Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
File:                     3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          AZKnVwZGvYk/8yK5k/HzZVB+6b631yTs/whXyYbhTjo=
Subject key identifier:   29:BE:33:86:2A:1D:8D:EA:74:33:52:B4:4D:0C:A4:F6:37:F2:F0:88
Certificate issuer:       /CN=A989F27243C24F6E4842DBC2B041DFAE8A4E9A92
Certificate serial:       4A4CBD32E98B2F0303EC789FAB7C44E63DC9ABEF
Authority key identifier: A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
Signing time:             Fri 17 Nov 2023 20:15:07 +0000
ROA not before:           Fri 17 Nov 2023 20:10:07 +0000
ROA not after:            Fri 15 Nov 2024 20:15:07 +0000
asID:                     264512
IP address blocks:        138.255.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4c:bd:32:e9:8b:2f:03:03:ec:78:9f:ab:7c:44:e6:3d:c9:ab:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A989F27243C24F6E4842DBC2B041DFAE8A4E9A92
        Validity
            Not Before: Nov 17 20:10:07 2023 GMT
            Not After : Nov 15 20:15:07 2024 GMT
        Subject: CN=29BE33862A1D8DEA743352B44D0CA4F637F2F088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:d6:9a:1d:c1:20:c8:27:e5:9a:d6:88:ca:
                    82:2b:7c:a2:c9:8b:04:ce:94:f2:dd:aa:ff:a7:dc:
                    69:da:f0:b1:85:46:41:3c:18:ac:70:f3:af:2a:84:
                    a3:b1:b6:cc:1f:e4:1e:f3:05:65:b1:c9:61:cb:97:
                    0a:f2:34:9e:b4:61:13:99:c6:be:3b:78:20:25:39:
                    73:2d:ec:7e:38:7a:62:02:81:1f:19:7b:87:9b:a0:
                    41:da:7f:6b:b3:88:44:25:83:45:ee:67:f3:97:eb:
                    58:20:98:a0:05:fb:53:fe:c8:8e:1b:98:3c:e3:de:
                    15:c3:97:b7:53:4a:b2:c7:aa:37:1b:4f:7f:69:a5:
                    72:92:20:38:3c:31:85:33:42:ed:6b:35:de:81:bc:
                    cf:08:35:a9:56:4f:b5:0b:65:2c:b7:27:f5:cb:68:
                    6d:02:98:ce:03:b5:c2:9b:56:01:2c:d7:93:d3:76:
                    53:9f:54:00:7f:92:04:cc:64:bd:a0:bb:16:45:5d:
                    f4:05:87:5a:1b:57:cb:cd:9f:b8:6a:e3:64:75:7c:
                    f5:92:0d:a1:5b:a8:86:b5:e6:90:dd:aa:b6:33:92:
                    b2:45:27:62:76:f8:56:bd:31:69:63:51:d7:e7:b3:
                    4c:f9:7a:81:72:14:03:51:75:87:39:91:b4:d1:aa:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BE:33:86:2A:1D:8D:EA:74:33:52:B4:4D:0C:A4:F6:37:F2:F0:88
            X509v3 Authority Key Identifier:
                keyid:A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:be:5e:8c:e7:08:2f:27:46:26:57:78:65:aa:71:45:bc:
         b0:58:a6:62:e3:51:0f:e9:bd:27:12:79:c9:2c:04:09:62:12:
         64:85:33:43:1e:42:09:6b:a2:3c:92:38:f6:4d:b4:5d:d0:30:
         9d:40:65:52:09:66:35:0b:49:55:82:3b:73:ee:e4:46:d6:24:
         8e:cb:0c:50:11:3b:1b:99:0b:0e:1c:e0:93:f2:4b:2b:74:a3:
         54:7a:0f:64:04:bb:53:ae:3d:03:f9:bc:38:fe:ff:11:83:76:
         fc:d5:e2:0d:33:2e:1d:c6:82:a3:57:01:79:7e:af:66:ae:ed:
         b4:8b:91:cd:1a:3b:ef:a4:b7:96:72:bf:ca:61:0b:48:a4:d6:
         f7:e5:d6:cd:f8:29:32:8a:64:a3:2c:28:25:0c:10:3b:de:7b:
         2c:8d:b0:09:09:31:a3:ef:4a:c2:67:9d:d9:01:25:2f:59:7c:
         0b:c1:ca:07:e6:65:a0:da:5d:e7:88:50:e9:5c:de:94:c2:a7:
         dd:8c:53:fb:3c:d2:3c:d5:13:3d:84:81:dc:ff:70:f4:3e:f8:
         48:6e:48:70:a8:99:e6:03:9d:db:7b:11:fa:35:04:80:42:44:
         07:69:97:18:ad:f1:3b:0b:ce:51:79:0f:bb:de:59:1a:85:14:
         18:48:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org