Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3232203d3e20323632333639.roa
File:                     3133382e302e34342e302f32322d3232203d3e20323632333639.roa (raw, json)
Hash identifier:          6caIp41E3YIh53cUTc1TUia761VEwV6hHZrUc04gkBI=
Subject key identifier:   9B:9F:72:05:7C:DA:C4:32:8C:44:06:82:F5:18:7D:8C:4C:44:EE:98
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       70A70AB948E37D344BD32FCFB3E079E90CC203D9
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3232203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:12 +0000
ROA not before:           Wed 13 Mar 2024 19:16:12 +0000
ROA not after:            Wed 12 Mar 2025 19:21:12 +0000
asID:                     262369
IP address blocks:        138.0.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:0a:b9:48:e3:7d:34:4b:d3:2f:cf:b3:e0:79:e9:0c:c2:03:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:12 2024 GMT
            Not After : Mar 12 19:21:12 2025 GMT
        Subject: CN=9B9F72057CDAC4328C440682F5187D8C4C44EE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:7a:fb:99:32:de:c5:3d:0f:b9:d1:ce:17:
                    27:9a:c7:61:b3:5f:a8:21:88:c7:50:77:86:0a:e3:
                    2c:5e:d2:a6:9d:9e:12:cd:90:92:e6:15:03:73:d6:
                    dc:d6:87:df:e6:2a:cb:25:7b:24:28:ef:b8:a2:94:
                    3f:cd:0f:5a:c6:6d:93:a3:31:a7:2f:c7:36:a5:25:
                    05:e8:22:c7:86:00:83:15:e0:0e:e6:fd:ac:bf:7b:
                    1b:9a:9d:97:74:c7:25:cf:1e:72:da:98:62:97:bd:
                    ff:63:f3:25:70:86:8b:ac:26:37:36:8c:e7:9e:9d:
                    81:9b:73:4c:16:9d:ba:89:a6:ba:0f:5e:d8:b9:f9:
                    51:9d:9e:ae:3c:bb:2e:7f:3b:7e:d2:5a:69:2a:e1:
                    d9:9e:94:2a:ed:fe:5b:d6:5d:44:98:c9:76:f1:96:
                    7a:05:f9:b5:ab:78:32:fc:39:df:c5:8b:d4:28:45:
                    fa:dc:8d:8a:98:49:8d:0c:ad:3a:2a:96:c6:47:de:
                    ca:10:16:ee:81:79:c6:10:30:bd:9b:cc:27:ab:4c:
                    00:40:a5:e5:04:61:9a:af:16:b6:18:1e:5b:b8:d9:
                    71:7f:c9:33:13:22:5c:d2:ae:65:78:37:f0:06:fc:
                    b6:a4:ed:2d:2e:d8:6e:b2:ee:f1:0b:75:b8:5f:4b:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:72:05:7C:DA:C4:32:8C:44:06:82:F5:18:7D:8C:4C:44:EE:98
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32322d3232203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:78:87:37:91:38:62:67:b5:db:5f:a8:aa:f3:e5:fd:86:
         1c:6e:be:c6:07:a8:2e:22:cb:64:0a:32:68:f1:df:a1:43:d7:
         cf:a9:9c:42:92:71:2c:c5:51:bc:01:fc:3c:88:4c:a0:e9:59:
         af:f4:eb:30:5a:94:c7:fd:43:6a:e9:8c:f3:bd:bb:87:0f:7e:
         3e:40:88:b5:52:05:3c:77:dc:3f:17:e6:9a:be:b3:ab:fd:22:
         87:37:82:34:fd:25:ec:67:60:3d:8a:2e:7c:f1:57:b2:96:6b:
         90:f1:dc:96:24:46:e9:5a:37:63:45:b9:88:e5:f5:dd:70:7f:
         84:d5:2e:02:eb:47:f7:bc:72:81:79:c7:f4:f5:e8:9e:db:3d:
         d0:6b:49:ce:35:cd:1a:33:59:cb:bc:c6:f5:bf:90:6a:60:e2:
         68:d6:7b:03:9f:38:72:59:76:61:b6:64:4d:1a:20:c6:3d:3b:
         ae:bf:98:25:87:3f:23:ef:b8:7c:be:cb:36:33:bd:d8:cd:6e:
         47:4c:3f:43:5b:f8:c4:e0:7b:3d:84:9e:2a:41:4e:8d:11:5d:
         71:7d:ba:57:26:e6:8f:65:aa:de:99:02:e7:72:8f:b4:d5:b7:
         97:df:ba:a7:1f:9e:41:99:7b:eb:b4:17:86:af:0f:de:c0:d9:
         f3:1b:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org