Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32342d3234203d3e20323632343933.roa
File:                     3133382e3235352e3231362e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          3RFxa8YmsdgMSZD7EbtVk3FzqdNwCxrfk+yXCEfGXqQ=
Subject key identifier:   EC:A6:80:2C:FF:A5:1D:15:79:52:3E:B9:E7:25:C1:92:9E:22:39:87
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       60C58914485E2282150A1CA1E4FBAD660D9BBB55
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32342d3234203d3e20323632343933.roa
Signing time:             Sun 14 Apr 2024 02:05:43 +0000
ROA not before:           Sun 14 Apr 2024 02:00:43 +0000
ROA not after:            Sun 13 Apr 2025 02:05:43 +0000
asID:                     262493
IP address blocks:        138.255.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:89:14:48:5e:22:82:15:0a:1c:a1:e4:fb:ad:66:0d:9b:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr 14 02:00:43 2024 GMT
            Not After : Apr 13 02:05:43 2025 GMT
        Subject: CN=ECA6802CFFA51D1579523EB9E725C1929E223987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:fb:4e:38:54:1e:4d:da:1e:e4:e9:eb:e2:
                    ac:23:f5:17:bc:ee:d8:e7:7b:d4:de:17:8c:ff:6f:
                    21:2c:06:8d:d5:e9:89:30:53:27:10:db:a6:7a:ff:
                    34:ac:83:15:01:fa:81:5e:2e:07:df:2c:6a:f3:a5:
                    7e:ca:17:75:fa:02:75:38:0f:df:d8:a8:8d:51:33:
                    62:70:c1:a9:48:34:2f:d9:03:78:a8:e7:d5:37:c2:
                    63:c9:a0:bf:2d:c2:d2:47:b1:c9:dd:d1:37:f5:eb:
                    5f:1e:50:7a:25:8d:1f:6e:9f:b2:d5:cf:74:3b:64:
                    b7:bc:f0:9d:1a:12:48:0a:cf:06:e9:00:ce:53:e5:
                    c6:5a:33:f5:4a:3c:24:4d:36:ae:0a:8f:86:03:40:
                    8b:4f:24:4d:f3:77:bd:7c:9f:f7:66:fd:80:ab:ca:
                    61:ec:9f:2b:70:98:d2:48:03:77:eb:77:30:86:4e:
                    52:23:f6:62:c5:de:37:a1:93:e1:21:f9:f4:d6:44:
                    b7:e3:5f:d9:45:d7:61:3a:06:46:83:e8:53:ce:cf:
                    21:38:5e:ee:35:59:04:02:a9:85:6d:09:50:02:24:
                    f9:75:ae:b1:15:00:8e:63:eb:ed:d8:9e:44:b4:0e:
                    5a:4a:17:89:5d:e2:d3:ca:52:ee:78:ab:8e:1c:bd:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:80:2C:FF:A5:1D:15:79:52:3E:B9:E7:25:C1:92:9E:22:39:87
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:30:fc:5d:67:02:73:6a:53:e2:c2:55:de:ee:e9:b4:e5:e5:
         1a:3e:74:20:d8:a1:36:0b:83:1d:ad:da:ab:d6:62:68:3b:39:
         57:d9:b1:e5:06:86:2b:6e:1f:06:66:32:66:63:66:6d:8b:ea:
         25:9f:59:0d:e5:35:96:4b:ed:6b:67:a7:f4:0b:1a:72:86:1b:
         a1:5a:ea:c9:8c:f5:c9:15:df:c1:85:7b:02:bc:1c:3c:0f:c9:
         3d:98:df:93:7d:be:3f:8c:99:ff:28:35:b6:1b:36:4f:24:dd:
         65:84:0e:b3:c2:63:95:12:be:c9:42:31:59:fd:a5:85:61:fe:
         27:06:1e:d7:c6:b7:47:c5:3b:a5:f0:86:51:3c:31:6a:da:f8:
         0d:30:29:9d:34:d9:d9:4f:28:5b:97:7a:c1:b8:a0:84:70:f7:
         6c:a8:03:73:dd:e4:28:83:81:a8:7a:b6:f9:5c:11:7c:16:e2:
         e5:1d:cd:8b:3b:6e:ac:c3:8f:c2:bb:95:89:f5:f5:bb:ab:8f:
         9e:02:e0:d4:9b:5a:22:ca:53:4d:28:56:cd:bf:c6:8c:53:fb:
         35:97:75:ff:95:72:2d:5d:be:b8:0b:99:2c:9c:da:9f:cd:1b:
         88:1a:40:f9:10:da:1f:0f:6d:2f:c2:96:f0:04:8c:2f:04:65:
         ff:e6:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org