Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e203237373135.roa
File:                     3133382e3132322e3137332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          25G7PccRaM/W3r/cUnP8K8fSBG92jbw8D6zWczG+MZM=
Subject key identifier:   8E:C2:96:FA:87:EC:3A:F6:B0:9D:08:23:E2:DB:E7:49:21:BB:7B:7A
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       2381AF915C5F509655ACFA95316068395EA54B74
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 13 Nov 2023 12:46:21 +0000
ROA not before:           Mon 13 Nov 2023 12:41:21 +0000
ROA not after:            Mon 11 Nov 2024 12:46:21 +0000
asID:                     27715
IP address blocks:        138.122.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:81:af:91:5c:5f:50:96:55:ac:fa:95:31:60:68:39:5e:a5:4b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Nov 13 12:41:21 2023 GMT
            Not After : Nov 11 12:46:21 2024 GMT
        Subject: CN=8EC296FA87EC3AF6B09D0823E2DBE74921BB7B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:12:af:c6:9d:90:fd:03:61:10:79:3c:d8:
                    7f:10:22:e6:d7:23:23:ee:07:44:85:2c:08:17:09:
                    95:4e:10:79:9a:e5:ce:68:23:fb:5e:16:97:18:81:
                    0d:f3:16:0f:f5:09:46:42:ab:bc:7c:d9:94:19:ca:
                    e7:ba:0a:97:bd:0d:5d:b9:90:cf:ad:3c:4c:b9:32:
                    08:f4:3c:f6:97:50:9b:04:55:e9:30:98:2f:0c:8b:
                    e1:e2:83:8c:2e:bb:dd:33:09:be:56:0e:52:09:1f:
                    e6:4e:c5:c0:0b:58:4a:52:5f:e9:37:16:80:e6:1f:
                    ab:2c:76:43:44:26:05:a1:6f:64:34:18:13:43:75:
                    94:a4:b8:9e:a4:c8:25:89:f1:c4:40:22:aa:e4:d4:
                    19:45:94:e7:8d:93:4e:93:ab:72:26:93:41:ad:7a:
                    d7:5f:4f:e3:6c:fa:99:05:35:cf:ff:68:1a:7b:cf:
                    f4:4d:55:e9:e8:30:64:7b:25:1f:7a:a4:3a:31:71:
                    fe:a4:71:b5:6a:59:3d:98:5f:c8:f3:c7:02:03:dc:
                    b5:79:7b:c1:5c:7b:15:b8:5f:49:59:a4:70:83:63:
                    6a:48:b6:18:89:05:c5:34:df:c2:49:57:17:ab:b4:
                    45:9d:26:76:c1:d9:25:19:a0:cf:b4:db:bb:86:a6:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C2:96:FA:87:EC:3A:F6:B0:9D:08:23:E2:DB:E7:49:21:BB:7B:7A
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:14:10:56:01:d8:54:53:06:36:ba:f1:75:f0:5d:43:3b:76:
         a6:bf:89:de:10:d2:0a:25:87:8b:90:3c:a6:cb:88:1c:26:82:
         9b:55:0a:54:76:c3:14:ca:38:4e:33:2c:21:25:e6:d9:00:c8:
         45:f1:f5:7b:51:a5:1a:91:ba:3a:41:6d:30:35:47:13:6b:b4:
         59:82:c2:85:ff:d2:14:29:77:b7:5e:c7:17:c9:bb:ae:b8:5d:
         22:af:ec:10:0d:17:3e:a8:35:55:b2:53:74:b0:7e:0b:36:7f:
         af:f9:53:bb:37:13:ff:4a:8d:4c:9e:66:78:63:00:f1:1d:e7:
         11:69:d6:41:59:b6:08:1c:b7:e3:89:64:42:7d:33:4c:92:97:
         d4:1c:85:37:a8:78:42:37:e9:4a:cf:a1:78:39:88:5d:41:d9:
         53:8a:49:7d:93:29:64:85:bf:65:18:d6:7c:64:38:f5:c8:02:
         18:eb:3b:e3:d7:85:f0:46:40:88:e8:bd:ba:c7:9e:ea:ba:c7:
         20:6c:99:a1:98:98:84:40:68:b7:0e:31:56:c1:47:70:26:92:
         80:fc:1b:0c:7e:9c:94:3a:3c:78:b0:da:3c:74:d4:0c:a9:01:
         4f:b3:31:8c:49:e5:27:0a:65:28:f9:36:4e:c6:4a:2c:c5:03:
         89:f1:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org