17:6e:3e:96:
                    bc:c2:eb:0c:a1:6f:cf:55:fe:5b:64:7b:ba:02:b8:
                    1b:36:24:d7:ff:c4:28:07:a4:96:2b:36:76:1c:67:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:5C:F5:17:B0:C8:F5:EE:C1:33:4C:FE:C3:35:AC:A5:F3:1C:21
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:72:54:4f:df:83:cc:3d:a1:32:31:5c:53:d8:36:f1:b9:9a:
         b8:05:b6:23:bd:6e:0a:c9:67:79:d6:29:e7:e0:44:1e:29:91:
         55:40:1d:8b:4a:bd:2b:e7:86:03:79:1a:4e:ab:20:91:9d:27:
         b3:e9:29:38:02:03:36:1b:4d:31:68:be:e9:73:b0:86:bd:cb:
         c0:83:f0:bc:78:67:18:24:2f:88:ff:eb:46:83:72:59:d1:85:
         af:e9:6b:61:40:16:65:56:99:36:87:cb:64:cb:8c:3c:08:29:
         45:fe:8b:ef:f4:ac:0d:73:ff:03:b6:b9:61:45:b2:ff:df:2e:
         b1:85:33:a3:ef:a4:86:7e:2c:13:b8:9c:e4:7b:6f:95:3a:ca:
         77:43:62:e2:48:b0:0c:99:ff:c6:b6:6f:26:e8:b4:bd:08:91:
         45:bb:55:6f:93:02:40:9c:fe:c1:f0:ad:f8:9f:d1:4a:ab:fb:
         9b:ea:fa:71:5c:90:71:58:4a:c3:1c:87:da:17:c7:51:a6:52:
         53:ef:26:f0:d6:b3:6f:f4:8c:30:20:5f:9f:2f:eb:03:29:96:
         70:e5:c5:83:93:c6:98:9f:03:2e:32:9f:76:d9:e2:43:e8:34:
         42:87:9e:8c:90:88:ab:09:e5:24:b7:2e:1f:06:fe:66:b9:69:
         dd:b8:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 15:34:12 2024 by rpki-client on console-fra.rpki-client.org