Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
File:                     3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (raw, json)
Hash identifier:          cyLk/5xr3Q+QLRPhRfaH+/gqn3K843dEQDOpjOrnvo0=
Subject key identifier:   0F:A9:43:EF:32:E4:25:6C:16:6C:B0:6D:C4:2D:CE:33:D4:30:F4:09
Certificate issuer:       /CN=94DA6C1224D0695747DF56BE8B7115949AC47812
Certificate serial:       257A1155C8083F3BBCEBFC30F7378C4B74F12101
Authority key identifier: 94:DA:6C:12:24:D0:69:57:47:DF:56:BE:8B:71:15:94:9A:C4:78:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DA6C1224D0695747DF56BE8B7115949AC47812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
Signing time:             Thu 04 Apr 2024 06:26:44 +0000
ROA not before:           Thu 04 Apr 2024 06:21:44 +0000
ROA not after:            Thu 03 Apr 2025 06:26:44 +0000
asID:                     264278
IP address blocks:        138.121.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7a:11:55:c8:08:3f:3b:bc:eb:fc:30:f7:37:8c:4b:74:f1:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94DA6C1224D0695747DF56BE8B7115949AC47812
        Validity
            Not Before: Apr  4 06:21:44 2024 GMT
            Not After : Apr  3 06:26:44 2025 GMT
        Subject: CN=0FA943EF32E4256C166CB06DC42DCE33D430F409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:e8:a6:c7:96:73:c1:79:c2:88:c4:88:70:
                    22:4c:b1:56:2a:d1:9b:80:97:44:99:fb:1b:f4:10:
                    8c:f2:f6:ab:9e:a1:f0:20:af:98:7e:d6:58:8e:3b:
                    bb:eb:70:4d:92:c5:82:eb:b7:10:a8:ba:4f:e5:c3:
                    77:95:0a:ae:58:46:47:e1:22:37:b8:38:0b:4a:4e:
                    39:c3:14:8d:a5:d9:db:06:1c:a0:84:29:73:74:bc:
                    c8:a5:75:52:63:d9:f6:37:9e:db:39:9b:52:5f:79:
                    01:09:ab:00:d4:7d:d6:79:a4:a2:d1:a6:1f:33:8e:
                    fa:13:d7:2b:94:30:82:59:d1:6d:02:80:da:d0:eb:
                    29:e9:a6:39:70:02:7c:11:52:00:93:16:ad:91:1e:
                    ce:28:b6:a3:30:18:44:d7:58:bd:5c:00:b7:0b:9d:
                    f5:1f:a0:15:1e:b3:7e:be:e6:da:84:40:cf:c9:e4:
                    3c:4a:c8:6a:2c:3b:f7:8c:47:02:16:88:98:d1:bb:
                    7b:d1:a6:48:29:4b:99:53:3e:73:34:3b:60:8a:06:
                    e4:7e:d5:b2:ff:fd:91:c6:79:c8:7e:65:a6:1c:60:
                    9a:5b:9c:34:3a:78:74:01:d8:ff:f4:6c:3c:98:1a:
                    36:1b:ec:d4:9c:79:ba:e0:cb:c7:83:13:20:b8:f9:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:43:EF:32:E4:25:6C:16:6C:B0:6D:C4:2D:CE:33:D4:30:F4:09
            X509v3 Authority Key Identifier:
                keyid:94:DA:6C:12:24:D0:69:57:47:DF:56:BE:8B:71:15:94:9A:C4:78:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/94DA6C1224D0695747DF56BE8B7115949AC47812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94DA6C1224D0695747DF56BE8B7115949AC47812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/1/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:35:bd:a3:34:0c:aa:4d:b6:1e:02:d7:41:bf:59:47:d5:
         90:0e:ab:56:b3:82:a0:3f:14:79:31:20:f7:82:3b:0b:d6:8f:
         eb:78:ba:6e:1c:22:24:8a:15:cf:88:d8:fe:6f:2e:a4:a1:08:
         8d:8e:45:e3:7c:87:2a:3e:c8:2f:91:9e:ef:da:72:ad:82:43:
         6e:2c:29:03:16:c9:ea:00:20:5b:36:46:ff:54:b8:0b:5c:63:
         80:41:56:01:47:c9:b9:f8:70:92:53:25:3a:57:c5:97:66:9f:
         52:ff:c2:79:bb:af:a4:5e:d4:0d:f7:e1:2c:d9:29:be:54:f3:
         da:a7:7e:92:10:5f:41:21:8c:b8:60:81:92:81:77:e1:5e:5d:
         65:9f:87:48:99:34:97:4b:52:c2:ce:9b:a0:5d:db:10:54:22:
         a6:33:25:79:97:c7:6b:71:aa:72:48:c5:8b:b2:86:d3:23:c6:
         07:e4:dd:1c:8c:c1:9e:37:44:c5:c0:7e:01:ff:b3:43:ef:49:
         7c:ec:ea:7e:b0:4b:cc:9c:6c:05:c3:e8:55:36:8c:7d:07:a6:
         77:e7:fb:5c:29:2f:00:3a:df:3c:31:a2:21:69:8b:9b:29:02:
         74:09:a3:2d:08:50:26:8e:55:f9:65:e4:2c:d6:b7:f8:78:60:
         9c:77:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:13 2024 by rpki-client on console-fra.rpki-client.org