Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233382e302f32342d3234203d3e20323634353237.roa
File:                     3133382e3138362e3233382e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          9Kz0pirvxIDs5qJ5JS8PG5N3NM9gO1UpTyNBe9qSqwM=
Subject key identifier:   EB:F7:59:B7:AD:7D:00:C4:B9:3F:A6:16:F7:E6:47:01:41:E2:99:90
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       262FB13A251FEF17B68568FAA84E3CC9C0A6C4CA
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233382e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 13:00:00 +0000
ROA not before:           Wed 29 Nov 2023 12:55:00 +0000
ROA not after:            Wed 27 Nov 2024 13:00:00 +0000
asID:                     264527
IP address blocks:        138.186.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:b1:3a:25:1f:ef:17:b6:85:68:fa:a8:4e:3c:c9:c0:a6:c4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 12:55:00 2023 GMT
            Not After : Nov 27 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:33:4e:63:50:45:8c:24:06:15:6c:83:32:
                    d1:d7:55:b9:ab:0e:e0:bf:ef:d4:0e:75:2a:25:1a:
                    fd:cf:27:4a:55:09:fc:4e:08:f9:7d:5b:85:09:81:
                    8e:37:fa:75:40:92:b9:3f:90:7d:bd:23:4b:ab:f6:
                    07:38:03:4f:83:dc:69:d6:b1:82:5f:c1:4e:ce:29:
                    19:56:76:3f:0e:e9:16:42:a8:f7:ac:66:dd:3f:35:
                    77:55:87:f2:c6:64:57:bc:bb:96:a4:2c:69:f3:ce:
                    5c:30:ba:1d:81:90:03:76:bb:56:3e:21:dc:8f:96:
                    76:32:51:50:47:de:ba:16:93:8a:5b:dd:ef:65:ec:
                    0c:e1:35:fb:db:e7:c8:f8:c6:34:24:6d:f9:88:eb:
                    1b:83:20:5d:dc:8b:31:63:da:46:ff:73:16:d8:bc:
                    d3:18:7c:10:e0:fb:5d:f2:58:7d:62:5a:4c:4e:85:
                    07:c8:d1:a9:70:db:9c:e5:37:3a:b8:2f:ba:a6:0b:
                    ac:24:45:cd:14:54:e5:68:0a:20:de:92:03:75:06:
                    fc:0c:82:00:a4:40:7c:d0:27:2e:5e:a9:b4:fe:6d:
                    9c:b5:92:99:8b:4a:4f:b7:cb:31:1a:0b:98:51:61:
                    19:cd:b6:72:f5:04:83:0a:8b:54:e5:7b:31:77:10:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:59:B7:AD:7D:00:C4:B9:3F:A6:16:F7:E6:47:01:41:E2:99:90
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233382e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:57:7f:1b:82:f6:8d:92:58:4a:f4:7b:dd:c0:0d:1e:8c:
         09:2d:cf:da:ce:a1:c2:36:21:44:09:95:bd:92:1c:2e:e4:ef:
         71:79:b4:3a:c7:be:56:df:c5:4a:89:9d:2b:d8:78:78:0b:fe:
         8a:53:37:75:8a:d0:11:20:cc:98:d3:ea:93:31:8e:c7:7d:c7:
         94:b9:09:5b:f0:2c:d6:2d:6d:3c:a6:0f:88:0f:13:53:7f:e0:
         26:e0:cf:2b:94:6c:ae:a8:4e:52:08:f2:84:9f:bc:10:8a:14:
         a9:04:2d:09:e1:58:df:15:c1:ef:72:d3:7a:6f:b4:8d:6f:5a:
         52:48:36:36:00:61:c4:bb:92:3a:52:38:e1:d2:08:cd:dd:dd:
         eb:b0:e3:18:e4:1b:0e:bb:97:ba:fe:95:67:93:30:5d:11:1d:
         28:7c:22:25:d5:7b:d0:a2:09:c1:e0:33:50:23:d5:fd:b4:9d:
         c5:14:53:d1:42:a0:89:a4:e9:26:80:3b:97:ef:28:3e:9f:e4:
         cd:9f:57:e6:8c:cd:67:43:7a:fb:3d:ff:27:04:db:67:c8:2e:
         6a:21:e0:5c:fb:48:5b:ed:51:b1:60:c0:05:ac:6e:69:f0:9c:
         ab:91:53:fc:26:4f:eb:0b:4b:20:bd:1b:58:97:2b:0d:92:61:
         fa:84:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org