Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          2oLNDBrpVDmcsE+iN0GU2Hl4R1VkTsAJUFzSk6hMd/8=
Subject key identifier:   25:B8:56:18:81:22:A0:3B:3D:48:27:F0:7E:27:0E:78:96:E8:A0:F7
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       4EDC8BF63CEDCC851E1376267FB30E20A519DE0D
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:00 +0000
ROA not before:           Tue 05 Dec 2023 22:55:00 +0000
ROA not after:            Tue 03 Dec 2024 23:00:00 +0000
asID:                     263994
IP address blocks:        138.255.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:8b:f6:3c:ed:cc:85:1e:13:76:26:7f:b3:0e:20:a5:19:de:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:00 2023 GMT
            Not After : Dec  3 23:00:00 2024 GMT
        Subject: CN=25B856188122A03B3D4827F07E270E7896E8A0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:91:e5:49:72:09:e9:e8:6b:c2:4e:48:f0:
                    7b:9a:9f:8d:ab:f5:59:64:ad:92:14:93:f3:d0:e4:
                    bd:f5:49:7b:d9:9b:8e:53:50:44:72:fe:59:c9:1f:
                    59:be:a7:65:cf:47:c3:2e:e9:e8:10:7f:ef:dd:cd:
                    d4:f5:f6:da:cd:e8:a1:11:40:6c:a3:5e:01:3f:c4:
                    de:3e:14:e6:93:63:0e:8f:ca:6c:60:1a:78:99:dc:
                    95:4b:20:65:60:1e:b3:48:81:03:4f:c1:01:80:a7:
                    c0:36:d5:e1:ed:fd:00:aa:30:d9:23:6c:36:46:7d:
                    5a:41:8a:4c:e0:be:19:d0:d3:f1:6f:2b:0d:54:9e:
                    96:41:2d:bb:de:95:f7:38:09:d4:a2:47:a5:86:8e:
                    4b:7f:1c:18:ae:27:36:ca:2c:0b:89:41:0a:3f:f2:
                    3c:a2:31:70:e9:73:1c:d1:66:59:b7:81:f7:60:4c:
                    3b:9f:25:4a:58:1a:71:df:26:b7:05:7f:ca:ab:eb:
                    07:27:92:11:9a:2d:83:27:17:24:70:31:da:1d:49:
                    66:b9:35:ae:9d:a2:e5:92:8f:11:86:f9:cd:bf:5d:
                    fb:02:d6:e1:07:96:1b:2f:c2:ab:1d:58:ef:63:1b:
                    84:8a:fb:1e:5c:3f:a8:af:a2:41:ab:d7:81:91:9a:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B8:56:18:81:22:A0:3B:3D:48:27:F0:7E:27:0E:78:96:E8:A0:F7
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ec:22:f2:a0:79:e5:42:f5:27:0e:e6:59:1f:a7:e6:01:fe:
         be:bc:a2:11:1e:1a:fb:be:ed:40:bc:35:32:8d:35:e2:4d:ab:
         cb:d0:a7:a0:34:09:31:00:84:05:dc:61:d7:72:14:a6:a6:87:
         ca:db:e4:e8:f3:c9:c6:c4:ab:a9:e1:02:9d:4b:d9:da:0d:40:
         0f:0e:d5:f8:76:82:d9:14:25:71:ab:ab:2f:ad:2a:05:23:35:
         8f:ad:9b:aa:7e:cc:f3:41:35:3a:5b:8b:14:bc:66:0c:c0:7d:
         c5:34:c1:3a:62:cb:b8:f4:f5:58:b1:83:2a:64:64:db:6e:15:
         8d:00:07:de:a4:e4:cb:c7:6c:e9:b3:9a:9b:29:78:de:43:80:
         44:5f:57:8c:7c:50:12:3a:83:86:1e:9b:68:30:d7:fc:45:d9:
         f0:9a:cf:47:9c:b6:c8:15:f3:0c:eb:43:e7:45:d4:01:3a:ac:
         8c:45:e9:f0:d9:ed:38:88:0c:c2:e6:85:b1:92:e7:54:68:50:
         a8:79:45:02:9e:7e:ac:57:9d:98:d3:5b:26:da:09:03:28:19:
         07:17:17:c8:46:12:52:f6:b0:d0:1d:67:f5:d2:3e:5e:d3:fc:
         f4:60:cf:74:c7:db:bd:22:ba:cd:c7:ee:68:71:6b:9f:66:35:
         e9:30:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org