Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa
File:                     3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa (raw, json)
Hash identifier:          CPCZSg6LBwIarguH9+D4iG2heZt/obryE4ibbWS6A48=
Subject key identifier:   F3:7E:D0:08:B5:F8:57:94:07:27:23:DA:64:BF:7E:7D:53:30:08:EB
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       5686E755752E6F5724BCC9E3293CFE436EEE2EF2
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa
Signing time:             Thu 15 Feb 2024 14:55:37 +0000
ROA not before:           Thu 15 Feb 2024 14:50:37 +0000
ROA not after:            Thu 13 Feb 2025 14:55:37 +0000
asID:                     270877
IP address blocks:        138.185.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:86:e7:55:75:2e:6f:57:24:bc:c9:e3:29:3c:fe:43:6e:ee:2e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 15 14:50:37 2024 GMT
            Not After : Feb 13 14:55:37 2025 GMT
        Subject: CN=F37ED008B5F85794072723DA64BF7E7D533008EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:33:6d:ad:8b:bb:af:a4:81:3e:26:ff:b1:
                    90:2d:1e:70:4e:bf:78:48:8f:7c:dd:f4:0c:9d:3d:
                    09:8c:ad:b8:bd:e1:46:00:e0:29:e5:66:4e:57:24:
                    18:8c:5f:7e:ed:30:c3:d1:62:6d:dc:6f:17:67:1d:
                    e1:8a:8f:b7:cc:66:ba:d5:0d:a1:30:a2:dd:f9:e1:
                    ce:ad:c5:72:51:bd:81:bf:9e:13:46:ed:26:a9:d2:
                    72:84:09:1b:11:0a:ee:f6:78:f4:0f:84:db:f2:34:
                    81:b8:cb:7f:19:71:64:00:cd:ea:2b:b0:8f:00:35:
                    ce:93:fd:d8:53:09:f6:d2:25:43:14:e8:4c:30:55:
                    aa:ec:08:8c:51:89:56:31:84:e7:74:51:6c:6b:35:
                    c7:83:bb:f9:44:65:e0:c8:09:61:28:b6:ce:dd:37:
                    05:82:13:f7:cd:26:2c:47:b4:5f:1e:ba:ac:78:df:
                    2e:38:ad:c2:88:24:2b:43:f5:96:23:13:c2:84:40:
                    ca:49:46:78:8e:ae:f8:28:ae:e1:66:83:85:db:92:
                    0b:b5:b8:6b:3f:c7:5a:bc:19:73:c9:4a:10:35:38:
                    c0:6a:e8:cc:2a:ef:0b:af:bf:d9:4a:41:6d:2f:12:
                    c4:0b:b3:f4:50:9b:d9:cc:c6:12:04:83:a2:bb:82:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:D0:08:B5:F8:57:94:07:27:23:DA:64:BF:7E:7D:53:30:08:EB
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32332d3233203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:f8:24:75:d5:88:74:e5:ee:26:1a:01:87:20:4c:18:d6:98:
         98:9b:a1:e0:f3:7c:00:be:8c:cb:30:79:b8:61:b0:c0:33:c9:
         69:df:10:53:b1:53:16:a6:70:ba:e4:1a:54:4c:2e:f7:89:1c:
         9b:85:14:70:25:b5:f9:47:76:c3:06:bf:60:be:fd:44:5d:45:
         0b:da:83:da:c7:ac:99:c1:0f:bb:ad:ff:4f:4e:6c:ce:97:b3:
         32:48:dc:de:2f:94:d2:c2:15:95:e1:c1:b5:d0:5f:4d:36:81:
         15:ba:89:73:10:fa:c8:96:99:b7:c6:1f:2c:14:9a:af:65:97:
         4c:87:12:43:16:c4:5b:cd:df:6e:93:31:e9:e6:f7:68:da:5d:
         f3:11:4a:58:9a:43:19:a2:05:74:bc:9f:64:dd:dc:e8:c0:1c:
         bc:50:df:ac:6c:af:2c:8c:4c:7f:f1:41:02:7e:ea:3e:c8:41:
         09:2d:61:49:11:f1:32:82:a2:63:03:cb:e1:b7:0c:3c:37:56:
         a2:6e:68:4b:a0:4c:d4:cb:15:2b:88:e5:12:e8:b7:5c:26:dc:
         3a:4a:99:da:31:8e:f7:0e:34:84:5c:c2:53:6c:70:f1:e0:37:
         ad:6b:d1:16:0e:75:30:38:a0:27:b3:63:1f:ff:37:d0:09:72:
         4a:cc:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org