Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32342d3234203d3e20323632333639.roa
File:                     3133382e302e34342e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          HCTkjJ2JTeD32WTZtd61Hbt4GMxaVGTyakvfnRBbq+Y=
Subject key identifier:   A5:2F:BD:D4:9C:AD:E9:1E:24:D1:F3:94:3B:8E:47:EE:A0:D4:A1:84
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       76346AECB23A8777FEAE9020AE06233221EAF81A
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32342d3234203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:13 +0000
ROA not before:           Wed 13 Mar 2024 19:16:13 +0000
ROA not after:            Wed 12 Mar 2025 19:21:13 +0000
asID:                     262369
IP address blocks:        138.0.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:34:6a:ec:b2:3a:87:77:fe:ae:90:20:ae:06:23:32:21:ea:f8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:13 2024 GMT
            Not After : Mar 12 19:21:13 2025 GMT
        Subject: CN=A52FBDD49CADE91E24D1F3943B8E47EEA0D4A184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:b8:78:01:4f:8e:7d:45:4f:c3:d8:8a:27:
                    e8:96:ad:53:8f:d3:57:4d:d0:a5:33:7c:11:1c:e3:
                    75:92:04:ad:1a:65:0b:51:ea:8e:c1:7f:7f:cf:90:
                    2b:4c:1d:51:13:d4:22:1d:d8:dd:95:7e:c2:6f:81:
                    fc:a0:68:85:e5:b4:fc:52:2b:88:d6:82:69:ee:9a:
                    49:ae:b6:cc:5f:5f:f8:e3:64:de:33:02:4a:54:c1:
                    06:c5:1c:b1:2b:f0:cd:b2:3c:2e:7f:f1:e9:af:98:
                    2a:46:ab:e2:2c:e0:0d:d9:8f:bb:d4:06:a0:cd:24:
                    28:3b:5d:c1:9a:86:f6:3d:20:ab:25:dc:02:69:72:
                    21:06:b4:a1:5e:a8:c8:84:b7:12:ea:cd:98:33:57:
                    75:30:8f:d4:25:76:d7:72:40:d5:78:0c:78:f6:37:
                    c0:fb:76:6b:c3:46:37:77:18:56:17:19:69:be:30:
                    73:77:85:b7:af:f5:d5:d4:c2:23:14:ed:2a:de:7b:
                    bb:29:95:5f:20:2d:ef:6f:91:a2:13:94:27:13:a9:
                    41:5f:db:94:5d:af:dc:c1:7b:b1:23:66:94:3f:93:
                    fe:9f:0c:75:a7:2b:2e:b4:6d:39:e6:06:68:eb:d5:
                    a6:1e:f2:56:b7:24:e3:8d:cc:6f:44:cf:39:b1:df:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:BD:D4:9C:AD:E9:1E:24:D1:F3:94:3B:8E:47:EE:A0:D4:A1:84
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34342e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:88:3e:4b:78:51:81:14:56:6c:fa:a0:9d:37:f0:06:d3:
         f4:7e:14:da:4e:e2:12:ed:dd:91:8f:8d:86:93:7e:b5:35:ad:
         91:0f:ee:fe:62:a3:44:45:2a:ab:5a:d7:64:91:56:22:d1:3c:
         62:3a:1a:43:47:5d:0d:43:66:fc:ad:62:db:94:a9:2c:a7:67:
         2c:bf:3a:b2:20:49:5e:00:0e:2a:8c:d7:9e:5d:c8:47:d1:73:
         51:68:f3:e6:b8:2c:23:72:c4:31:be:07:07:a2:fa:f5:50:39:
         fd:75:b3:5a:8c:f1:6f:17:73:d9:a9:05:98:51:cb:53:44:b9:
         a2:44:61:76:1c:fb:cb:92:04:37:08:cd:31:ee:0e:51:58:41:
         8d:9e:dd:42:94:48:73:72:d6:44:ec:d3:2b:48:ea:53:98:35:
         5f:09:3c:1d:5c:99:05:c0:92:80:93:3d:92:66:61:96:55:27:
         f9:c5:88:69:eb:3b:16:81:a8:a6:85:66:b5:97:a8:0c:ac:05:
         81:08:c3:3b:34:e6:d0:60:36:77:f5:c4:c0:9f:5e:d6:15:2e:
         3b:04:bd:e0:4c:b0:f7:e2:0e:35:56:47:80:bc:2d:0e:49:c2:
         85:2e:a7:e9:9f:31:06:bd:2d:d9:04:93:99:54:00:f5:ad:03:
         d3:cc:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org