Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          UFhsw1T/68Ly/8Zh6sEMeQ8m1Ho+IjMT2YTJJWO9fo0=
Subject key identifier:   3C:EE:3A:3F:D5:BF:77:9D:AF:78:93:E9:01:8D:2F:BB:79:97:24:F9
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       7A88139232C8C546E93535AF2F2888F33ADC59A3
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:01 +0000
ROA not before:           Tue 05 Dec 2023 22:55:01 +0000
ROA not after:            Tue 03 Dec 2024 23:00:01 +0000
asID:                     263994
IP address blocks:        138.255.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:88:13:92:32:c8:c5:46:e9:35:35:af:2f:28:88:f3:3a:dc:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:01 2023 GMT
            Not After : Dec  3 23:00:01 2024 GMT
        Subject: CN=3CEE3A3FD5BF779DAF7893E9018D2FBB799724F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:11:13:fb:96:eb:67:d3:16:30:6d:5b:5f:
                    7b:e0:0a:43:af:8e:d3:7f:ac:2c:b8:42:09:94:15:
                    5e:1a:44:cc:ec:93:8a:b3:70:e7:4a:a7:db:79:b4:
                    dc:16:78:80:2c:0b:45:93:80:06:c8:cd:77:3c:b5:
                    f3:b1:79:95:ec:88:b4:1d:d7:39:87:0f:69:d7:81:
                    ea:12:fb:d9:70:b3:d2:0c:6e:52:bc:4e:14:d7:ad:
                    22:4f:0f:7c:63:e0:4f:b5:a9:62:2d:d1:d4:dd:12:
                    0f:e5:84:d9:e6:27:40:19:25:72:ed:f0:3b:61:03:
                    0c:0d:ef:56:28:53:a8:4f:95:10:ea:bc:27:a7:f4:
                    01:9a:52:ad:1b:74:50:06:55:07:88:64:99:7d:fd:
                    9b:2d:19:49:cd:43:84:d9:cf:3f:55:c2:72:05:98:
                    6e:90:a1:d5:e8:61:a7:5e:48:c6:4c:e9:e9:b9:6f:
                    bf:92:33:03:15:1a:43:68:c1:0e:fe:9a:5d:db:99:
                    3a:ff:4a:9f:62:bb:4c:80:76:18:97:00:20:96:2c:
                    85:94:bd:c5:9d:92:f1:10:27:d1:69:4a:5a:e4:07:
                    2b:99:f8:c6:11:c9:ae:d7:28:32:97:30:9a:33:55:
                    28:86:10:05:5e:88:3e:45:5e:7d:f2:63:6d:85:7e:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EE:3A:3F:D5:BF:77:9D:AF:78:93:E9:01:8D:2F:BB:79:97:24:F9
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232302e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:45:3a:b0:d5:99:ec:9f:71:89:a6:b5:a6:eb:ed:45:14:
         05:53:e4:97:b1:68:96:9b:05:51:2b:57:4f:6d:3b:4c:23:d8:
         2b:5a:aa:d4:cb:4e:52:08:e4:05:4c:2c:4b:3d:8d:4d:49:41:
         cf:84:4f:0c:18:8b:0b:20:6f:90:68:84:43:c4:dd:03:08:d0:
         cd:c6:f7:a6:8c:4f:fe:43:e3:54:5b:bc:96:24:6d:0c:74:25:
         81:0e:91:06:50:4c:9e:ed:c0:0f:ca:36:05:3a:f0:ca:2b:22:
         de:f2:62:d4:47:7c:7d:6e:62:41:d8:76:12:77:13:8e:80:bf:
         0f:8e:a0:c2:45:45:a4:0d:1f:bb:6d:2b:6f:13:d4:0f:be:7f:
         b6:0f:aa:04:72:01:73:4f:2c:e9:9f:b5:2a:ec:74:ee:25:9d:
         f0:0e:1f:42:fb:88:0c:5e:62:59:d5:d6:e0:60:42:ec:a6:58:
         17:3c:2b:7f:1e:2a:08:c4:a9:e1:7b:cf:97:8b:16:6d:7c:5d:
         3a:5d:59:de:f5:3f:d1:a0:1e:6a:4d:fb:5c:f0:b6:76:2a:38:
         c5:01:06:eb:f4:c3:85:ae:8c:70:c2:38:b2:9e:2f:48:a3:16:
         15:df:be:d6:6c:02:9c:75:bc:1e:c6:18:a3:bd:fd:f6:00:b4:
         bc:c7:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org