Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137332e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          OJMmE8EoDTEkfmEX4QwvX8fOcfrHS/RB+dLPI4UjOH8=
Subject key identifier:   DB:AC:37:F0:28:E3:A3:3C:FB:B2:ED:B2:5A:95:DE:A3:11:CB:14:67
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       2BDDD19BE6A82D0BCE5B596A907FC1E057555646
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e20323632353138.roa
Signing time:             Tue 11 Jul 2023 11:41:19 +0000
ROA not before:           Tue 11 Jul 2023 11:36:19 +0000
ROA not after:            Tue 09 Jul 2024 11:41:19 +0000
asID:                     262518
IP address blocks:        138.122.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dd:d1:9b:e6:a8:2d:0b:ce:5b:59:6a:90:7f:c1:e0:57:55:56:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Jul 11 11:36:19 2023 GMT
            Not After : Jul  9 11:41:19 2024 GMT
        Subject: CN=DBAC37F028E3A33CFBB2EDB25A95DEA311CB1467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:3c:7d:25:2c:8d:0c:11:20:5b:08:1a:6c:
                    7c:4d:6b:ea:79:f0:7f:28:15:50:d4:4e:48:b9:da:
                    d8:c5:64:f5:1e:e0:19:01:84:81:29:13:5e:c2:24:
                    fc:58:60:ee:fe:6c:71:b1:73:4c:d2:4d:55:22:57:
                    52:e1:34:a3:48:90:a6:89:ed:d0:84:79:86:03:76:
                    37:a7:99:99:69:79:fe:a3:f0:97:c3:b8:20:b1:af:
                    ce:12:b1:e1:82:f0:8e:19:f6:ad:d1:35:84:39:b4:
                    ac:ff:99:09:54:28:0e:00:64:23:cf:97:1a:50:11:
                    d7:ec:3f:16:12:22:94:f5:d4:fb:d9:ba:7a:4f:ed:
                    3a:55:3a:9c:2f:a0:b5:2a:8f:b5:4c:ca:6f:27:ac:
                    e1:8f:e9:85:0e:17:05:d3:5a:29:0c:49:74:74:fb:
                    42:c7:cf:7d:65:cb:1f:2c:84:1a:ed:46:75:35:c0:
                    3f:90:7d:e0:68:3d:bb:9d:ed:e2:d3:08:f1:73:30:
                    81:ec:56:6d:18:b1:e5:23:68:6e:30:21:b9:79:fd:
                    b1:28:44:12:0e:37:71:f6:5b:aa:c2:76:fc:32:dc:
                    5d:14:f0:0c:e3:8b:92:43:da:b2:4c:e4:86:97:06:
                    de:ea:e6:45:8d:68:a4:ea:31:90:8a:ba:30:15:cf:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:37:F0:28:E3:A3:3C:FB:B2:ED:B2:5A:95:DE:A3:11:CB:14:67
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:da:8a:bd:52:3e:ea:3f:95:3d:a4:93:cd:d8:7f:c3:81:b0:
         58:6f:8e:54:c8:70:5e:fa:16:e8:22:9d:60:52:52:ed:aa:6b:
         6c:b0:a9:46:d9:e5:1a:8e:7c:0f:2a:ce:c2:bd:f8:1b:0d:98:
         49:5f:ea:af:4d:c2:25:c9:f3:a1:83:f2:90:25:7f:0d:62:6b:
         37:97:e5:cf:ea:cb:95:96:92:15:63:6d:7c:65:71:2d:95:e3:
         0a:19:5d:a1:03:38:74:74:57:3f:61:bf:69:c7:cb:8a:4b:e8:
         fc:5e:79:a4:32:f4:68:11:d9:ce:1b:30:62:06:63:93:7a:d8:
         d9:0e:3a:d9:8b:0b:8e:e2:b4:c3:a0:2b:07:ff:e5:23:12:22:
         57:7c:a0:d1:84:76:b5:88:8c:e9:d3:06:59:ec:67:af:78:c3:
         23:49:38:25:e5:7f:28:e3:a1:0d:b6:de:ea:09:3b:c1:a2:ea:
         9e:bc:1d:4b:fa:97:bb:68:83:90:a8:31:d8:ea:16:82:ce:18:
         f4:cd:89:1e:1f:82:d2:05:48:ea:b2:73:22:19:15:fc:ad:cd:
         eb:ef:11:20:49:68:1a:79:ca:f7:8a:03:08:0e:6b:61:20:1c:
         c7:be:1b:9b:3d:d9:b9:08:e6:ae:46:91:38:d3:9b:10:32:f1:
         ca:4f:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org