Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          An7DaxTtQtEg69bRaOs4hxdy6EAz0Z/wkj/fiIYhDoE=
Subject key identifier:   2E:ED:71:E4:89:C8:8E:0E:63:7F:70:60:7E:D7:F4:A1:25:59:DE:7E
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       4317D327945E16F5A518C521639AEFE48C62C244
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 15 Feb 2024 14:55:35 +0000
ROA not before:           Thu 15 Feb 2024 14:50:35 +0000
ROA not after:            Thu 13 Feb 2025 14:55:35 +0000
asID:                     270877
IP address blocks:        138.185.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:d3:27:94:5e:16:f5:a5:18:c5:21:63:9a:ef:e4:8c:62:c2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 15 14:50:35 2024 GMT
            Not After : Feb 13 14:55:35 2025 GMT
        Subject: CN=2EED71E489C88E0E637F70607ED7F4A12559DE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4b:79:4a:10:f3:21:0b:4a:dd:f8:f0:42:a6:
                    75:14:b5:1d:fc:a7:87:a0:25:97:c6:53:33:67:1c:
                    12:37:aa:62:f4:fa:c6:bb:5c:79:76:47:21:1b:3a:
                    28:12:42:a7:66:fd:95:f1:55:92:25:c9:04:05:e4:
                    27:5f:47:07:a9:fd:5f:78:5b:ed:49:00:bb:46:ad:
                    b0:f9:92:0f:95:1c:ff:24:e6:9e:34:4c:16:13:3f:
                    46:ff:40:e9:d6:e8:73:67:ca:53:a3:27:ae:69:4a:
                    fe:35:25:34:38:ff:ae:fa:a5:df:61:91:82:e1:b5:
                    98:07:bc:ee:44:9d:fa:6c:74:09:d4:77:87:40:8b:
                    c3:13:14:6c:a7:61:df:26:ee:2c:c1:9a:41:fa:be:
                    a9:8d:ac:f6:fe:9b:86:04:2a:2e:a6:e7:de:e8:ff:
                    9f:c4:0c:98:3a:e4:95:ad:10:3a:f0:03:86:12:d3:
                    65:4f:cc:fd:f8:2d:32:ac:56:26:83:20:71:4b:5a:
                    e2:29:b7:73:9d:43:7c:75:3a:22:da:43:ae:8e:13:
                    6f:2f:de:f1:e6:f1:44:c7:e5:df:d0:40:bc:9e:95:
                    11:de:68:8f:ea:a3:0b:cd:7a:09:04:e6:aa:99:af:
                    ee:20:ac:22:c1:fc:32:e9:96:1c:2f:bf:18:ac:87:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:71:E4:89:C8:8E:0E:63:7F:70:60:7E:D7:F4:A1:25:59:DE:7E
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:57:df:3e:43:83:4e:49:02:36:59:1c:23:cb:4e:64:fe:
         41:10:cf:7d:c9:7a:c7:d7:58:66:95:eb:f8:c9:81:70:36:ba:
         3a:1b:c9:b9:53:0b:29:80:49:19:73:d4:76:56:a3:d2:04:35:
         f9:90:4f:15:2f:6b:dd:2b:2e:11:11:d1:2e:18:e4:0a:2d:2c:
         8c:45:c5:d2:ed:ad:76:f8:95:da:a9:3f:5f:58:a0:fb:52:43:
         bd:44:2a:93:92:6b:97:ad:67:d0:2d:54:8f:2c:ce:2d:81:96:
         bd:ce:95:e6:5c:cb:84:b9:66:c3:1d:e9:90:be:8f:2b:42:5d:
         a4:31:8a:f3:7c:a9:1c:27:53:fc:20:e1:6a:d5:26:b6:eb:4f:
         3d:dd:f7:a6:da:aa:b1:04:7c:8c:c9:5b:73:8e:68:ee:21:ec:
         d0:04:7b:4b:3b:8d:55:0e:b8:23:85:93:78:46:69:65:85:2f:
         d7:ca:9c:3a:7c:26:41:98:9e:75:70:13:d2:95:b7:5f:24:83:
         a1:22:10:e9:7f:d9:a2:77:d7:47:56:34:47:af:e2:82:28:1f:
         fa:a0:fa:19:b4:21:e2:c3:74:ff:e8:a2:a1:f8:a8:b0:da:bb:
         93:fe:15:be:44:90:a0:21:be:d2:70:6e:81:0a:2c:36:c6:cc:
         74:f9:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org