Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38312e302f32342d3234203d3e20323634353731.roa
File:                     3133382e33362e38312e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier:          n6DEf7Q7l0H+1fVya6WNb99y487FXmOURnJ640UEhEc=
Subject key identifier:   AA:BC:FD:88:B4:B3:89:1E:B9:0D:E2:CF:B8:A8:A6:65:D8:17:52:35
Certificate issuer:       /CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
Certificate serial:       4B98DBEDAF4ED4339C358AF5C5DE30B3227080AB
Authority key identifier: 21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38312e302f32342d3234203d3e20323634353731.roa
Signing time:             Mon 18 Sep 2023 14:00:00 +0000
ROA not before:           Mon 18 Sep 2023 13:55:00 +0000
ROA not after:            Mon 16 Sep 2024 14:00:00 +0000
asID:                     264571
IP address blocks:        138.36.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:98:db:ed:af:4e:d4:33:9c:35:8a:f5:c5:de:30:b3:22:70:80:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F2EA499E75BB9BC78B84D5AAA75DDE784939C
        Validity
            Not Before: Sep 18 13:55:00 2023 GMT
            Not After : Sep 16 14:00:00 2024 GMT
        Subject: CN=AABCFD88B4B3891EB90DE2CFB8A8A665D8175235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:70:9c:ba:0e:d3:95:0f:6b:fd:02:2b:1d:
                    74:10:be:e1:38:3d:fa:b2:9f:95:47:2f:ed:17:e4:
                    74:38:58:da:95:f3:93:57:95:be:78:05:df:18:50:
                    9f:99:b9:55:27:f5:c5:dd:fa:e5:8d:7b:bf:13:96:
                    12:09:8b:3b:4e:10:3f:33:17:59:36:5f:b9:48:f8:
                    81:71:04:30:25:a3:fd:b6:b5:41:79:c4:49:91:b8:
                    ee:b7:44:37:2b:23:66:b9:12:3f:2e:53:93:cd:12:
                    ab:f6:cb:2d:a8:78:c8:63:fa:c2:32:2d:d5:91:87:
                    05:f0:33:cf:75:de:56:c8:83:2f:ff:3c:71:46:a9:
                    e4:bc:86:17:ef:0a:da:68:92:34:d8:56:80:a6:bd:
                    06:3e:fb:93:16:7d:9b:37:c7:4d:2a:58:52:69:3a:
                    56:83:16:49:d4:f0:ab:38:61:7b:6d:5c:7c:2f:32:
                    02:24:0f:97:9a:c1:ec:15:e5:52:70:78:7d:66:a6:
                    ca:d4:8e:80:ad:30:3d:d0:22:84:b6:18:3b:69:c1:
                    30:77:0a:b9:12:01:ea:35:73:a6:4a:f2:71:41:65:
                    35:0d:84:d2:de:76:dc:b3:d9:d0:f2:dd:01:d2:d1:
                    9a:5a:5a:c3:83:c3:cf:d7:e2:82:1a:28:0c:68:4d:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:FD:88:B4:B3:89:1E:B9:0D:E2:CF:B8:A8:A6:65:D8:17:52:35
            X509v3 Authority Key Identifier:
                keyid:21:1F:2E:A4:99:E7:5B:B9:BC:78:B8:4D:5A:AA:75:DD:E7:84:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211F2EA499E75BB9BC78B84D5AAA75DDE784939C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/0/3133382e33362e38312e302f32342d3234203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:68:0d:11:a2:76:2b:5c:5b:36:23:32:e1:c5:39:a6:8b:
         c2:8c:5c:01:4d:62:a6:27:ef:a5:ce:8a:46:cf:c1:3f:4f:79:
         b0:1b:48:b9:52:83:7c:58:16:60:be:00:cf:a6:69:da:45:8e:
         50:2c:71:82:3e:f9:b8:86:98:03:51:16:98:85:f5:a6:8f:6d:
         76:13:9d:16:f0:0a:67:be:f1:d2:6e:d8:65:9d:ed:2e:be:b2:
         75:dc:57:14:b2:e0:53:70:c9:27:e0:77:83:73:9a:a0:6a:3b:
         ae:b1:23:ed:71:42:4f:4d:f0:09:5f:00:32:f3:51:00:4b:63:
         47:eb:2a:38:31:d7:63:e2:cd:04:ad:a9:8e:50:e5:ca:4b:b2:
         05:0a:33:0a:64:8a:a2:10:aa:84:2b:cf:00:67:90:f3:69:ca:
         dc:56:98:b7:9c:e9:c7:8d:c3:c1:18:26:f4:d1:a4:39:b9:ff:
         43:a3:87:6e:78:e0:a4:8a:70:b0:bf:bf:f0:c1:f5:1c:44:c4:
         c5:e8:05:b2:42:fc:f7:4a:b6:37:07:11:29:6b:e8:08:9d:99:
         4b:f1:8f:d5:b2:92:ba:d8:2e:1c:97:25:01:d2:19:25:21:60:
         18:03:27:b0:a6:2e:30:9d:f0:86:bb:55:26:73:61:b8:85:8a:
         9a:3a:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org