Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          5iw4TzMn8zPzBdVdBAVAOGA4++XZxR9j0C4svg60YY8=
Subject key identifier:   90:29:4E:6A:25:8D:FE:C8:09:A2:ED:35:4C:DD:B8:B8:21:29:E4:FC
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       31718F96F404A7C5E503876C80A35599D92393DB
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 15 Feb 2024 14:55:35 +0000
ROA not before:           Thu 15 Feb 2024 14:50:35 +0000
ROA not after:            Thu 13 Feb 2025 14:55:35 +0000
asID:                     270877
IP address blocks:        138.185.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:8f:96:f4:04:a7:c5:e5:03:87:6c:80:a3:55:99:d9:23:93:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 15 14:50:35 2024 GMT
            Not After : Feb 13 14:55:35 2025 GMT
        Subject: CN=90294E6A258DFEC809A2ED354CDDB8B82129E4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:99:79:35:95:49:df:1e:d4:4d:cf:5e:93:
                    f1:0d:cd:4d:7b:4f:9e:d3:f0:12:5a:25:cb:ba:86:
                    2f:40:a0:15:2f:02:2c:53:ed:d9:d7:dd:ab:76:b4:
                    0a:4a:6a:8a:c5:73:d5:5a:41:aa:64:f0:87:e4:6f:
                    54:65:f4:9b:8d:e5:b5:4a:3c:fa:e6:6d:33:29:8f:
                    de:5c:b0:97:5a:ad:ce:cd:0d:a5:6f:db:fe:10:a9:
                    aa:ce:b4:26:1b:6e:b1:0c:64:08:c2:03:04:17:ce:
                    48:a3:7b:36:bb:04:2d:15:11:b1:f2:d3:07:fd:de:
                    56:e2:8d:33:71:70:0e:6b:05:4b:67:ed:e4:f6:e3:
                    4a:7f:9f:9c:54:35:37:29:79:3e:5e:0c:7f:41:94:
                    f2:53:e6:fc:e3:72:60:87:19:5e:11:5a:37:14:0c:
                    88:17:a4:88:23:eb:27:0f:39:e7:af:d6:04:f4:11:
                    a2:f0:8c:2c:a6:ee:77:6e:41:97:1f:23:2d:4f:65:
                    c8:4c:02:cb:b5:89:24:15:fe:69:00:77:00:75:3d:
                    ca:7f:cf:70:c9:c1:5f:7f:bb:c9:4c:77:c3:90:e3:
                    05:55:88:ab:53:18:ce:84:67:4c:b0:5a:bc:41:55:
                    44:1b:fa:d4:9f:35:1e:d4:0d:a8:17:22:8b:89:3b:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:4E:6A:25:8D:FE:C8:09:A2:ED:35:4C:DD:B8:B8:21:29:E4:FC
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:82:3b:b1:61:00:7b:37:33:9f:23:d8:9c:98:a8:6c:a4:
         a5:99:d2:b5:95:82:7d:d9:2a:b9:a7:17:08:4c:dd:bc:7e:3f:
         d6:e1:72:a1:a8:00:71:86:8f:ba:a0:c5:bb:4b:0e:fd:6c:ac:
         37:97:ff:5a:27:20:b9:92:c6:5a:4f:4d:df:59:fc:03:65:cb:
         55:7c:73:59:c3:be:e2:0f:11:b6:32:80:82:ff:29:91:4b:6c:
         47:66:0a:ad:31:d2:6b:be:38:89:20:4e:c0:b9:e1:6e:6b:fc:
         20:e6:84:75:b0:83:29:dc:b9:62:92:c7:d3:71:01:aa:e8:de:
         8d:03:3f:a1:af:99:81:e2:88:43:2f:e0:74:8c:dc:4e:c6:a9:
         6e:c4:fb:68:e9:10:4e:6d:dc:53:7f:48:8c:f8:26:29:87:4c:
         5e:2e:9f:0c:c8:26:f5:26:ce:91:ff:00:f5:40:2d:6f:52:6b:
         5c:22:20:64:f1:31:a0:a8:c3:1e:95:77:ce:a3:c4:e0:b7:4e:
         3c:a4:16:cd:9e:1e:94:21:bf:94:9a:aa:54:b7:26:20:e3:40:
         af:ba:62:1b:c1:2a:04:04:82:bd:6d:9c:66:40:9c:2b:14:ca:
         ee:83:23:ae:b8:c3:24:aa:74:b3:2b:61:6e:0d:26:07:73:20:
         97:4f:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org