Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
File:                     3133382e39392e31322e302f32322d3234203d3e20323634313530.roa (raw, json)
Hash identifier:          DJ1ddHHf9pMtdkRIHa76dw9dzH7hN6vj9Luf9CWbmLQ=
Subject key identifier:   21:34:E8:F8:8A:CA:71:DD:7A:32:F7:20:48:BF:4A:C1:12:DF:B5:07
Certificate issuer:       /CN=CEA18BE7E56B5BF4C23355D07180FFABCC52E18F
Certificate serial:       7B4C29412B8E6EF6A419EE95E0BFDD657A0C7093
Authority key identifier: CE:A1:8B:E7:E5:6B:5B:F4:C2:33:55:D0:71:80:FF:AB:CC:52:E1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
Signing time:             Thu 26 May 2022 14:40:00 +0000
ROA not before:           Thu 26 May 2022 14:35:00 +0000
ROA not after:            Thu 25 May 2023 14:40:00 +0000
asID:                     264150
IP address blocks:        138.99.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:29:41:2b:8e:6e:f6:a4:19:ee:95:e0:bf:dd:65:7a:0c:70:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA18BE7E56B5BF4C23355D07180FFABCC52E18F
        Validity
            Not Before: May 26 14:35:00 2022 GMT
            Not After : May 25 14:40:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8b:f5:08:4a:3f:cc:44:d6:18:74:89:01:ac:
                    76:9f:a1:af:a9:55:d8:28:f9:fa:31:8c:bf:5b:c5:
                    a5:76:96:d5:93:29:a0:63:6e:c0:6d:6b:3e:02:b4:
                    b0:23:3c:0a:63:67:06:8a:79:10:29:c3:fa:35:12:
                    ec:c0:59:21:13:59:bb:bb:8b:6f:45:60:8d:a3:c6:
                    3a:5e:76:5f:95:b7:a9:a1:8e:b3:10:88:7a:fa:d7:
                    4f:77:b6:cd:cf:b7:a6:10:e7:1d:71:85:6f:6d:29:
                    1d:62:a2:e2:88:93:1b:90:14:7d:05:57:6d:fd:af:
                    cd:53:ba:64:ba:81:96:b3:e4:5f:48:17:57:91:06:
                    50:d6:1a:89:66:9b:7d:7c:5b:1a:8f:31:c5:da:d5:
                    a6:e6:16:0b:b1:ec:b3:ef:ac:5d:2f:54:8f:39:c7:
                    5d:bc:dd:e2:dd:b1:c0:59:97:e5:81:95:67:fe:3e:
                    2a:30:2d:b0:de:46:61:30:69:a3:27:33:3f:7d:c8:
                    a5:15:97:15:ba:62:4f:e0:63:cd:52:4d:b3:7c:f2:
                    9a:82:92:43:2f:40:82:ff:32:ec:02:8f:f1:8f:1a:
                    79:24:7b:2b:d6:78:3f:dd:d8:47:43:88:90:49:34:
                    c2:0b:b5:c6:11:9b:ee:a8:0f:a3:88:5b:2c:24:8e:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:E8:F8:8A:CA:71:DD:7A:32:F7:20:48:BF:4A:C1:12:DF:B5:07
            X509v3 Authority Key Identifier:
                keyid:CE:A1:8B:E7:E5:6B:5B:F4:C2:33:55:D0:71:80:FF:AB:CC:52:E1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:10:52:01:91:03:7e:e3:b4:0a:d5:35:23:90:36:60:a9:9f:
         1a:45:72:42:de:b1:0c:15:00:54:d2:19:f3:af:99:74:41:c2:
         ff:79:14:08:3a:dc:2e:15:60:aa:2d:cd:61:07:4a:eb:9d:c2:
         bc:69:e7:c6:d5:4e:3f:a2:a0:86:ae:e9:8e:fd:7b:1d:88:b3:
         83:60:6b:3b:f7:63:77:31:82:6e:e9:f2:1e:95:29:4c:57:fe:
         53:56:51:a7:c2:fa:0a:f7:1d:c5:0c:12:fc:13:49:f9:ac:33:
         42:d6:0c:0b:ad:d2:29:41:ec:9e:c7:54:39:96:bd:2b:ed:39:
         f7:e4:c1:46:b6:52:10:41:84:3a:ab:38:d6:50:53:ee:11:c1:
         af:dd:7f:76:ac:7f:5a:13:11:63:e7:2d:bd:36:8a:4c:f9:54:
         53:e1:cb:58:f7:e8:ca:55:96:3e:76:dc:36:2c:6d:74:97:ec:
         47:3b:4a:3a:53:28:be:08:7f:c8:62:07:d9:dd:cb:3d:2a:8c:
         cb:c0:a4:66:d3:34:f7:0e:77:88:89:fc:86:a9:ab:ad:f9:18:
         bc:3d:f7:6d:91:24:a0:6a:90:13:b7:39:ca:5f:b0:c7:17:ef:
         64:4c:3c:ed:fc:c4:71:fe:05:f3:5a:33:06:5c:18:e4:9c:c7:
         64:19:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org