Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
File:                     3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (raw, json)
Hash identifier:          jqLG8uVxZc760TCvK6TciD0N1UhvbudUSHPz7DJRjIk=
Subject key identifier:   50:21:44:B3:71:B2:EB:60:BC:A3:38:BB:4E:10:60:87:88:1D:4A:F9
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       344FF00BC383F696DFF592011480DA31B8787531
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
Signing time:             Wed 25 Oct 2023 22:38:08 +0000
ROA not before:           Wed 25 Oct 2023 22:33:08 +0000
ROA not after:            Wed 23 Oct 2024 22:38:08 +0000
asID:                     264300
IP address blocks:        138.121.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:f0:0b:c3:83:f6:96:df:f5:92:01:14:80:da:31:b8:78:75:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 25 22:33:08 2023 GMT
            Not After : Oct 23 22:38:08 2024 GMT
        Subject: CN=502144B371B2EB60BCA338BB4E106087881D4AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:ba:16:83:9b:2b:7d:0e:9f:56:33:95:c2:
                    b0:1b:bc:f4:20:64:c7:fe:dc:32:5c:41:a3:20:b8:
                    5b:27:cf:17:c3:9c:89:a8:63:a6:bd:60:60:c0:4a:
                    c3:c7:d1:b6:7b:40:50:12:b9:20:43:27:3c:e1:ed:
                    2c:99:ce:69:eb:7d:19:6d:11:f5:54:fa:95:1a:af:
                    ba:27:44:57:a0:32:9d:52:7c:26:00:89:e5:45:16:
                    02:5d:80:6c:ba:b5:5c:63:8f:7f:07:5a:8d:53:4d:
                    0e:b8:74:2b:46:40:eb:c6:d2:59:d7:d9:32:a9:9f:
                    da:9b:52:6d:02:53:89:71:af:87:59:16:1c:11:cc:
                    f6:71:75:a5:f8:ef:c7:cf:5c:6c:2e:1c:47:20:6f:
                    0c:ae:d5:c2:0a:62:8c:99:8f:d5:04:d5:78:25:41:
                    2a:6c:3b:03:0b:2d:c6:3b:4c:f8:9f:92:b4:45:4f:
                    b3:11:09:5f:ec:1d:7f:a4:8c:24:32:6b:c0:7d:16:
                    96:e5:9f:d1:f2:8a:37:8f:87:68:d6:8d:32:73:3e:
                    69:ec:e5:e6:05:05:b2:c7:13:ed:aa:a6:ba:a6:af:
                    4a:00:cc:21:b3:3e:26:43:e7:1c:89:19:fe:f8:e9:
                    46:58:7e:e3:f0:38:55:0a:8f:0a:e1:5e:b7:ff:e5:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:21:44:B3:71:B2:EB:60:BC:A3:38:BB:4E:10:60:87:88:1D:4A:F9
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:88:cb:e4:1b:c4:3c:b3:51:a0:70:8b:51:d9:fe:23:6f:
         26:03:8e:15:00:bc:d2:fd:73:63:75:95:d2:97:2a:60:fb:13:
         d0:71:6b:5c:91:d6:56:d1:2e:6e:ab:7a:3b:70:b3:b8:94:43:
         cb:e7:b0:5d:8d:65:e2:eb:b0:41:87:16:be:54:fe:b2:27:7b:
         60:54:6a:c9:b7:03:02:78:09:74:dc:19:33:b9:92:72:45:7b:
         64:4e:29:75:fc:93:6a:9a:7f:91:c4:aa:22:96:16:b8:73:cc:
         39:c8:26:14:aa:9f:2d:ce:c1:c5:21:f7:0f:31:e5:26:31:48:
         da:89:af:f9:75:80:b8:fb:5f:36:ad:52:52:f2:b1:b4:e9:ca:
         32:4f:39:bc:b0:e5:25:91:5a:fb:cc:85:a7:1c:12:6e:4e:26:
         8d:16:d2:77:12:b2:7f:f3:b1:67:0f:01:ea:9d:c2:20:28:53:
         f7:1b:3a:1b:cd:0d:dd:7c:b1:c9:c1:34:3c:7e:8a:75:ee:df:
         6a:a1:dd:75:56:c3:3b:9a:19:cb:80:56:f5:40:8a:12:45:86:
         c1:f1:a5:e5:40:e6:83:dc:82:ca:ff:2c:c7:09:58:03:d9:a9:
         03:42:65:c0:cd:11:11:db:3b:21:5b:d2:05:08:e4:17:e3:84:
         36:87:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org