Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          3D5NQACQ1Gx47M+g0KlPxK+g//Xk4K7+/L05g/U9APs=
Subject key identifier:   78:05:ED:54:45:CF:03:BA:42:D4:B8:F9:BD:8B:BB:2E:2B:86:AB:A4
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       6E5C3F0B6DC87AECC34EF34CCDFAAB3C1D57487B
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        138.121.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5c:3f:0b:6d:c8:7a:ec:c3:4e:f3:4c:cd:fa:ab:3c:1d:57:48:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=7805ED5445CF03BA42D4B8F9BD8BBB2E2B86ABA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:c7:3a:99:e0:db:b3:2a:42:81:3d:40:ef:
                    80:33:14:c6:09:df:64:23:63:fa:df:d7:8c:ee:e1:
                    9a:cd:30:f0:66:8f:e8:2f:03:e0:af:49:f0:60:11:
                    7e:c7:c3:9b:34:bd:cd:40:55:8d:8b:9d:6b:d5:21:
                    7b:36:87:ba:f6:e3:08:8c:da:f1:53:36:90:1f:28:
                    57:b8:77:e1:dc:f5:03:87:a4:90:1c:7a:8d:2e:48:
                    d2:d8:14:7c:8f:8f:55:c9:9b:be:61:2e:10:80:73:
                    8c:47:69:1e:48:f6:36:48:40:64:fd:1f:89:d0:35:
                    90:c2:25:1d:32:2c:dc:c3:fa:9c:45:2d:8a:d3:b3:
                    6f:4a:a6:03:b0:32:eb:2c:11:2e:75:70:72:92:f8:
                    90:49:8d:6e:c1:92:5e:7e:31:3f:50:0e:a7:32:3a:
                    d1:97:fd:5f:24:a6:ec:b8:a9:21:cd:17:3f:ac:bc:
                    b3:b6:d0:f3:d9:bf:76:f3:e0:ac:eb:42:33:e7:de:
                    7f:a6:28:af:26:f6:56:28:34:68:8f:45:88:3d:ad:
                    5d:c4:be:90:32:48:6b:b1:d8:bd:ec:47:ba:b4:42:
                    bc:22:77:9e:be:1a:7d:38:42:fb:a6:03:53:ae:15:
                    66:fa:36:4e:50:ae:98:a6:2c:0a:02:6e:c2:62:1e:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:ED:54:45:CF:03:BA:42:D4:B8:F9:BD:8B:BB:2E:2B:86:AB:A4
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:bf:22:35:9c:1b:fe:c1:22:cc:d9:4e:c9:35:87:59:10:
         7e:eb:f1:3e:81:79:18:5e:bd:0f:ce:e7:c5:33:af:1f:9c:b9:
         c4:ce:8f:e4:c5:28:80:92:20:23:1c:e7:bc:81:6f:80:26:50:
         a3:bb:45:a5:02:dd:10:b9:32:01:af:a1:d6:43:35:17:54:99:
         2b:64:b3:cb:6b:8d:66:26:22:03:fa:d0:fb:46:34:70:18:9c:
         7d:01:b5:99:9f:3f:65:47:48:54:26:ef:97:9c:0c:90:07:01:
         28:01:1a:61:12:cb:16:57:da:35:58:32:e2:09:3d:c4:aa:25:
         52:78:ff:4f:d5:81:50:62:dc:8c:c5:d8:8d:cc:ad:68:3e:7f:
         c3:01:05:2c:69:3e:44:84:d9:1c:40:97:3a:f9:55:cf:c6:c3:
         54:ea:c7:d2:f9:c1:69:a2:ba:6b:90:ea:f7:7c:0e:f5:14:6f:
         84:c9:5e:7a:e9:fe:23:3c:61:a4:fe:5a:8e:c2:7d:e4:eb:c0:
         6a:03:0d:fd:e8:8d:e5:11:7e:0c:ea:3d:d0:67:c6:f6:64:dc:
         ca:3c:9a:fa:45:b8:38:fd:a2:50:e7:c7:16:d4:31:20:a6:28:
         1e:99:25:24:48:43:79:30:6d:a6:35:46:ab:81:34:0d:f5:00:
         95:b4:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org