Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3133382e39392e33322e302f32322d3234203d3e20323632353832.roa
File:                     3133382e39392e33322e302f32322d3234203d3e20323632353832.roa (raw, json)
Hash identifier:          Gvg3ZjSwE2KHRw3n8h0a794ARxnhq2F6cup9TxxxPaM=
Subject key identifier:   AC:44:2D:0B:D6:63:B4:4F:2B:D5:ED:72:AC:E3:55:89:31:62:40:BF
Certificate issuer:       /CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
Certificate serial:       05AF5A0D88A4812C0B73396441D04D25165A0CB1
Authority key identifier: 1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3133382e39392e33322e302f32322d3234203d3e20323632353832.roa
Signing time:             Mon 18 Mar 2024 20:50:46 +0000
ROA not before:           Mon 18 Mar 2024 20:45:46 +0000
ROA not after:            Mon 17 Mar 2025 20:50:46 +0000
asID:                     262582
IP address blocks:        138.99.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:af:5a:0d:88:a4:81:2c:0b:73:39:64:41:d0:4d:25:16:5a:0c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
        Validity
            Not Before: Mar 18 20:45:46 2024 GMT
            Not After : Mar 17 20:50:46 2025 GMT
        Subject: CN=AC442D0BD663B44F2BD5ED72ACE35589316240BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:fa:84:c2:d7:ae:07:f7:1b:bf:62:ea:76:
                    77:c9:e9:40:b9:12:3b:42:f4:0d:42:83:dc:db:b8:
                    01:db:b6:cb:9c:f1:56:e6:7f:4f:ed:f8:ed:bf:b6:
                    cc:1b:cd:eb:f8:20:ad:e6:7a:6f:4e:6a:52:39:9a:
                    76:2a:62:e9:d5:c2:57:cb:eb:46:0d:51:68:bf:15:
                    43:f8:3a:ac:5f:28:35:b5:54:ce:2a:3c:05:bc:1b:
                    2b:fc:f5:c7:b2:33:cf:db:5c:8b:8d:dc:a9:e8:cc:
                    46:f7:41:7f:98:4b:d5:6f:3a:93:70:06:9c:d2:a8:
                    89:3f:c0:43:32:dc:6d:c5:4c:28:b3:08:db:21:24:
                    b6:57:96:c2:77:c2:20:08:e5:c4:51:2c:0d:91:62:
                    7e:43:52:24:8d:a5:9b:bf:b6:df:ba:43:69:25:98:
                    42:a4:37:dd:bc:bd:5d:c0:07:70:43:9d:fc:5d:a1:
                    88:f6:71:72:4a:b8:14:df:a1:33:f3:85:02:20:5f:
                    66:a7:08:01:4a:94:51:6d:2e:eb:ad:a7:97:51:93:
                    fb:f7:55:7e:c4:7c:79:fe:01:d8:54:1a:ef:87:16:
                    6c:96:49:da:64:fd:cb:bf:2f:a9:49:1f:2f:c4:45:
                    32:d2:36:a6:07:29:fc:b0:9f:09:ce:a0:39:d2:4a:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:44:2D:0B:D6:63:B4:4F:2B:D5:ED:72:AC:E3:55:89:31:62:40:BF
            X509v3 Authority Key Identifier:
                keyid:1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/3133382e39392e33322e302f32322d3234203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:52:83:3c:f4:bc:61:d5:d8:01:99:22:8d:22:2a:e2:9f:36:
         7b:8a:68:12:cb:db:90:ea:87:e0:ad:10:12:8c:00:22:16:83:
         2d:37:de:9e:7d:14:77:da:d6:10:79:29:a0:5a:cd:c9:06:95:
         a8:d4:12:c2:c7:9d:be:e4:11:cf:73:79:47:03:2a:90:3f:16:
         b6:c3:9e:60:fa:8c:58:47:88:58:1d:07:7f:3f:7b:b8:ec:36:
         8f:a2:c1:c6:bd:57:e4:49:84:67:06:8f:7a:aa:4a:07:08:27:
         dd:30:c2:1c:7e:e2:e9:43:f9:32:62:39:dd:51:94:37:45:bf:
         d0:07:7b:86:4f:58:1a:88:05:13:9f:ac:78:c1:58:49:d0:fe:
         0a:a8:59:ad:8f:50:fe:6d:95:bd:3d:64:8a:c3:e7:96:cb:f4:
         2c:7b:10:88:2a:04:c5:6b:d6:93:48:5f:75:0b:c4:da:2a:d0:
         7b:6d:3d:c1:da:a2:ba:9c:08:60:de:04:f7:08:ec:2e:90:66:
         df:e7:b3:8a:07:c8:4c:80:57:ca:d3:ca:f3:a2:a8:65:4e:d5:
         92:ad:f6:a1:67:fb:64:e3:94:21:b5:2e:34:d3:62:02:4e:0d:
         41:fb:3d:f8:32:ee:0d:3b:ba:66:b0:97:08:e9:7e:91:cb:44:
         bc:12:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org