Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          Zumb85a1FGLAc/DY0QxemINaGnmzQMawtR+90VYXF0Y=
Subject key identifier:   E2:73:12:A6:4A:20:A9:12:EA:4A:E7:2A:A8:21:5E:BD:12:D5:80:B2
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       050A430C36C64B2792DE592CE29AF1F9DBABC639
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:00 +0000
ROA not before:           Tue 05 Dec 2023 22:55:00 +0000
ROA not after:            Tue 03 Dec 2024 23:00:00 +0000
asID:                     263994
IP address blocks:        138.255.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:43:0c:36:c6:4b:27:92:de:59:2c:e2:9a:f1:f9:db:ab:c6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:00 2023 GMT
            Not After : Dec  3 23:00:00 2024 GMT
        Subject: CN=E27312A64A20A912EA4AE72AA8215EBD12D580B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:b2:66:fc:4b:ba:08:ac:de:3b:22:c2:4e:
                    47:c2:36:9c:aa:a8:b1:0d:22:4c:f2:51:67:ae:90:
                    b1:ed:8c:d4:e2:69:e6:cf:97:06:39:c3:9f:8f:68:
                    92:a9:08:86:e7:a4:d4:b2:b2:94:74:99:d0:ab:70:
                    de:84:42:c6:89:95:e6:99:19:b5:c6:6e:dd:cf:53:
                    dc:74:ca:35:06:ae:54:79:b0:7c:36:a2:59:bc:bf:
                    52:fd:ac:35:f7:6f:d3:3a:4e:9a:0c:da:41:71:e1:
                    0e:08:28:b2:6e:02:67:fa:84:7a:ed:55:51:74:c0:
                    28:fa:21:16:8d:38:c0:2c:1f:b3:30:fb:1b:a3:54:
                    01:f7:54:3b:65:a9:71:21:78:5e:18:9f:06:bc:e8:
                    9e:70:44:04:4c:a8:94:8f:e7:0c:54:f5:66:25:12:
                    ef:29:b9:43:f7:b4:4a:9a:47:cb:3c:03:1c:54:b2:
                    5f:30:b3:6c:a6:d0:4d:dd:24:c2:c8:2a:98:6a:9f:
                    97:c5:dc:21:99:e5:82:f6:fb:ce:17:8a:a0:49:aa:
                    0d:37:5f:1f:63:22:b9:28:5a:cb:9b:95:97:1a:1e:
                    26:81:e1:80:85:17:de:a9:92:88:77:38:af:ee:0d:
                    8b:fb:5d:2c:c9:c9:b4:34:f3:93:f1:6a:4b:cf:74:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:12:A6:4A:20:A9:12:EA:4A:E7:2A:A8:21:5E:BD:12:D5:80:B2
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:69:7b:93:bf:ce:82:36:31:a2:22:c7:ad:34:6b:af:35:75:
         71:11:91:85:2c:22:e6:85:ef:91:39:1b:88:b1:f1:48:c2:8c:
         84:79:28:3d:a9:27:3a:d2:75:1f:b0:73:4c:75:7f:53:3f:93:
         f4:38:7b:3d:c5:72:69:6e:00:a3:fa:43:22:95:fb:e5:3c:c4:
         2d:d0:03:ad:a1:a5:ba:75:c9:8b:b6:04:03:1a:af:1f:a0:90:
         96:b3:6d:dd:f8:df:06:b6:b6:61:5f:3c:51:d6:61:3c:e3:e4:
         71:c8:5f:c9:61:45:c5:37:11:b1:91:73:08:02:c9:05:27:cd:
         9c:19:76:c4:e2:19:28:45:56:03:1b:6e:bc:8c:86:60:d0:c7:
         89:83:ed:ef:d0:ec:9a:44:f4:64:76:bd:f6:7e:24:52:91:28:
         3a:e8:12:10:e8:12:68:d0:67:1d:35:18:58:88:75:20:5e:ea:
         bc:0e:92:29:b8:de:1a:c5:97:2d:17:b1:89:f7:29:6e:6b:63:
         29:80:97:be:48:75:aa:86:e7:18:d9:ac:ab:d4:97:29:13:e0:
         6e:70:dd:8c:56:6a:80:52:17:3c:0b:84:66:30:e5:40:6a:e7:
         59:55:f7:bd:6f:34:24:ee:09:e6:27:9b:3c:26:38:12:e5:65:
         a4:67:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org