Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          IAA6e3q/BiJ2leqaCMmqzcEE7HqamcV/aDiQ1N5bWCM=
Subject key identifier:   03:57:B4:FE:A4:90:56:E0:96:97:C6:36:59:81:6D:2A:0B:9F:4A:88
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       40F5C459BE49DB0326CCBE20D5F3CC67E3ECE005
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:50 +0000
ROA not before:           Tue 22 Aug 2023 18:17:50 +0000
ROA not after:            Tue 20 Aug 2024 18:22:50 +0000
asID:                     264585
IP address blocks:        138.36.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:c4:59:be:49:db:03:26:cc:be:20:d5:f3:cc:67:e3:ec:e0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:50 2023 GMT
            Not After : Aug 20 18:22:50 2024 GMT
        Subject: CN=0357B4FEA49056E09697C63659816D2A0B9F4A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:88:cf:d5:8a:a2:be:ff:54:da:ff:97:5f:
                    5f:b0:62:52:cf:5b:4f:34:13:a0:95:27:12:a9:8c:
                    e4:a0:d9:9c:6a:b2:af:51:86:ef:a3:1f:03:a5:24:
                    6b:f6:84:90:ed:5d:4e:8a:8a:2c:f0:84:bd:32:9a:
                    c2:48:ab:11:a9:35:67:45:48:27:b0:48:71:9a:d6:
                    1c:4b:2f:ae:2b:36:ec:ca:06:a3:de:96:d9:88:ac:
                    1a:cc:c1:eb:eb:3b:b8:ab:b8:3e:df:49:18:64:31:
                    d4:13:84:47:c4:c1:b4:81:65:05:34:07:63:49:ae:
                    2b:61:48:a5:e1:ef:c1:0b:2e:b6:15:cb:87:5c:7b:
                    ae:72:df:09:55:d4:da:20:c7:36:a2:bb:a5:9e:2b:
                    21:02:46:e7:01:a9:69:4e:9b:65:8f:38:a5:a5:88:
                    c6:93:58:ed:ed:13:67:29:d7:93:4c:2e:64:47:dd:
                    ff:c5:f2:90:97:43:f8:bf:a1:71:e0:45:d3:e5:f3:
                    3d:9a:05:fe:48:2a:55:92:bf:06:17:0e:8e:de:5f:
                    28:60:ab:dc:de:d5:6f:6c:14:88:f7:a2:aa:b3:6a:
                    89:ad:68:bc:96:ae:9f:8a:52:db:bd:1f:b0:51:59:
                    e6:1d:f6:43:05:af:48:40:b7:d2:31:f8:8b:eb:fb:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:B4:FE:A4:90:56:E0:96:97:C6:36:59:81:6D:2A:0B:9F:4A:88
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:42:48:b8:15:08:18:05:77:a3:87:7b:cd:ab:76:30:d0:9b:
         d4:e9:bb:98:d6:96:fe:04:7c:86:e6:19:09:4b:41:59:4a:2e:
         a3:24:1f:c6:52:de:0b:95:e0:ab:46:81:67:25:df:70:cf:54:
         4b:58:13:e7:2a:97:26:75:59:31:b4:0f:1d:86:64:1a:28:e4:
         06:0c:24:90:0a:cd:e1:01:74:70:6f:9b:09:74:35:a3:eb:a2:
         5e:11:61:bb:4f:46:bd:54:ca:70:65:09:08:39:bf:20:0b:88:
         59:97:e5:a3:c1:7b:98:de:8d:65:a5:99:6f:70:e7:61:f9:ce:
         c8:03:37:c4:23:4b:06:14:6b:08:ee:96:57:21:af:cb:f6:39:
         45:c7:d4:cc:1b:b2:c1:5e:05:a1:0e:a7:b8:00:58:92:3e:5a:
         87:97:eb:dd:23:dd:7c:53:69:27:27:37:a2:5c:52:8b:c9:e1:
         9a:fe:9d:7e:ae:31:ce:11:d4:bd:85:32:98:83:61:54:46:90:
         5d:02:f2:c3:4b:0f:fb:95:a8:16:13:27:51:c1:9d:03:5b:7f:
         8e:bd:20:29:b6:df:17:13:f7:4c:57:2c:26:7a:cc:bc:0b:ea:
         99:6e:4e:12:e2:8d:a4:df:fb:3e:ac:dc:e5:47:dd:f8:90:dc:
         a1:91:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org