Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
File:                     3133382e3138362e33362e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          2d+sa+oKX17iyhZA3FaAHMivQG1p3yriX0fZ6RjrJPI=
Subject key identifier:   A0:6C:1F:FA:7A:CD:BE:00:36:BE:91:3D:E5:2A:D5:48:BC:D6:EF:7E
Certificate issuer:       /CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
Certificate serial:       336742758BB3BF6C1EED8FA8D1B790038680B3DD
Authority key identifier: AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
Signing time:             Fri 03 May 2024 20:04:26 +0000
ROA not before:           Fri 03 May 2024 19:59:26 +0000
ROA not after:            Fri 02 May 2025 20:04:26 +0000
asID:                     53080
IP address blocks:        138.186.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:67:42:75:8b:b3:bf:6c:1e:ed:8f:a8:d1:b7:90:03:86:80:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9BC515E383756EA5295CF845F5D0BB08BCEA70
        Validity
            Not Before: May  3 19:59:26 2024 GMT
            Not After : May  2 20:04:26 2025 GMT
        Subject: CN=A06C1FFA7ACDBE0036BE913DE52AD548BCD6EF7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:e1:1d:10:de:e1:2a:ee:c9:41:1a:59:08:
                    21:e9:18:32:1b:4b:1f:3a:74:7b:51:60:e8:f0:20:
                    77:48:e4:a8:b4:a2:e2:50:fd:9c:0d:b5:11:9a:e5:
                    31:6a:53:29:e8:fb:d0:a7:79:bc:7d:2f:dd:6d:63:
                    0d:66:80:1c:7c:da:28:14:9b:bd:c4:05:9f:43:d6:
                    c3:a1:e2:f3:82:f0:e4:dc:a1:80:78:e5:c0:8e:72:
                    7d:10:4c:53:5d:5e:94:3e:72:56:68:b3:45:16:0f:
                    8a:0f:21:5e:c6:e9:4e:9c:be:dd:c2:fc:26:08:90:
                    b3:e1:aa:0f:bf:3c:bd:da:56:bf:f0:c1:6f:f9:7c:
                    94:15:0c:3e:68:12:07:88:6b:92:4a:ca:3d:58:1d:
                    2c:e6:cd:64:0c:78:a4:36:a4:25:e6:26:9f:d8:e0:
                    a8:69:c8:d5:2a:02:51:7f:d0:4f:41:b5:65:0f:fa:
                    9d:7a:77:f5:cd:bf:9c:2d:bc:60:2f:a9:6c:7e:3e:
                    65:6f:23:db:c1:43:a2:64:42:36:84:7c:cc:ae:39:
                    eb:bd:c6:a1:3c:54:ae:f3:eb:be:e4:90:ea:54:97:
                    37:75:43:08:5b:c8:94:c5:12:d1:75:ce:58:1b:3d:
                    11:b2:81:25:fc:04:b9:f7:ee:8f:d5:54:b3:fd:c4:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:1F:FA:7A:CD:BE:00:36:BE:91:3D:E5:2A:D5:48:BC:D6:EF:7E
            X509v3 Authority Key Identifier:
                keyid:AA:9B:C5:15:E3:83:75:6E:A5:29:5C:F8:45:F5:D0:BB:08:BC:EA:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA9BC515E383756EA5295CF845F5D0BB08BCEA70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/1/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:f2:8b:26:69:4a:fb:c8:4d:74:2f:76:10:c9:25:c9:40:
         92:18:c3:4b:be:20:cc:60:4a:0c:ec:ee:5d:31:75:9b:66:51:
         ac:ad:1f:30:8f:ca:8f:45:1f:52:b3:f0:8f:b5:b7:27:7b:47:
         b6:e6:b9:01:d7:59:a3:e9:15:af:0d:f9:59:22:f5:f1:b4:69:
         a6:6f:54:21:e6:08:b7:47:80:3c:0a:19:04:53:b1:70:fb:69:
         a7:43:e3:24:fc:12:4e:ad:96:9a:9e:65:55:f1:25:a5:69:5a:
         b1:15:79:83:72:dd:ec:17:ab:ac:d5:b9:3e:3c:4e:43:03:48:
         72:05:39:2a:1f:6c:af:59:2c:91:79:b6:37:77:af:17:5c:0d:
         21:dd:0f:9b:8a:2e:1a:6c:da:40:0c:c6:61:2c:0a:00:ad:28:
         86:e3:fb:fc:19:61:77:fd:8b:da:f6:38:4f:b8:e1:66:40:56:
         e5:f8:10:57:dd:5e:fd:e6:e7:4a:0e:bc:70:41:f1:5c:79:ec:
         4c:da:00:5b:ed:44:8c:16:c1:14:1b:17:5a:cf:2c:0f:68:f5:
         30:08:9a:8a:4a:6c:7b:c8:5a:18:b8:0d:48:ed:fd:dd:72:23:
         c1:b9:d9:b7:ae:a4:6e:54:76:de:7b:1a:f9:16:99:f1:0c:02:
         b6:f8:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org