Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132392e302f32342d3234203d3e20323633393134.roa
File:                     3133382e3138352e3132392e302f32342d3234203d3e20323633393134.roa (raw, json)
Hash identifier:          Q78lWpSz25fbXt129D9wxFRNIW2L54097D6yta0N7E0=
Subject key identifier:   F8:C2:A1:A4:42:6F:64:03:A5:18:AA:2E:29:EF:16:B2:BD:BC:9A:6D
Certificate issuer:       /CN=7D024D482794E0E96397A274EC4071AD93013B55
Certificate serial:       029F3E5261867A72B6F58028AC860249CB3397FC
Authority key identifier: 7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132392e302f32342d3234203d3e20323633393134.roa
Signing time:             Wed 17 May 2023 14:16:01 +0000
ROA not before:           Wed 17 May 2023 14:11:01 +0000
ROA not after:            Wed 15 May 2024 14:16:01 +0000
asID:                     263914
IP address blocks:        138.185.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9f:3e:52:61:86:7a:72:b6:f5:80:28:ac:86:02:49:cb:33:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D024D482794E0E96397A274EC4071AD93013B55
        Validity
            Not Before: May 17 14:11:01 2023 GMT
            Not After : May 15 14:16:01 2024 GMT
        Subject: CN=F8C2A1A4426F6403A518AA2E29EF16B2BDBC9A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:84:87:50:dc:bc:01:4a:9d:53:bf:c7:39:
                    be:1e:4d:5f:1d:10:ec:ab:de:08:c9:51:c6:b1:e4:
                    d0:c1:01:7a:39:5b:93:ab:a8:66:64:3e:03:10:c1:
                    08:85:58:be:d7:f0:8e:c1:39:e5:08:1e:34:61:c7:
                    53:b0:55:9b:54:5d:e7:6c:d8:16:5b:3e:01:5e:ee:
                    b3:b0:92:ca:dd:dc:11:86:21:90:b8:1f:da:f4:68:
                    46:a4:7a:4a:75:d0:dc:eb:d7:1f:b0:26:85:40:02:
                    44:9b:81:82:d8:67:08:a1:97:36:2c:45:13:23:bd:
                    f0:a0:ba:95:9f:2f:6a:ee:72:59:e4:e3:44:ff:c5:
                    b2:fb:93:4b:00:cb:63:72:40:2d:27:a9:53:fd:9d:
                    9b:d4:c3:24:9f:ac:2e:a6:ac:9a:5c:f3:d2:35:d2:
                    e4:42:8f:cd:78:26:ae:4d:a5:8d:79:6f:97:c0:18:
                    52:e5:a5:0e:61:ec:31:76:e5:e6:bb:66:13:d6:8a:
                    c2:8b:7c:f1:3e:50:e7:09:67:0d:8a:56:93:e2:a3:
                    84:62:9d:0b:dc:74:dd:14:8f:aa:b4:33:97:ea:3c:
                    c4:53:52:8b:bd:00:fe:03:fa:7f:0c:06:1e:7f:55:
                    86:d5:8e:b2:b7:02:6e:1f:75:fd:ee:77:ca:f6:16:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C2:A1:A4:42:6F:64:03:A5:18:AA:2E:29:EF:16:B2:BD:BC:9A:6D
            X509v3 Authority Key Identifier:
                keyid:7D:02:4D:48:27:94:E0:E9:63:97:A2:74:EC:40:71:AD:93:01:3B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/7D024D482794E0E96397A274EC4071AD93013B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D024D482794E0E96397A274EC4071AD93013B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132392e302f32342d3234203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:27:86:35:5a:c7:7c:51:61:47:70:25:00:66:ce:98:be:
         ff:e4:04:85:c0:3e:db:0e:e6:8b:78:c1:4e:e3:ae:ea:97:83:
         d8:1d:0e:8f:30:5d:32:60:92:1e:05:12:1a:1b:d3:47:c1:c3:
         70:a9:8b:c3:9a:3f:cd:c3:98:72:59:70:c6:09:81:29:a1:ad:
         5e:1b:84:cd:72:51:50:67:37:5b:7d:5c:44:c6:7e:c4:49:de:
         40:9b:be:77:66:60:a7:fa:43:9a:d6:d0:d5:d0:3b:70:38:bc:
         25:0f:24:a6:75:65:16:8b:17:f6:f8:e5:87:50:b8:a4:12:4c:
         f1:46:3d:94:5d:a4:3e:f9:4a:c5:d5:68:f3:0f:b4:c4:ff:50:
         49:d2:49:6d:5e:c5:d9:42:a3:ff:ee:37:c7:e8:98:b0:53:42:
         3e:38:8c:9b:e6:98:6a:1e:5c:b5:b5:68:bf:70:3d:91:9f:7c:
         18:f3:e0:62:db:a1:03:9f:44:87:f3:58:84:93:9b:93:1c:97:
         71:00:39:c2:b0:67:93:d0:55:6b:1f:7b:e8:9c:b8:5a:7e:60:
         6c:ef:7c:c0:f8:52:0e:85:b9:99:d0:80:56:80:45:c6:d0:eb:
         62:8a:a1:22:7a:92:6b:75:de:86:ec:26:9c:d5:ca:4d:7d:1e:
         a7:74:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org