Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          0OIJn8oMkpyQy2YyaEWRHp2GlBykYkady5glD2hu7Bg=
Subject key identifier:   C9:EB:AC:5F:E6:2B:54:19:F9:F0:7B:ED:0A:92:8A:26:B0:98:DC:33
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       0F5E685C63999B0C0DAB9E806713F46B96DB55B6
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:50 +0000
ROA not before:           Tue 22 Aug 2023 18:17:50 +0000
ROA not after:            Tue 20 Aug 2024 18:22:50 +0000
asID:                     264585
IP address blocks:        138.36.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5e:68:5c:63:99:9b:0c:0d:ab:9e:80:67:13:f4:6b:96:db:55:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:50 2023 GMT
            Not After : Aug 20 18:22:50 2024 GMT
        Subject: CN=C9EBAC5FE62B5419F9F07BED0A928A26B098DC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:5d:46:80:ff:97:17:6c:a2:05:5b:6a:dc:
                    db:85:fa:e4:bd:77:23:dd:04:1c:6e:3c:c2:9c:6a:
                    af:5c:50:a4:f5:73:eb:2f:91:c4:82:aa:7a:81:0b:
                    82:16:26:ef:6a:ba:f6:3b:d2:cf:0f:00:58:2e:ab:
                    7d:14:79:38:04:1b:f9:6c:53:42:f0:a7:d9:9a:60:
                    3f:99:c0:05:e2:1a:5b:4b:32:8e:64:b2:c3:ef:7d:
                    dc:9a:bc:d8:45:ed:52:23:82:e6:25:36:66:5d:ae:
                    69:30:bb:f0:d2:c4:5a:c2:86:04:cf:9c:0f:92:af:
                    a1:c8:f0:3b:b5:aa:65:06:53:6c:78:80:81:98:a9:
                    98:c3:67:da:16:63:82:98:1b:1a:a5:71:df:1e:0c:
                    10:6a:65:64:29:da:15:b5:50:3c:46:b9:6d:3a:d2:
                    7a:2f:0c:e8:fa:5f:a9:c6:e4:7d:25:2e:10:d3:01:
                    8d:07:92:62:8a:7d:b3:40:a4:99:57:0b:7c:be:9c:
                    a9:6d:47:c5:b3:96:10:31:6e:fe:66:cd:52:67:c0:
                    22:b3:08:4e:e6:0f:cb:df:38:7f:a5:30:58:c2:9d:
                    9b:73:99:9a:9b:91:ec:d5:f9:f6:3e:58:1c:97:be:
                    c7:5e:35:bd:c3:b6:6d:a8:3a:e8:a2:58:e7:6b:ac:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EB:AC:5F:E6:2B:54:19:F9:F0:7B:ED:0A:92:8A:26:B0:98:DC:33
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5a:72:ab:ea:bc:77:5b:91:b5:86:b1:d1:c1:a7:72:39:c5:
         eb:cf:6c:f8:28:3e:e7:a7:9e:5d:cb:ed:fd:d4:72:85:60:bb:
         67:6d:b1:dd:0d:2e:0f:93:c2:d7:3b:94:d6:48:92:f9:fc:6f:
         bf:2e:57:2f:bf:ae:e1:58:9f:61:6d:15:a1:70:ed:2a:50:b3:
         ec:ae:ec:93:bf:4d:4d:f4:75:af:c2:88:e5:a2:80:fc:ba:6f:
         ab:e4:f4:89:15:bc:f4:82:ff:19:30:2e:3d:71:3f:79:57:a7:
         a8:9c:57:9a:d6:4c:f2:ff:22:b2:16:f2:a8:24:4b:15:32:b1:
         06:02:b6:c1:c1:02:6d:54:9b:b0:98:f1:cb:44:8a:45:55:cf:
         a3:20:06:4b:55:55:f5:da:f5:2a:e3:8c:d8:cc:71:61:19:9c:
         47:40:7a:c4:e7:13:ea:5e:b8:10:a8:ce:0b:57:13:77:ad:77:
         eb:3e:12:f3:c1:5d:f0:de:3d:d3:25:41:f7:2d:fd:fe:ce:a7:
         a9:99:89:90:3e:e0:ab:01:d0:4d:21:eb:a2:23:b0:01:c7:01:
         26:a9:2a:d9:99:78:5b:45:48:4f:e1:84:4e:7d:84:05:e0:ae:
         9f:b0:e6:6a:32:2c:70:3f:15:a1:03:ee:58:37:bb:e6:b8:38:
         21:19:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org