Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          YqtiJYZGXlP6we9WPmIaend4AmFy1LgAKl6ezM62xlM=
Subject key identifier:   50:AA:AD:0D:77:6F:B2:E5:57:C0:B8:6F:02:60:C7:AB:39:F4:C8:A1
Certificate issuer:       /CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
Certificate serial:       7A3C55544FE69F71A65860501F0351B4EC91F13E
Authority key identifier: 54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa
Signing time:             Mon 19 Aug 2024 20:22:16 +0000
ROA not before:           Mon 19 Aug 2024 20:17:16 +0000
ROA not after:            Mon 18 Aug 2025 20:22:16 +0000
asID:                     264585
IP address blocks:        138.36.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3c:55:54:4f:e6:9f:71:a6:58:60:50:1f:03:51:b4:ec:91:f1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54047D92A5979C891EBA43F1DD694EBFCC3DCD1D
        Validity
            Not Before: Aug 19 20:17:16 2024 GMT
            Not After : Aug 18 20:22:16 2025 GMT
        Subject: CN=50AAAD0D776FB2E557C0B86F0260C7AB39F4C8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:a7:ba:dd:2b:90:92:1a:51:87:c7:00:29:
                    55:a1:d4:1b:56:58:66:e3:16:86:f9:b3:0c:00:ff:
                    52:b8:48:79:f0:cc:b0:db:21:c9:5c:9b:b3:6d:a7:
                    9e:e9:5f:b6:f3:4f:74:8b:78:4c:ae:23:e7:9a:cf:
                    13:df:d6:c6:97:df:03:56:8b:96:2b:83:09:1a:67:
                    44:d0:17:3f:a1:b3:5e:e7:b2:83:f0:54:1d:d5:17:
                    a2:34:0e:41:eb:81:a8:38:0c:8f:8a:08:7b:6d:d2:
                    4e:d2:91:d7:24:cf:f4:86:8a:bb:83:e6:6b:2c:81:
                    0c:50:f1:a2:05:1a:00:10:18:34:cb:ef:8e:43:43:
                    d3:74:66:7f:c9:8d:4f:8d:86:9f:e1:30:76:5d:84:
                    e3:f2:67:ac:24:0d:c0:be:7f:5f:a4:4a:14:dc:46:
                    87:e0:f1:39:3f:af:f1:89:b4:90:ae:6f:f5:7e:1a:
                    bc:11:5d:81:a4:fa:c6:3f:b9:91:7d:46:da:8f:42:
                    05:ff:87:92:1c:c2:09:ec:08:66:81:96:87:e5:ca:
                    71:c8:f4:5a:ab:71:c0:4a:31:8f:9a:5b:75:24:0d:
                    0d:b3:2b:a6:fb:69:6b:05:07:f1:35:72:04:ed:ec:
                    22:14:bf:83:59:60:91:09:30:6f:b1:c1:18:8e:ec:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:AD:0D:77:6F:B2:E5:57:C0:B8:6F:02:60:C7:AB:39:F4:C8:A1
            X509v3 Authority Key Identifier:
                keyid:54:04:7D:92:A5:97:9C:89:1E:BA:43:F1:DD:69:4E:BF:CC:3D:CD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54047D92A5979C891EBA43F1DD694EBFCC3DCD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139352e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:80:22:bc:f6:79:fa:02:eb:8a:de:7b:ae:b5:a1:e4:c2:a4:
         88:35:27:64:5f:b7:39:85:0d:05:f2:0e:39:c9:92:b5:86:8b:
         9b:27:1f:b4:dc:39:6c:9e:67:68:0f:07:f0:ea:12:62:c7:a4:
         fe:73:a3:bd:69:1b:9a:0b:60:c0:e4:74:9d:d0:b2:be:b1:b6:
         d7:0a:5b:96:eb:3f:e0:0e:1b:aa:1b:b6:19:f4:cb:d8:9d:f6:
         46:26:6c:98:09:dd:ea:92:0a:3c:16:d1:90:11:18:e5:d8:ec:
         8e:ec:5c:7a:99:17:b3:62:0a:b1:cf:a6:14:34:82:de:06:17:
         fa:b6:45:cc:49:1b:72:f6:fc:67:0f:a0:cf:22:9b:e9:72:5f:
         2b:7d:8e:64:43:47:8c:be:1b:ae:1c:53:95:f4:06:eb:40:be:
         3d:2a:f8:a2:bc:5a:7a:4b:13:7b:54:07:ca:96:a9:34:a3:41:
         9d:12:e3:48:c9:2c:ff:28:ca:0b:0b:53:ee:d3:7a:f8:02:d9:
         f9:b3:0a:90:5e:60:9c:35:a3:fa:38:19:1d:0b:96:3d:79:61:
         2b:a8:d1:ba:3c:4f:76:fc:1f:5c:08:fd:ca:21:ae:40:46:1a:
         59:10:fe:3d:83:90:f9:31:bb:fb:33:ac:dd:e7:61:a7:63:b6:
         68:92:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 15:34:12 2024 by rpki-client on console-fra.rpki-client.org