Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32342d3234203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          97uWVTe/QmDOr5SSbBKhSWLZkS9Proo3IVff0Vtlqww=
Subject key identifier:   19:64:04:62:68:8E:8E:4D:08:C5:4C:A8:22:9F:26:50:26:A0:97:91
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       6E794B0C8F72F347BCC3E6308B43B55BD963E485
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:42 +0000
ROA not before:           Tue 02 Jan 2024 21:11:42 +0000
ROA not after:            Tue 31 Dec 2024 21:16:42 +0000
asID:                     262293
IP address blocks:        138.94.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:4b:0c:8f:72:f3:47:bc:c3:e6:30:8b:43:b5:5b:d9:63:e4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:42 2024 GMT
            Not After : Dec 31 21:16:42 2024 GMT
        Subject: CN=19640462688E8E4D08C54CA8229F265026A09791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:12:7c:01:b1:6f:67:f6:91:52:f1:31:24:
                    ee:d7:66:81:5e:e8:eb:3e:78:27:fc:b7:24:db:ce:
                    48:17:e7:1f:7e:2c:26:8a:51:eb:77:dc:36:df:7a:
                    ee:84:15:d6:76:11:f8:e2:ce:a6:03:69:2a:ab:ff:
                    85:55:78:23:ac:42:d7:7a:58:aa:85:cb:01:3b:32:
                    d8:c8:c9:b2:f8:03:63:cb:1f:fc:7b:44:42:0e:27:
                    f5:c5:d9:59:dc:22:3a:80:9e:11:41:a9:1e:8b:d2:
                    a8:e2:82:1c:98:6e:f0:d9:1b:f4:20:e1:bd:e4:96:
                    a7:07:fe:0e:ba:d6:78:8c:0b:a4:18:82:7d:0e:a8:
                    c9:9e:9f:5d:6a:d3:00:2e:bd:b6:8e:92:03:50:dd:
                    46:7f:e3:bc:ca:67:95:69:8f:dc:34:9a:78:76:36:
                    cf:fb:c8:4b:cc:7e:9a:4a:95:07:d2:b1:9e:f1:06:
                    d8:c3:a2:32:e4:75:5f:6a:5f:0d:ad:c7:38:7a:1a:
                    ae:3f:d0:24:50:a1:dd:9f:df:6d:0e:7b:d9:88:19:
                    d6:42:d1:42:9d:d5:5a:81:fc:29:a5:19:aa:f3:69:
                    06:2a:d7:1e:d8:d9:3a:c6:a7:f4:6b:57:a9:ad:34:
                    6a:03:b0:ab:5e:9f:67:1f:66:7d:4d:bc:86:e8:e7:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:04:62:68:8E:8E:4D:08:C5:4C:A8:22:9F:26:50:26:A0:97:91
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:77:ef:be:99:58:8e:57:33:f4:cb:51:47:d6:74:66:e0:f3:
         a8:8a:89:43:00:ca:fd:4e:7d:41:90:a1:16:d9:7c:03:9d:c0:
         5d:03:e0:4a:40:91:b0:cc:be:b3:53:9e:37:55:24:50:c9:5f:
         a7:56:f1:b8:6c:f7:65:9d:02:ad:d5:34:7c:44:5f:6a:50:34:
         d6:e6:ce:d6:27:97:43:cc:e8:86:b2:80:4a:68:e0:f7:a5:9b:
         a1:8c:84:34:10:1f:b2:64:8d:10:6f:df:90:bd:53:8b:d0:e9:
         9c:c4:74:d5:4c:3d:b9:15:84:8e:49:aa:d0:88:9d:4a:bd:d0:
         de:da:d7:b7:2e:37:73:49:5a:32:38:8b:cb:02:3b:69:86:b1:
         ef:85:a3:9d:40:df:ff:3d:97:10:38:3f:0e:e2:e9:7f:32:1d:
         87:ee:a3:87:b4:85:c4:12:27:1a:4c:eb:91:be:06:dd:f7:2b:
         0b:80:35:01:9c:25:06:7d:b0:81:53:de:c7:64:02:d4:5c:77:
         af:76:4b:b3:a5:0f:5e:ae:a6:ab:08:be:e6:ef:81:84:3f:7f:
         7d:1d:f0:4b:98:dc:04:c3:a2:2c:97:41:95:6e:7d:3c:92:8a:
         5a:50:72:94:17:72:85:b4:94:53:94:eb:bb:33:e2:6e:f2:77:
         e7:f0:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org