Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
File:                     3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier:          j+WZm8q/bfUwTc0TvTJNtCGirhNkaZboQs2OgpX8Z0o=
Subject key identifier:   07:C5:0D:D6:03:43:C6:26:6E:D8:F6:27:7D:BC:A1:11:4C:45:A5:56
Certificate issuer:       /CN=10C9E50412BDF457D326557F028EDEA1195C1FD7
Certificate serial:       0847935F70F1CFDA1199077CACE0A2DB6B31962C
Authority key identifier: 10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
Signing time:             Mon 22 Jul 2024 18:36:53 +0000
ROA not before:           Mon 22 Jul 2024 18:31:53 +0000
ROA not after:            Mon 21 Jul 2025 18:36:53 +0000
asID:                     264299
IP address blocks:        138.121.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:47:93:5f:70:f1:cf:da:11:99:07:7c:ac:e0:a2:db:6b:31:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C9E50412BDF457D326557F028EDEA1195C1FD7
        Validity
            Not Before: Jul 22 18:31:53 2024 GMT
            Not After : Jul 21 18:36:53 2025 GMT
        Subject: CN=07C50DD60343C6266ED8F6277DBCA1114C45A556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:57:f7:14:73:37:48:d5:39:21:dc:4b:d9:
                    e9:cc:32:5a:7e:14:7f:a5:c3:19:7c:a1:ae:c3:d3:
                    b6:55:b6:05:ba:fe:0b:cf:99:0c:73:54:3e:90:ab:
                    08:25:8a:1b:ab:e0:4c:f5:a4:44:13:8d:40:80:e2:
                    54:0e:67:bf:2e:20:21:62:38:1d:86:b0:af:4c:51:
                    de:00:56:3a:f0:c8:69:22:d0:7e:5e:85:af:fc:e3:
                    8d:6c:d9:96:d1:f3:7f:10:9e:19:bf:a8:40:8c:13:
                    ac:f3:7d:2c:54:43:ee:36:fa:32:93:1d:8c:5c:08:
                    f0:fe:d8:17:d7:f0:9f:db:9b:b3:09:6e:ad:10:10:
                    a7:90:00:94:73:89:3c:7f:95:fd:02:6f:42:98:d2:
                    af:75:8d:40:ee:8b:77:2f:df:8f:ba:94:80:3c:d0:
                    c8:3e:14:e8:20:33:5e:df:ef:14:66:b1:ae:d4:7c:
                    97:e0:41:76:03:67:ff:e2:30:b6:b8:77:25:66:e5:
                    a8:7b:46:c1:35:d0:31:44:4d:a5:db:fb:4c:78:bc:
                    96:cf:f2:95:ad:2c:ad:ae:b3:1d:8f:55:ba:4a:47:
                    1c:bc:dc:fe:52:9b:36:72:03:61:59:e3:2c:40:be:
                    8a:aa:1e:6b:5a:5d:19:83:1c:2f:f5:5c:78:2b:1b:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:0D:D6:03:43:C6:26:6E:D8:F6:27:7D:BC:A1:11:4C:45:A5:56
            X509v3 Authority Key Identifier:
                keyid:10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:54:93:60:d6:3e:68:8a:23:08:95:20:2b:a6:bd:32:ad:
         a5:90:01:c8:ba:8d:bf:bf:b5:1c:83:e5:0c:c3:29:70:0e:fb:
         c6:2a:3c:a1:d5:5e:04:e7:4d:e2:29:3e:4d:08:33:31:a1:6a:
         b5:4b:09:5f:f4:4e:60:93:3b:71:14:f7:86:61:39:6a:0d:5e:
         18:5d:f3:47:f1:d9:ae:60:72:9e:39:90:be:77:b1:86:5d:ea:
         24:a6:dc:57:2f:4f:b5:7b:46:1a:bd:85:5b:28:38:e8:62:a1:
         a7:41:d9:43:80:32:4d:25:18:3d:e6:dd:db:f8:20:ae:60:e0:
         2f:ab:cc:7b:14:c4:83:99:8b:16:c3:10:68:37:81:59:79:f7:
         4f:3e:9a:a5:96:10:bc:3a:5f:e4:3f:a8:08:72:18:d5:f8:8e:
         d5:91:8b:25:64:bf:27:72:fd:70:a8:67:74:61:62:1f:ae:3f:
         ce:00:74:ab:31:65:4c:72:3f:ca:c2:d8:97:6a:4b:5b:94:b5:
         cb:16:ac:49:4d:e8:20:42:c8:1d:b1:85:92:56:78:40:b6:b9:
         36:bc:cc:2a:3f:35:ad:9a:8b:67:0b:5b:99:c1:70:34:e6:fd:
         a3:44:76:f8:52:10:2e:80:cb:d3:29:06:68:cf:3d:84:d4:5c:
         1e:c5:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org