Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133332e302f32342d3234203d3e20323634333030.roa
File:                     3133382e3132312e3133332e302f32342d3234203d3e20323634333030.roa (raw, json)
Hash identifier:          0e/3Dz7Yc1pQM9d27pPxVurIO3Ei5k03aHcFr1py7s4=
Subject key identifier:   83:10:81:1E:EF:F4:71:2E:B3:98:57:5B:B1:29:33:83:38:D8:4C:DE
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       056641D6F6E205CA33700AB21DB9EFF911080EA5
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133332e302f32342d3234203d3e20323634333030.roa
Signing time:             Thu 26 Oct 2023 02:50:35 +0000
ROA not before:           Thu 26 Oct 2023 02:45:35 +0000
ROA not after:            Thu 24 Oct 2024 02:50:35 +0000
asID:                     264300
IP address blocks:        138.121.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:41:d6:f6:e2:05:ca:33:70:0a:b2:1d:b9:ef:f9:11:08:0e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 26 02:45:35 2023 GMT
            Not After : Oct 24 02:50:35 2024 GMT
        Subject: CN=8310811EEFF4712EB398575BB129338338D84CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:a5:4d:5c:17:59:dd:ce:54:eb:2a:fd:ff:
                    12:2d:ea:c9:fe:40:50:b8:94:41:d5:19:f7:80:bb:
                    2c:2b:f5:fd:4c:14:c4:b5:ee:e0:1e:b1:56:f9:41:
                    1a:7e:f8:3e:0b:22:e5:10:77:44:94:ca:70:a6:37:
                    0c:11:46:2b:6a:4b:e2:b5:0a:c5:4f:ee:2d:63:69:
                    f3:2f:37:1b:96:9e:33:94:b5:c9:71:dc:72:8a:68:
                    e2:b2:92:c7:f7:fe:d9:26:cb:f9:9c:b6:35:d1:cc:
                    43:7d:c0:72:ed:d3:60:3e:5a:72:6e:45:3e:2e:49:
                    7e:83:82:f2:74:47:41:f6:0c:fb:86:2a:2a:6d:43:
                    8a:3a:5c:d3:c4:41:8e:21:6b:c9:28:49:e4:e8:53:
                    05:2a:9a:fb:25:e8:e1:4f:cc:0b:08:7e:25:1b:f6:
                    ef:db:bd:39:12:dd:f9:39:1b:2e:29:9a:6e:9b:e6:
                    67:58:55:96:41:dc:74:5d:4e:ff:0e:6e:e3:cf:a5:
                    fe:9b:6f:60:7d:ef:40:7e:88:1c:65:0d:a8:a1:a4:
                    9d:94:0a:aa:2f:b0:e4:ad:04:bb:fb:2c:45:b4:17:
                    4a:ba:2b:d8:23:c6:15:4c:0d:7e:b9:5d:6e:c0:b0:
                    78:71:43:ce:d8:1d:69:29:24:76:b3:0c:d4:78:c8:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:10:81:1E:EF:F4:71:2E:B3:98:57:5B:B1:29:33:83:38:D8:4C:DE
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133332e302f32342d3234203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:2b:e5:20:89:41:63:41:36:88:af:55:6b:ad:92:9d:59:14:
         f9:c3:48:81:80:95:e5:13:55:36:2a:76:ed:44:1e:d4:f7:a6:
         88:3e:d2:5a:3e:54:33:63:f0:24:97:c9:20:15:15:e6:78:9e:
         ee:da:4b:34:31:ca:b9:35:19:44:c0:79:a4:31:af:e0:2c:f4:
         fc:42:26:d1:7a:11:7a:29:f2:33:d8:a0:51:31:93:27:87:5c:
         e6:10:d6:18:68:b5:de:fa:68:aa:cf:de:49:91:93:49:e1:6d:
         e6:00:e6:a4:34:38:f0:95:ea:48:27:be:3d:53:4a:25:45:ae:
         f3:01:84:5f:3b:af:71:ea:94:8e:17:7b:df:36:1e:db:2a:f0:
         bd:35:83:f0:f9:9d:86:a6:d3:c7:3c:79:c3:f9:b6:05:4f:a5:
         ee:2d:30:6d:69:6f:4a:97:32:f6:c4:56:6f:bb:a7:13:70:f4:
         78:11:12:5a:16:38:cc:fa:c9:17:20:5b:16:d1:21:db:fe:c7:
         aa:ba:a4:ee:ee:2b:5c:8f:e4:17:14:d2:bd:2f:7a:fc:3a:1a:
         c1:23:1a:7c:86:59:f5:64:4a:8f:e7:eb:33:06:50:d9:dc:01:
         4d:30:65:82:cc:af:f3:80:ac:c9:a6:57:ba:f2:a7:8f:35:56:
         e3:f6:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org