Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32322d3234203d3e20323633363239.roa
File:                     3133382e302e3234382e302f32322d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          0RxE9Msvkp3A4csuvk+ND5LCk+ntGmsIitfINjeLRrU=
Subject key identifier:   71:B8:26:9B:7C:09:E3:57:31:E6:37:E6:29:2B:34:B2:A0:E3:63:48
Certificate issuer:       /CN=B873691D1ECA5782C8E402766C0263DBED41A2F2
Certificate serial:       0BB13F09FA0EFD852EA6583EBC3266DB8FF8F2FF
Authority key identifier: B8:73:69:1D:1E:CA:57:82:C8:E4:02:76:6C:02:63:DB:ED:41:A2:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32322d3234203d3e20323633363239.roa
Signing time:             Wed 14 Feb 2024 14:31:32 +0000
ROA not before:           Wed 14 Feb 2024 14:26:32 +0000
ROA not after:            Wed 12 Feb 2025 14:31:32 +0000
asID:                     263629
IP address blocks:        138.0.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b1:3f:09:fa:0e:fd:85:2e:a6:58:3e:bc:32:66:db:8f:f8:f2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B873691D1ECA5782C8E402766C0263DBED41A2F2
        Validity
            Not Before: Feb 14 14:26:32 2024 GMT
            Not After : Feb 12 14:31:32 2025 GMT
        Subject: CN=71B8269B7C09E35731E637E6292B34B2A0E36348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:9d:5f:fe:8d:0c:b1:a0:82:6c:73:ad:5d:
                    a0:08:3b:79:37:7e:3c:bd:c8:2c:3a:70:06:87:30:
                    cb:42:0f:09:41:ee:8f:78:f5:62:8b:98:37:0a:e9:
                    87:04:8d:60:98:a0:50:fa:ce:e9:d2:3a:ea:f7:eb:
                    4d:66:89:63:5d:88:9e:cd:18:71:e8:7a:72:0a:83:
                    ca:93:ac:60:cb:65:16:f1:0e:3c:3f:5d:e4:25:37:
                    57:94:1d:10:e8:93:f6:56:a3:20:77:75:a1:07:d4:
                    9a:db:e0:93:45:d2:d3:4c:ed:e1:02:a2:d1:74:59:
                    6a:10:cd:c9:b2:27:6e:4e:35:7c:db:c4:38:d2:69:
                    0e:d8:66:ac:a2:04:7f:a4:58:13:64:11:45:79:f5:
                    da:ad:9e:ef:ad:e0:0c:88:3e:bd:a6:a4:bb:b8:e5:
                    5d:54:e4:78:5c:10:f8:7c:4f:58:fa:34:46:8f:95:
                    e4:99:cc:a5:2d:d6:5a:c3:f8:df:88:85:0a:1a:35:
                    77:ef:15:1e:38:d7:cd:19:35:50:45:0e:e0:f5:66:
                    db:10:8f:c8:aa:34:70:43:14:98:40:90:d8:83:72:
                    85:b7:c5:34:9b:ae:1a:1f:1f:07:88:b3:41:1f:a2:
                    b4:65:34:55:b1:7e:d6:fe:1f:bd:e3:1c:a1:ee:02:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:26:9B:7C:09:E3:57:31:E6:37:E6:29:2B:34:B2:A0:E3:63:48
            X509v3 Authority Key Identifier:
                keyid:B8:73:69:1D:1E:CA:57:82:C8:E4:02:76:6C:02:63:DB:ED:41:A2:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B873691D1ECA5782C8E402766C0263DBED41A2F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32322d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:67:56:0d:c8:8d:77:e9:b9:3c:78:a8:77:39:68:ed:70:13:
         d4:c8:34:3d:72:8a:72:46:1d:61:62:15:58:ae:76:5f:9f:85:
         77:0d:8c:64:c6:ab:6c:55:1f:55:88:3a:dd:46:7f:87:15:a6:
         69:b7:77:30:03:b3:a8:be:47:aa:db:42:79:70:d8:4f:c4:f3:
         a6:6d:0d:d9:e9:04:cb:22:03:8a:08:c5:02:7c:59:de:9e:da:
         f3:0b:89:30:6b:dd:aa:ae:5b:6e:a7:82:8c:31:90:79:7b:dc:
         2a:49:e9:e2:49:5f:e5:41:f4:cc:4c:34:fc:82:7c:22:42:5f:
         76:14:4c:25:c7:ae:b9:d2:10:d2:56:7d:ec:d9:3e:3e:49:9f:
         11:70:24:80:ee:3c:02:f9:a6:1f:bd:da:08:36:87:82:24:c9:
         b4:48:96:11:de:3b:57:a8:6a:19:92:77:98:8a:b6:50:95:43:
         f6:81:aa:7c:d6:3d:17:5d:87:2c:2a:07:99:d1:c7:62:c7:26:
         91:52:a3:66:46:01:a3:18:3d:10:3d:21:c7:2e:b7:d9:b3:e0:
         ec:15:a6:b4:23:12:6d:78:d4:a8:97:f0:8f:6f:e5:76:b9:bb:
         f4:ff:66:1f:98:d2:57:38:49:89:0e:4a:e1:3d:4a:1f:bc:3b:
         f5:05:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org