Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3232203d3e20323634343034.roa
File:                     3133382e3235352e31362e302f32322d3232203d3e20323634343034.roa (raw, json)
Hash identifier:          bcbFlKjf7Jy616EWi5UEOmx8BRBe4r+UDDl1RKxaaZU=
Subject key identifier:   50:D9:AE:8A:B7:85:85:AC:C2:8C:6E:DA:28:48:AF:3F:0F:28:2F:AE
Certificate issuer:       /CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
Certificate serial:       1AAFB23C06AC22AD2350157E8E291590A3C6A570
Authority key identifier: 9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3232203d3e20323634343034.roa
Signing time:             Fri 20 Oct 2023 14:40:13 +0000
ROA not before:           Fri 20 Oct 2023 14:35:13 +0000
ROA not after:            Fri 18 Oct 2024 14:40:13 +0000
asID:                     264404
IP address blocks:        138.255.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:af:b2:3c:06:ac:22:ad:23:50:15:7e:8e:29:15:90:a3:c6:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6
        Validity
            Not Before: Oct 20 14:35:13 2023 GMT
            Not After : Oct 18 14:40:13 2024 GMT
        Subject: CN=50D9AE8AB78585ACC28C6EDA2848AF3F0F282FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:14:46:f6:81:dd:2e:8a:40:f9:5a:23:89:
                    da:20:8b:9b:77:8e:5c:39:7e:9a:92:ae:2a:85:5c:
                    5e:b3:76:8a:41:8a:80:b8:00:c5:85:77:93:a4:8e:
                    1d:ba:c7:82:8d:f5:c9:27:cb:9b:38:90:cb:48:75:
                    c5:3c:8b:5c:f4:db:45:f2:16:0f:4e:fc:c0:de:61:
                    45:cf:62:e9:d5:5a:69:8c:4f:d7:59:ab:cf:5b:07:
                    bb:c4:14:cd:d7:2f:77:91:c8:73:15:05:04:ac:f3:
                    c8:17:58:9f:69:c7:80:f1:c1:3e:a1:72:fe:d3:30:
                    71:8b:3b:2c:a0:6f:82:0e:f0:34:8f:6f:9b:77:dc:
                    01:7f:0a:b4:46:f1:55:31:4c:d5:ae:e1:8b:20:b6:
                    14:d4:cc:c2:5d:e9:7c:78:5e:0d:ec:9d:9b:dc:af:
                    f7:bb:25:7a:dc:87:7a:44:be:be:40:4e:9f:42:b5:
                    ea:50:99:a4:b2:5d:1c:07:73:93:c5:91:8b:74:b8:
                    4a:ff:d5:5f:d8:55:cb:60:ea:10:ba:65:74:48:0c:
                    e0:98:dd:63:65:57:1b:b7:f0:99:3f:9b:9b:4d:3c:
                    a6:52:fb:26:a7:19:79:d1:b4:63:ca:39:b4:51:50:
                    03:08:a2:96:3a:03:7e:02:05:91:c2:2b:1c:34:c3:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:AE:8A:B7:85:85:AC:C2:8C:6E:DA:28:48:AF:3F:0F:28:2F:AE
            X509v3 Authority Key Identifier:
                keyid:9E:7F:85:E6:64:5B:79:3C:FE:0D:1D:98:7C:09:FB:13:7B:FB:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E7F85E6645B793CFE0D1D987C09FB137BFBF7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3232203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:4d:50:3e:a5:f9:b2:85:f6:d9:40:e1:af:8b:9f:d2:59:
         fb:b1:01:ba:2c:a3:5c:22:3e:51:53:e3:3f:ea:d6:6a:40:b7:
         64:33:8f:13:2d:e7:69:19:4a:a9:a4:78:2d:99:92:f8:77:48:
         0a:3a:cc:32:8b:f3:42:a2:fe:ba:f3:8b:f5:3f:c1:24:a1:b0:
         24:e4:e8:f8:af:8f:53:f1:9d:08:00:d4:af:12:2e:fe:18:33:
         c7:ed:9f:32:0a:6e:9e:d4:e7:2a:3f:9c:5c:89:60:e9:ed:f4:
         1c:4a:0a:72:04:48:4c:77:05:59:c8:bd:f1:d5:6c:15:3f:6f:
         9d:61:f3:07:11:82:33:92:42:7d:99:4f:ba:fb:18:d4:43:3f:
         57:fb:4d:8b:2e:1d:3d:f0:07:59:3b:51:bd:a3:ae:32:8b:f0:
         84:76:37:4f:32:81:3f:21:11:2d:50:d8:16:f6:f6:24:aa:17:
         99:da:f7:5b:47:c8:b5:2a:2f:9b:ff:55:3e:45:ab:23:8f:ae:
         9d:92:a8:fa:74:c1:34:60:dc:7a:f6:2e:99:e5:9b:a1:73:17:
         19:14:73:a7:03:41:12:e0:e8:67:ca:48:f6:13:9b:cf:01:aa:
         5b:54:89:07:c2:e1:51:3f:cb:92:b2:57:e8:a6:b1:09:c1:4c:
         e7:86:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org