Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
File:                     3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          iGMrIZ5+o8oFJlJexj+onfPGVbiCQDQWwTJXKnN36qI=
Subject key identifier:   49:D9:36:C3:3A:96:1B:30:E1:98:9E:76:D8:00:2B:79:9D:95:60:72
Certificate issuer:       /CN=D8E55C69E69D8A1E2662122B8CE898AE2F2C242A
Certificate serial:       44E9C9AE871AF0212F7DFA6112E594567FCA085B
Authority key identifier: D8:E5:5C:69:E6:9D:8A:1E:26:62:12:2B:8C:E8:98:AE:2F:2C:24:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
Signing time:             Tue 23 May 2023 19:12:08 +0000
ROA not before:           Tue 23 May 2023 19:07:08 +0000
ROA not after:            Tue 21 May 2024 19:12:08 +0000
asID:                     264297
IP address blocks:        138.121.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e9:c9:ae:87:1a:f0:21:2f:7d:fa:61:12:e5:94:56:7f:ca:08:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E55C69E69D8A1E2662122B8CE898AE2F2C242A
        Validity
            Not Before: May 23 19:07:08 2023 GMT
            Not After : May 21 19:12:08 2024 GMT
        Subject: CN=49D936C33A961B30E1989E76D8002B799D956072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:05:cf:49:0c:8d:bc:54:74:d2:c2:f4:54:29:
                    d0:f3:8a:bc:9e:8a:e8:4d:4a:d5:54:e4:9b:f5:b8:
                    92:88:c3:b6:59:9e:b3:19:7d:6f:98:4d:e3:db:f5:
                    d0:be:99:6b:2b:0b:4e:62:44:c0:2b:1e:e9:74:16:
                    84:90:2a:62:c4:48:1e:dc:1c:f1:33:0f:32:ac:55:
                    30:06:08:70:8b:5c:51:86:57:e2:7a:1f:1d:ea:5a:
                    ab:5f:f4:25:96:30:51:30:d3:92:3a:cd:0c:08:fa:
                    c2:6d:de:72:1e:cd:db:42:9d:2f:28:cb:2c:46:16:
                    95:1f:bd:2a:4e:bd:07:23:37:80:53:15:97:53:24:
                    83:0f:1c:bf:45:96:87:16:cb:0c:26:f9:63:0b:e3:
                    93:e1:1a:75:ee:83:09:83:44:a6:4c:83:ed:02:8b:
                    aa:88:d7:35:91:55:9b:04:97:ca:c4:54:92:f4:c4:
                    0b:35:a4:a8:3b:d3:ff:ff:69:d5:08:d0:61:4b:26:
                    3f:60:1c:52:96:c2:d1:d4:eb:e0:20:3b:00:b0:ab:
                    77:5c:99:04:ae:cf:05:64:f0:95:a2:cb:36:7e:7d:
                    37:4c:77:fc:d1:86:4d:8e:89:47:12:14:30:83:e1:
                    f8:fb:84:a2:ca:74:2e:9b:80:f4:93:51:d9:33:88:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D9:36:C3:3A:96:1B:30:E1:98:9E:76:D8:00:2B:79:9D:95:60:72
            X509v3 Authority Key Identifier:
                keyid:D8:E5:5C:69:E6:9D:8A:1E:26:62:12:2B:8C:E8:98:AE:2F:2C:24:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8E55C69E69D8A1E2662122B8CE898AE2F2C242A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/1/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:a0:5c:86:60:a3:4d:16:31:fc:c6:a1:f5:21:5b:9f:f9:
         80:89:c0:88:b4:af:01:5a:7a:45:e7:93:d0:37:05:fe:45:58:
         07:9f:7a:c7:87:50:c2:f8:83:2d:52:0a:02:e3:f5:17:0b:cd:
         98:d1:ff:00:73:cf:2f:03:1c:30:c3:9e:ee:16:8d:d6:bb:3a:
         c5:96:7c:1c:23:2a:f5:ff:ef:a6:c6:09:b6:fa:9b:1c:9a:c5:
         53:00:ca:7c:35:d4:3a:f0:0d:36:00:47:a1:78:a7:40:35:14:
         4e:6c:6b:76:be:94:0a:56:1f:f8:e8:80:9e:6f:fc:9b:3a:d4:
         5f:61:18:43:a2:98:aa:59:75:fb:72:b5:f6:56:75:a1:33:09:
         16:5d:70:fb:0b:6d:a1:a2:83:30:e7:95:62:29:45:27:75:67:
         32:6e:67:78:27:78:e7:5d:f1:fb:96:33:ba:10:14:83:91:4f:
         88:00:73:29:d4:45:3e:15:de:66:0a:17:e7:bf:b1:c5:05:56:
         da:f9:60:04:38:f4:dd:86:b1:ad:35:99:ad:a7:59:73:c4:25:
         b5:9b:5b:b9:eb:d9:75:4c:80:e0:72:9b:b1:6f:e5:cf:d5:07:
         0e:93:0d:80:75:21:e3:8d:a6:5c:78:1a:1a:a2:33:64:91:8b:
         38:aa:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org