Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3139312e302f32342d3234203d3e20323634323732.roa
File:                     3133382e3131382e3139312e302f32342d3234203d3e20323634323732.roa (raw, json)
Hash identifier:          i5IAO11EkDX6DHsb3UtGbiofsWTXIf1iq7x7sfOgd90=
Subject key identifier:   75:BC:88:AE:61:8A:28:71:71:9E:04:D4:25:AC:5C:D5:42:43:26:23
Certificate issuer:       /CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
Certificate serial:       27D0E0B6E47AC00F1656E90494A4D25841A76ECC
Authority key identifier: 1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3139312e302f32342d3234203d3e20323634323732.roa
Signing time:             Mon 13 Nov 2023 14:12:16 +0000
ROA not before:           Mon 13 Nov 2023 14:07:16 +0000
ROA not after:            Mon 11 Nov 2024 14:12:16 +0000
asID:                     264272
IP address blocks:        138.118.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d0:e0:b6:e4:7a:c0:0f:16:56:e9:04:94:a4:d2:58:41:a7:6e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
        Validity
            Not Before: Nov 13 14:07:16 2023 GMT
            Not After : Nov 11 14:12:16 2024 GMT
        Subject: CN=75BC88AE618A2871719E04D425AC5CD542432623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:44:27:65:25:bd:2b:55:be:2d:07:7b:f9:
                    9e:b3:9d:f9:79:3d:f3:70:99:d7:4a:de:85:7a:7a:
                    8f:a9:62:cc:69:4b:85:ce:d0:65:88:85:6e:22:cf:
                    3b:09:d9:40:dc:4f:1b:c7:c5:94:2f:a7:16:06:0e:
                    fb:a9:d2:e5:b2:b0:3e:1e:ab:d4:27:1d:ac:6c:51:
                    9c:e0:1b:9a:00:ce:ff:5b:61:c2:95:e4:32:04:a7:
                    d1:1b:31:b1:22:ce:1e:c4:9b:c3:29:57:f4:fe:4c:
                    e3:62:35:13:1c:c6:2c:79:2b:29:cf:7c:f1:46:e3:
                    f4:49:68:ff:6f:a3:3f:90:b0:f6:70:ea:55:c2:7c:
                    08:6d:ca:35:38:74:15:b4:f9:8e:23:e9:b0:de:ed:
                    22:25:81:4f:02:62:da:4e:11:5f:03:46:40:70:ab:
                    b0:f0:39:d8:45:f7:d0:9c:72:c6:e8:fa:64:5d:94:
                    1c:a8:f8:6a:2c:48:44:79:45:58:d2:72:4b:b6:cb:
                    23:98:46:69:7e:a2:94:3b:f3:66:f3:5b:92:ed:f5:
                    08:3a:91:c7:d7:d4:01:8f:5b:6f:4b:47:bf:30:88:
                    47:9f:e6:74:59:e7:6c:b1:11:ac:01:22:2a:ce:b9:
                    ba:a3:4e:61:df:16:50:a0:0c:d0:31:2a:b7:c5:75:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:88:AE:61:8A:28:71:71:9E:04:D4:25:AC:5C:D5:42:43:26:23
            X509v3 Authority Key Identifier:
                keyid:1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3139312e302f32342d3234203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:10:c2:20:57:3e:0d:ef:fd:95:b8:1b:f0:1d:29:25:bd:60:
         a0:a0:a3:c0:db:e3:fb:84:18:47:04:8d:8e:af:be:c4:82:e2:
         99:5b:cd:01:1b:04:53:56:3a:8c:8d:38:a1:3b:e4:ae:fc:66:
         93:d9:72:ee:fe:3a:6e:87:aa:63:a3:98:03:cd:bc:d0:35:e8:
         b7:34:93:c3:10:ac:d3:8e:28:21:ca:06:26:18:5d:98:0c:f8:
         c4:b8:8c:d4:8e:88:6f:3b:25:93:c6:3e:80:70:39:f7:a1:3a:
         98:14:0c:b8:13:f8:17:ca:5e:d0:d4:3d:cc:e6:d8:4b:1b:a2:
         2c:50:07:37:6e:1f:32:85:a9:ad:ce:34:5b:21:0c:6a:c5:d9:
         bc:51:2d:b4:2a:f3:d8:74:42:cf:e4:79:a5:63:58:32:b8:95:
         51:cf:02:bb:f2:8e:95:90:ea:69:67:30:44:fd:f5:2a:03:9a:
         2d:3d:66:3d:a5:cf:b1:9e:41:3b:19:91:ad:da:92:01:06:56:
         8f:73:99:0b:12:0c:26:46:45:25:d5:0b:64:2c:b4:6d:ac:95:
         50:e5:5f:dd:74:aa:ce:a4:51:6b:29:74:32:d7:82:0c:d8:31:
         02:93:28:bb:92:c3:19:c2:e5:5e:6c:9e:16:5e:98:8d:01:09:
         4b:e0:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org