Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
File:                     3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa (raw, json)
Hash identifier:          wY0sJ0E86ZaIXFB4EkLEdAY1YtvILRnwdfbvWHUi/wM=
Subject key identifier:   E0:50:87:7E:2C:27:CE:02:5D:07:DD:EC:75:6A:01:96:45:D0:9D:9B
Certificate issuer:       /CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
Certificate serial:       73A9F09DA8D0A059C853E54E96AFC619A1ED3CBE
Authority key identifier: 01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa
Signing time:             Mon 26 Jun 2023 14:00:00 +0000
ROA not before:           Mon 26 Jun 2023 13:55:00 +0000
ROA not after:            Mon 24 Jun 2024 14:00:00 +0000
asID:                     263982
IP address blocks:        138.255.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a9:f0:9d:a8:d0:a0:59:c8:53:e5:4e:96:af:c6:19:a1:ed:3c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010DADE301A8E5F8BF09DE2295BF9D0645BF819A
        Validity
            Not Before: Jun 26 13:55:00 2023 GMT
            Not After : Jun 24 14:00:00 2024 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:74:f6:a8:a1:12:e9:1b:5b:c8:4d:cc:b3:
                    d3:36:37:a6:bb:64:6e:c8:bd:a1:4f:97:f1:ef:30:
                    ac:00:42:66:5e:bd:2b:3a:5c:17:cd:4f:bd:c9:9a:
                    5b:d9:7b:a0:c3:50:e1:1c:a4:4a:8d:2b:11:36:6c:
                    88:de:bf:c6:76:cd:ee:1e:3f:ce:7e:5c:40:43:24:
                    67:0c:24:7a:a2:32:72:ac:a1:e9:54:25:a4:62:72:
                    0d:7b:83:48:2d:38:3c:03:c0:ed:68:0c:c6:a6:3d:
                    62:98:5d:ec:5b:3b:a0:3c:46:f3:31:07:d4:99:c1:
                    a7:91:be:8b:5e:4b:da:91:ef:e5:c0:05:63:e4:a5:
                    99:0d:1c:ee:8e:42:7b:0f:2a:e1:f2:93:82:28:4e:
                    a5:7d:6b:6c:81:38:aa:07:02:41:51:5e:89:c4:15:
                    b5:18:bb:ac:ed:ed:32:49:86:d7:cf:51:f0:f8:b3:
                    19:db:91:4e:40:b6:07:bb:2d:df:57:28:c3:9a:39:
                    d5:5a:20:9e:09:cc:01:8f:0c:5b:2f:d1:5a:c0:c4:
                    66:cd:c3:f6:da:4c:9c:3b:c5:92:f9:8a:de:58:f4:
                    58:f4:87:d6:4a:dc:2a:be:b3:ec:f7:7a:43:d8:77:
                    37:cb:b2:e4:17:73:5c:10:27:08:14:0a:ea:13:a0:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:50:87:7E:2C:27:CE:02:5D:07:DD:EC:75:6A:01:96:45:D0:9D:9B
            X509v3 Authority Key Identifier:
                keyid:01:0D:AD:E3:01:A8:E5:F8:BF:09:DE:22:95:BF:9D:06:45:BF:81:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/010DADE301A8E5F8BF09DE2295BF9D0645BF819A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3133382e3235352e3233322e302f32322d3234203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:67:4c:77:0b:33:14:c2:7a:11:50:f0:d3:c8:19:de:04:
         96:88:2d:13:84:3d:b3:9c:b8:db:cf:ec:79:ce:e8:56:22:e3:
         3d:f8:28:df:cb:f6:ea:2a:a1:c9:69:9c:a1:22:44:6e:58:ca:
         a1:13:f6:ce:06:b4:c3:c6:28:b5:2b:8c:75:3e:4a:fa:8f:9a:
         64:a5:6e:53:28:58:fa:e9:68:2e:2e:a5:9e:27:06:9e:b4:59:
         8c:4a:c0:2b:4c:fb:55:03:e6:8d:34:ca:14:4c:01:ab:39:0e:
         a2:e8:56:00:79:a5:50:80:cb:81:79:ad:43:cf:20:47:9e:58:
         44:f4:8e:36:31:2e:94:c6:14:a0:a4:8c:51:10:95:6c:f7:c8:
         70:3f:4e:d5:88:1b:ee:9a:96:56:59:44:4f:eb:80:e5:73:38:
         51:8b:30:50:c0:1e:f7:48:c2:44:03:0f:c9:c2:91:39:b2:14:
         58:69:a0:52:b9:3d:ad:13:7f:85:fd:d8:61:1a:ff:dd:50:e1:
         a6:35:5d:77:be:8e:96:0b:3f:68:14:e3:80:23:78:96:81:e5:
         8d:16:71:ee:82:2c:15:f0:f4:d4:50:a3:fd:9e:f4:cb:a4:28:
         d2:f8:41:3c:d9:7d:ed:0d:c0:6c:48:41:70:57:79:82:f4:bd:
         48:07:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org