Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
File:                     3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa (raw, json)
Hash identifier:          wY9vqfrM/OWbfxlBUvt3EON88cNwLMLu37rPiNmWmWg=
Subject key identifier:   C2:3B:17:40:B5:A7:C7:AA:14:D2:A3:75:E7:82:98:6F:CD:82:06:E4
Certificate issuer:       /CN=677D21939268558A590BDAF3CCF9128F3678673B
Certificate serial:       0F87565AB6B80A5C0E0D3D4F6AB70BB70CD356C4
Authority key identifier: 67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/677D21939268558A590BDAF3CCF9128F3678673B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
Signing time:             Fri 15 Sep 2023 17:36:28 +0000
ROA not before:           Fri 15 Sep 2023 17:31:28 +0000
ROA not after:            Fri 13 Sep 2024 17:36:28 +0000
asID:                     263968
IP address blocks:        138.255.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:87:56:5a:b6:b8:0a:5c:0e:0d:3d:4f:6a:b7:0b:b7:0c:d3:56:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677D21939268558A590BDAF3CCF9128F3678673B
        Validity
            Not Before: Sep 15 17:31:28 2023 GMT
            Not After : Sep 13 17:36:28 2024 GMT
        Subject: CN=C23B1740B5A7C7AA14D2A375E782986FCD8206E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:a6:84:89:b5:a2:5a:45:56:ba:91:67:ad:
                    ef:4d:54:68:2d:50:b6:59:0a:cd:1b:d7:5c:d8:fb:
                    92:5d:0a:27:87:22:bd:17:31:34:e8:e1:e4:1f:64:
                    39:67:65:bb:93:13:f7:c5:18:1b:26:53:cf:f6:04:
                    aa:b0:a5:bb:c2:46:e7:58:e1:17:f2:4e:af:6f:98:
                    4f:b0:7c:38:c1:95:15:8b:90:65:c8:08:4c:81:ce:
                    b6:34:c7:72:3e:20:4f:a8:30:b7:ea:3f:9b:52:59:
                    cb:1f:e1:ed:18:08:7c:aa:6e:f2:f1:3a:9e:db:78:
                    6b:85:5a:cb:52:bc:59:34:f2:9f:7e:79:67:21:5b:
                    67:28:3a:5c:6f:a7:c1:e5:4b:59:d0:44:47:47:8a:
                    2b:88:32:56:64:dc:29:47:9b:b6:c0:0e:98:5d:1a:
                    03:76:f9:0b:5d:34:65:32:cd:33:aa:ef:ab:e2:8a:
                    36:db:8d:00:23:fc:1b:88:f4:bd:f7:8c:26:58:c6:
                    9e:ad:7f:09:0c:38:9b:69:fa:71:7b:70:a9:ae:c3:
                    96:e6:bf:b4:59:7a:80:0f:33:19:e3:2f:9d:da:53:
                    2a:70:c9:54:8a:2c:9e:d4:e7:c5:46:af:d0:15:b7:
                    08:18:d2:b0:4a:51:48:f0:7a:ab:21:5e:82:2a:32:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3B:17:40:B5:A7:C7:AA:14:D2:A3:75:E7:82:98:6F:CD:82:06:E4
            X509v3 Authority Key Identifier:
                keyid:67:7D:21:93:92:68:55:8A:59:0B:DA:F3:CC:F9:12:8F:36:78:67:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/677D21939268558A590BDAF3CCF9128F3678673B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/677D21939268558A590BDAF3CCF9128F3678673B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/0/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:bc:9f:6b:91:21:25:ad:a5:4e:5e:b3:76:7a:e0:b8:68:
         5d:7b:da:80:c9:03:bd:f8:5b:7c:d7:49:c1:26:bc:45:81:0c:
         23:1c:31:bc:ae:89:cf:ec:0c:9a:9a:10:3b:8f:73:45:6b:9a:
         c7:5a:b7:4f:b8:ff:ac:93:ff:74:54:17:9a:c6:4a:fb:a7:a2:
         ee:70:4a:93:fb:50:b9:37:d0:ae:64:04:9c:e4:b3:60:53:4c:
         98:f2:76:0e:f6:2c:3c:ad:c5:ca:a9:d4:25:4a:e3:09:f1:33:
         86:83:23:64:5c:19:9c:fe:e4:61:43:6b:f7:be:48:c0:e1:8c:
         52:20:a1:42:a0:60:bd:76:58:c9:59:1f:c8:b2:0c:f3:c3:ce:
         8a:34:9a:ea:ff:84:36:41:83:84:46:02:2e:95:d4:b9:11:04:
         78:72:a7:e9:5b:e2:8d:35:cd:2a:75:c6:33:3e:fb:7f:d2:c0:
         98:16:fd:2e:ec:20:52:43:b6:b9:9e:2d:92:fe:ed:c1:2e:6a:
         23:b5:04:91:a3:1f:2a:e4:9e:fb:27:00:0a:8b:71:46:ba:59:
         56:2e:d6:3f:40:9d:2c:9c:01:49:49:23:99:59:6e:8d:59:24:
         b0:50:32:ff:35:74:ff:5b:46:95:d6:e0:ed:4b:a3:9d:77:ff:
         04:04:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org