Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3332203d3e20323634323333.roa
File:                     3133382e3131372e3131362e302f32322d3332203d3e20323634323333.roa (raw, json)
Hash identifier:          OQAHUlBM76smk+aDdHiSir2ErXcsw4Rhq7jRfcCVv+Y=
Subject key identifier:   AF:9D:88:6C:99:97:E3:BC:90:08:2B:FE:F8:2C:7E:2E:30:7F:AB:4E
Certificate issuer:       /CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
Certificate serial:       5C9CBCD84FE1B5C5D24DBD9F2EC54C91E2A479A5
Authority key identifier: 5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3332203d3e20323634323333.roa
Signing time:             Wed 14 Jun 2023 17:21:41 +0000
ROA not before:           Wed 14 Jun 2023 17:16:41 +0000
ROA not after:            Wed 12 Jun 2024 17:21:41 +0000
asID:                     264233
IP address blocks:        138.117.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:bc:d8:4f:e1:b5:c5:d2:4d:bd:9f:2e:c5:4c:91:e2:a4:79:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D7B839C4C40F86FDCD389072E91CDF7CB0670F9
        Validity
            Not Before: Jun 14 17:16:41 2023 GMT
            Not After : Jun 12 17:21:41 2024 GMT
        Subject: CN=AF9D886C9997E3BC90082BFEF82C7E2E307FAB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:47:05:f0:17:24:90:d6:a1:64:af:73:e6:
                    f7:a1:ad:32:32:1f:1a:07:b2:af:98:fb:7b:d7:15:
                    60:ee:7e:23:69:0c:48:22:51:0a:ed:9f:64:aa:cb:
                    8e:79:f5:79:53:77:ea:2d:1e:6c:ed:1c:bc:f9:c4:
                    6c:01:d8:c9:32:63:04:92:ad:4c:a2:89:8a:df:c5:
                    c3:b4:5c:22:3a:45:c2:fd:aa:cd:d5:80:96:3a:43:
                    92:78:23:84:fc:7a:da:b4:08:8e:42:9f:f8:05:5b:
                    8a:c6:84:f0:ba:06:9c:ff:fe:ad:6e:bb:64:e0:5e:
                    03:ec:ed:d6:b4:9f:0b:80:90:8a:e3:ce:9b:fd:20:
                    f6:72:f2:ab:ee:10:56:fe:ec:af:61:d0:e6:c9:c4:
                    09:93:06:fc:da:af:24:69:94:71:08:37:a2:18:e9:
                    27:3d:94:c1:32:58:1f:6a:98:3e:8b:c3:40:20:cc:
                    0c:bf:f9:95:1e:73:33:37:b8:70:eb:b7:7a:08:b1:
                    27:78:5a:fa:da:fd:4f:12:4a:d6:20:21:a1:50:13:
                    bf:d3:4f:b2:6f:f3:36:3d:92:8f:06:aa:b1:88:46:
                    7b:e1:1a:33:6e:e6:c2:82:d0:12:a3:fa:b2:d7:5f:
                    46:68:24:75:69:f8:14:19:69:99:10:d7:83:1c:6b:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:88:6C:99:97:E3:BC:90:08:2B:FE:F8:2C:7E:2E:30:7F:AB:4E
            X509v3 Authority Key Identifier:
                keyid:5D:7B:83:9C:4C:40:F8:6F:DC:D3:89:07:2E:91:CD:F7:CB:06:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D7B839C4C40F86FDCD389072E91CDF7CB0670F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3332203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:ab:eb:28:83:85:ab:f4:6a:59:19:e5:e4:30:7e:bd:73:
         bd:3a:4c:76:4f:5e:3c:40:a3:7e:c7:1c:ef:c0:5f:0d:a1:9b:
         7f:1f:42:51:d3:24:8e:e9:27:22:fd:38:05:22:36:fc:87:7b:
         ab:17:9d:91:be:cc:33:07:7c:96:a6:ea:cb:5e:1f:b6:88:68:
         98:c2:8f:71:51:df:14:32:39:a8:57:09:b3:41:8f:bd:63:0f:
         49:4e:43:c2:b8:03:57:42:62:61:8f:22:a7:bf:53:a3:a4:0f:
         7f:0d:52:9a:f7:83:a5:80:1e:72:38:8e:3c:57:c9:62:a4:9c:
         f4:6a:b2:02:94:c9:db:8d:42:39:43:27:0a:f0:ff:60:b2:25:
         62:21:cb:e9:11:47:b0:96:7c:00:13:03:98:b6:0e:23:b1:bd:
         b0:81:b0:6f:f3:f6:08:28:23:db:be:41:fe:5a:c7:2c:f9:d5:
         27:d4:6b:f7:61:6e:28:3a:c4:c3:fa:57:57:e7:19:38:27:d4:
         7e:f3:ad:da:c9:30:12:fd:65:f4:df:10:1d:d0:ff:78:96:d1:
         3a:44:fa:59:88:95:aa:5f:74:14:b2:1e:f1:44:05:dd:83:7e:
         ee:80:73:83:d1:5c:38:36:62:0b:9d:a5:27:33:40:df:e2:72:
         f7:3f:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org