Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          6Z7q5lYA/uscm0lo43yAwECta1QaeeF5edv2YBX3zs0=
Subject key identifier:   9A:22:58:64:BF:13:FF:FB:4F:62:FF:F5:A7:4D:A3:8C:44:0E:59:35
Certificate issuer:       /CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
Certificate serial:       172417D9ECC89309B50F4DAA63CCBF74FF4FEB1E
Authority key identifier: A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 15 Feb 2024 14:55:35 +0000
ROA not before:           Thu 15 Feb 2024 14:50:35 +0000
ROA not after:            Thu 13 Feb 2025 14:55:35 +0000
asID:                     270877
IP address blocks:        138.185.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:24:17:d9:ec:c8:93:09:b5:0f:4d:aa:63:cc:bf:74:ff:4f:eb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Validity
            Not Before: Feb 15 14:50:35 2024 GMT
            Not After : Feb 13 14:55:35 2025 GMT
        Subject: CN=9A225864BF13FFFB4F62FFF5A74DA38C440E5935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:77:3e:84:69:98:19:6a:52:77:27:da:49:
                    6f:ad:8e:69:70:f2:ce:d3:c3:96:30:9c:db:49:a0:
                    57:d2:93:f0:1c:5d:01:bf:e4:d9:be:8e:f0:a9:25:
                    96:fb:66:06:47:2b:df:c3:b0:3d:6c:6c:6f:b0:13:
                    90:e6:88:e9:45:18:ef:22:84:f6:17:58:fd:74:b4:
                    b6:43:ae:68:53:09:c7:a4:a1:87:c2:68:45:70:cb:
                    5c:7d:3a:4c:bd:49:b4:62:5b:6b:3b:72:be:25:e4:
                    fd:7b:7b:38:09:95:94:08:e3:b7:0c:9c:d7:e8:81:
                    5d:74:91:31:a5:b6:9b:66:ec:2f:67:0c:02:20:cf:
                    8f:1c:67:b1:83:1a:b2:8a:2b:20:66:93:a6:20:4b:
                    53:87:8b:06:cc:03:42:55:2a:12:66:2e:ef:10:0f:
                    b5:79:33:9f:5f:fa:da:f0:4f:01:ce:0d:b3:6f:8f:
                    2d:cd:6f:33:c9:30:ee:b9:b1:40:9c:fb:08:0f:3e:
                    28:d2:59:87:87:36:ba:aa:38:d7:e6:13:a4:e0:df:
                    62:99:67:f3:cd:e8:81:7b:e8:a8:23:58:8c:41:86:
                    52:ba:a6:e6:19:0f:1b:0a:80:f7:6c:c7:7b:a2:33:
                    6f:e6:3a:c5:a7:99:06:86:3a:e1:c6:b7:3c:56:c9:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:58:64:BF:13:FF:FB:4F:62:FF:F5:A7:4D:A3:8C:44:0E:59:35
            X509v3 Authority Key Identifier:
                keyid:A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:6c:85:1e:35:1c:83:09:2b:67:b5:8f:61:ef:9d:a8:8a:
         d0:18:52:c1:08:bf:14:63:af:04:a3:fc:93:a4:9f:c4:f9:2f:
         1d:01:ea:59:5e:75:5a:79:ce:22:78:0b:05:44:22:52:0c:3b:
         00:d0:61:07:7d:3c:8a:22:6c:18:23:0d:5a:49:74:68:e6:a8:
         14:68:10:48:49:5b:99:50:e8:e1:64:97:fe:32:de:f9:a2:96:
         5f:fa:db:80:31:d3:ec:0c:29:a0:db:87:2a:95:ff:d6:d0:0a:
         82:c3:32:ea:af:33:2b:7b:ab:ae:77:6d:14:f2:99:c4:43:41:
         34:bf:c9:32:42:ff:95:5c:c5:a1:80:25:f4:54:dd:6b:22:9c:
         a5:30:a6:21:49:7a:e7:f3:b5:95:8d:ba:a8:6e:bf:bc:92:d6:
         27:99:58:37:68:09:43:50:4f:2a:a7:5a:a5:8f:fe:0e:75:66:
         1e:8d:83:25:52:17:82:69:c2:6a:f2:d7:5d:93:6f:75:f5:31:
         f7:f2:95:ac:dd:97:d2:33:d1:24:08:b0:b9:c5:03:93:00:be:
         f7:78:00:0f:a2:88:c1:1d:a8:b6:98:97:0d:9a:07:db:d9:16:
         c1:9c:40:22:e2:9e:45:05:cd:ce:25:0a:88:50:ab:6b:00:43:
         3a:8f:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org