Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e392e302f32342d3234203d3e20323633393637.roa
File:                     3133382e3230342e392e302f32342d3234203d3e20323633393637.roa (raw, json)
Hash identifier:          IoGb30w629iotVMk4zmZ/zCJXZPO6V6gql/O5mashYc=
Subject key identifier:   E3:43:F4:4D:FC:53:CB:9A:05:EA:7D:5F:B6:4F:83:12:99:A7:8D:8F
Certificate issuer:       /CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
Certificate serial:       6AC20F2B8652EE10C384C3FA0F4F9D64EC028700
Authority key identifier: 18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e392e302f32342d3234203d3e20323633393637.roa
Signing time:             Tue 05 Mar 2024 23:06:32 +0000
ROA not before:           Tue 05 Mar 2024 23:01:32 +0000
ROA not after:            Tue 04 Mar 2025 23:06:32 +0000
asID:                     263967
IP address blocks:        138.204.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c2:0f:2b:86:52:ee:10:c3:84:c3:fa:0f:4f:9d:64:ec:02:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
        Validity
            Not Before: Mar  5 23:01:32 2024 GMT
            Not After : Mar  4 23:06:32 2025 GMT
        Subject: CN=E343F44DFC53CB9A05EA7D5FB64F831299A78D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:95:7c:dc:7e:ad:5c:83:76:c9:ac:68:97:
                    63:dc:f0:0a:8b:41:dc:6c:c5:05:0e:8e:67:47:80:
                    0f:a9:06:67:97:0f:31:56:a3:ac:78:1f:df:4c:cb:
                    35:a1:15:a8:b8:79:63:57:0c:86:a4:b4:3d:4a:eb:
                    31:7b:8b:d7:5b:fe:c8:0a:3d:99:b4:ff:39:3a:c9:
                    4b:42:08:de:68:38:f7:43:ca:81:dc:62:b9:0d:8d:
                    ee:bf:ba:80:93:4f:58:b6:9a:ff:b9:f8:74:cb:c5:
                    43:3d:ab:18:76:a6:41:a6:bd:c3:0a:77:c4:36:cc:
                    8f:22:0c:73:af:93:a0:85:ae:aa:de:10:34:6f:7b:
                    46:1c:bb:97:16:62:a3:f9:bf:74:e6:04:de:f2:c4:
                    f9:d2:9f:69:1f:a4:33:16:e8:8f:db:be:f6:96:3f:
                    12:c3:c4:f6:87:57:fd:99:1b:97:5a:3f:06:ce:39:
                    95:a0:b3:b7:71:2d:ef:39:b3:1c:9a:1e:73:8d:a6:
                    2d:31:56:a0:81:d2:66:bc:c1:f9:4e:89:cd:95:6c:
                    f4:f6:98:5c:a7:cb:6e:b5:74:80:85:22:d2:b3:4c:
                    78:4a:a3:6d:c3:99:30:0c:74:04:65:a1:51:73:71:
                    b2:cf:2b:d3:62:0f:54:97:ff:f1:c8:2b:e6:7d:a6:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:43:F4:4D:FC:53:CB:9A:05:EA:7D:5F:B6:4F:83:12:99:A7:8D:8F
            X509v3 Authority Key Identifier:
                keyid:18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e392e302f32342d3234203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:b4:c9:d7:ea:1c:01:1e:fc:3a:2f:41:ec:36:c2:4e:a0:ba:
         d0:dd:d9:23:6f:cd:fe:58:ec:03:a7:46:c7:16:00:93:aa:65:
         38:a8:51:0b:4c:32:57:44:e2:61:eb:9e:e4:81:5f:bd:50:06:
         b4:0a:78:6c:af:d0:12:59:b2:fd:13:84:b7:34:cf:06:ab:a1:
         62:17:7e:0b:80:33:ba:a4:bd:9c:20:f2:dc:7d:58:c3:25:a0:
         09:e3:00:6a:31:29:32:58:8b:13:8b:91:82:8c:84:07:25:9d:
         4e:19:69:4f:6a:6e:6e:a2:5d:b9:f8:c3:09:9c:63:d1:72:ce:
         b4:d4:20:45:be:f3:fa:88:82:a0:11:a8:34:27:2a:a4:75:7a:
         62:ef:96:15:9b:fa:c6:e1:49:72:37:b3:01:8e:bc:5d:99:88:
         4c:c4:8f:74:50:02:46:23:52:b6:2e:db:d6:5c:fd:7b:48:2d:
         67:e9:97:7c:f1:31:98:43:4d:8d:da:ca:3a:50:6c:6b:22:61:
         d9:3f:10:98:8d:f4:1b:43:83:9c:37:e1:98:05:9d:71:b0:6f:
         d4:e1:2d:c9:d6:e3:ec:9b:56:1d:d5:db:f7:b3:db:c0:81:ae:
         9d:2f:f5:ae:9b:aa:48:56:48:53:44:86:39:65:fe:ab:54:08:
         01:6a:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org