Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          gFLcMun++fLMBXdPrIDx31tFUMVRzBVUkrMZe+e03DU=
Subject key identifier:   78:3E:D8:AF:50:1C:5A:6C:B9:CC:D6:FC:94:E3:D1:FA:94:2F:5E:BD
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       4E67126689FB076FE252F952A491743A11F96E65
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa
Signing time:             Tue 22 Aug 2023 10:02:06 +0000
ROA not before:           Tue 22 Aug 2023 09:57:06 +0000
ROA not after:            Tue 20 Aug 2024 10:02:06 +0000
asID:                     262518
IP address blocks:        138.122.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:12:66:89:fb:07:6f:e2:52:f9:52:a4:91:74:3a:11:f9:6e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Aug 22 09:57:06 2023 GMT
            Not After : Aug 20 10:02:06 2024 GMT
        Subject: CN=783ED8AF501C5A6CB9CCD6FC94E3D1FA942F5EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:13:e7:4c:c7:cd:df:72:ec:73:6f:b3:22:
                    21:ce:b1:b4:b1:b1:e5:cc:38:bf:ce:07:13:d0:28:
                    66:82:9c:1e:79:05:80:15:4b:14:05:3f:c6:88:08:
                    d9:e5:33:12:52:d8:8c:c0:52:45:c1:13:6b:62:c9:
                    8e:06:48:96:52:8f:39:26:a5:63:36:a2:f0:32:27:
                    ea:34:93:94:67:56:3d:22:e9:18:6d:0c:37:d6:0d:
                    56:49:4d:91:5f:dd:8b:81:5e:1c:56:53:b3:ed:fd:
                    d2:56:9f:63:da:4a:e3:4d:51:41:5b:4a:5e:49:e6:
                    2d:2d:c9:11:64:a6:6e:f5:07:76:96:b1:fe:46:46:
                    cd:ea:4e:a0:8e:a5:7c:64:8a:c2:90:54:32:a1:38:
                    c5:63:85:46:4f:7c:90:bc:13:5f:5b:f9:f1:9d:4c:
                    44:1b:f2:eb:68:3e:c4:9f:51:cc:78:c5:65:9f:40:
                    3c:b0:96:fb:f7:aa:0d:09:35:66:1f:8c:14:93:13:
                    d7:2d:f3:d6:07:61:a5:4f:4c:ba:89:b0:5f:01:46:
                    e6:e9:03:c2:7d:ce:52:5a:4f:db:01:2f:b3:3e:3c:
                    df:cb:f5:9a:9e:ca:02:77:a0:ca:8c:4c:de:47:53:
                    7b:bb:7d:77:4a:ec:00:63:6a:d9:bc:fb:de:f8:34:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:D8:AF:50:1C:5A:6C:B9:CC:D6:FC:94:E3:D1:FA:94:2F:5E:BD
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:01:20:ef:41:f3:ab:ab:d3:c2:5b:14:83:ba:28:d5:0c:5e:
         f9:78:65:74:68:11:e6:34:76:83:67:7c:c0:b1:7f:23:ad:d1:
         b6:2a:12:3d:98:e0:36:e5:c5:97:06:63:4e:89:28:0b:01:b6:
         26:8c:d9:03:70:fc:48:69:cd:73:5b:c6:28:f5:cd:ea:c4:8b:
         18:c9:cf:84:65:c2:95:19:2b:7e:89:bd:47:ba:6d:55:60:9b:
         ff:db:46:ec:e1:a2:d3:e6:95:dd:7d:2b:15:03:90:86:ba:fa:
         77:74:38:18:29:09:e6:c0:8a:5e:38:ec:e8:d2:79:47:08:ad:
         29:95:5a:92:1a:f8:95:38:79:e7:2a:93:da:48:5d:6a:f2:d6:
         3f:27:1c:aa:48:ba:e4:cf:c7:ca:d0:9c:52:07:4b:42:9b:d2:
         e7:a3:2e:ae:b4:89:3f:b3:13:24:a0:7a:af:6c:81:4d:37:ea:
         5e:fa:af:7f:65:51:3f:90:3d:17:3f:7b:af:bd:99:51:b7:6c:
         46:63:6c:d5:c0:2d:8e:38:fd:e3:35:92:a9:19:43:a0:04:c7:
         6d:9f:4e:1e:fe:13:4a:b6:dd:bc:81:c7:42:94:bf:1a:d8:65:
         55:2a:ef:38:ac:52:22:03:ba:0a:2d:95:a1:27:fe:0d:3e:85:
         1b:83:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org