Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e362e302f32342d3234203d3e20323634353237.roa
File:                     3133382e302e362e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          Fc8ccuVeG+jq7MRI3TCc/R61Xp8akqbXiqlGjUPyyKQ=
Subject key identifier:   73:D4:97:B8:8E:A0:91:C6:48:FB:1F:82:42:7B:46:BF:7E:A5:89:06
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       3212FB0D414BD8306660BBADA053CFCB26E308BC
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e362e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:00 +0000
ROA not before:           Wed 29 Nov 2023 11:55:00 +0000
ROA not after:            Wed 27 Nov 2024 12:00:00 +0000
asID:                     264527
IP address blocks:        138.0.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:12:fb:0d:41:4b:d8:30:66:60:bb:ad:a0:53:cf:cb:26:e3:08:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:00 2023 GMT
            Not After : Nov 27 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:ec:86:84:33:c4:31:e0:b1:0e:fa:a5:8c:
                    5c:51:15:46:ba:5a:17:b2:07:75:ca:04:e6:1a:55:
                    96:c9:7e:47:d8:d9:28:9b:e9:82:18:88:84:ff:e3:
                    13:18:5e:59:15:6a:f2:5a:e1:79:cc:81:2c:91:1f:
                    a6:c6:84:29:33:fa:2f:3d:00:6c:e9:08:0e:6b:ed:
                    68:b0:ba:45:bf:03:65:82:ab:89:09:3d:1b:93:d1:
                    8b:32:50:c2:11:1a:ca:90:f8:da:a7:44:d4:76:3e:
                    ce:6f:0f:4c:9e:bf:c2:f3:37:15:de:43:b1:64:7e:
                    ff:36:5a:db:e7:de:46:c2:38:33:66:c8:86:62:d3:
                    bb:70:ab:bd:10:a4:b4:11:df:52:7f:7f:f3:44:57:
                    44:2d:ca:36:fd:28:b1:d7:4d:ef:2c:12:08:92:aa:
                    f9:2d:72:00:de:dc:77:8f:99:ba:7f:5d:d0:e3:31:
                    61:8c:4e:04:f5:c9:fe:81:a8:4e:4e:7f:5e:68:f9:
                    7c:d1:4e:e7:e4:6f:09:ae:db:bb:8e:45:bb:a3:ab:
                    9a:9e:68:dc:01:9a:db:2c:b0:18:bd:d7:0d:f1:4e:
                    ab:4b:0f:3e:f5:cd:2a:be:27:fc:56:5b:1f:c9:38:
                    bb:fe:1a:f0:ca:fb:1b:65:3f:7b:8e:1b:42:be:59:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:97:B8:8E:A0:91:C6:48:FB:1F:82:42:7B:46:BF:7E:A5:89:06
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e362e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:ec:00:b6:b4:e7:a6:69:c3:ba:dd:29:46:79:44:42:0a:
         07:7a:70:9d:96:ba:2b:3a:3c:0b:30:43:ce:79:bd:72:45:e8:
         f0:51:c3:f1:1d:b2:e4:04:9e:a4:3b:32:27:74:52:19:bd:d6:
         48:8c:da:e4:17:ed:a8:38:1c:3f:f3:f0:52:d5:33:1f:cb:38:
         b6:f3:79:9e:9b:f7:7f:2b:be:b2:b8:32:58:99:62:75:87:21:
         74:6b:f7:c4:25:98:d6:fa:d9:4d:40:ac:d7:1b:a9:c3:4e:58:
         76:0d:74:31:9a:41:7a:47:f5:03:c0:cd:78:de:5e:8e:b0:7e:
         80:91:7c:11:a1:48:31:b8:04:5c:3d:95:6b:02:d0:84:8d:ee:
         8e:72:28:f6:09:ae:f3:04:c4:89:25:e6:fa:66:5d:97:24:3d:
         e4:cf:96:c6:18:9c:cb:2a:bd:a3:20:94:b2:93:94:0d:93:30:
         75:2a:bc:a4:8f:8e:bf:0c:cf:4c:a5:ba:47:14:9f:51:28:54:
         48:dc:12:60:e5:00:bc:03:08:c1:f3:a3:3b:30:44:f7:c6:26:
         b0:10:ba:95:33:03:c4:7d:e9:78:79:a6:71:a1:d7:4f:ad:1e:
         e1:8e:03:43:25:78:8a:56:98:eb:31:b1:a6:57:16:f9:38:14:
         8a:af:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org