Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34362e302f32332d3233203d3e20323632333639.roa
File:                     3133382e302e34362e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          cmR77wfJUdQBNSY5VHJERDy2jp18hRpqc1WUtUc4LG0=
Subject key identifier:   9A:4E:C1:57:35:F3:01:90:41:D7:83:01:A5:D9:5D:B5:E9:BB:86:27
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       7BF7D78E29184E31B7992AD913542B59065446C8
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34362e302f32332d3233203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:13 +0000
ROA not before:           Wed 13 Mar 2024 19:16:13 +0000
ROA not after:            Wed 12 Mar 2025 19:21:13 +0000
asID:                     262369
IP address blocks:        138.0.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f7:d7:8e:29:18:4e:31:b7:99:2a:d9:13:54:2b:59:06:54:46:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:13 2024 GMT
            Not After : Mar 12 19:21:13 2025 GMT
        Subject: CN=9A4EC15735F3019041D78301A5D95DB5E9BB8627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:7f:d4:85:8c:3f:89:f7:68:b5:84:ce:68:
                    52:40:6e:9c:74:68:b9:c0:1d:44:a1:78:cf:c7:51:
                    fa:0f:30:54:e6:1a:54:90:a6:32:e1:08:6f:2a:b6:
                    5a:94:ab:69:19:84:86:06:cc:31:7c:28:43:52:b7:
                    28:9d:ba:b2:32:11:06:ef:a1:4f:32:3b:e4:e1:6f:
                    95:0c:f7:db:a9:15:0e:84:31:53:a8:7f:cd:da:83:
                    ab:42:08:e2:c2:bf:12:6c:5e:98:5a:a6:c8:ba:17:
                    b2:79:58:90:25:db:97:78:8f:ef:4c:47:74:b7:56:
                    98:56:bf:29:ec:7e:13:10:ea:12:fb:80:98:26:29:
                    cc:e5:06:29:de:65:a7:d4:af:4c:ef:c0:c2:45:ed:
                    de:fb:70:3e:38:d3:a6:6f:a2:e9:c8:12:19:eb:dc:
                    a1:5e:38:73:59:3a:22:39:67:1e:a7:a2:7c:48:c6:
                    f4:d8:74:4b:45:35:28:51:c7:90:52:97:39:b6:cb:
                    75:8c:8e:90:ad:b8:25:98:cb:a5:f9:a7:44:57:c8:
                    5f:fc:40:01:e5:33:1a:1c:cf:7e:16:84:3f:a5:28:
                    10:59:c3:af:df:49:99:bd:31:e4:f4:2a:e2:c8:e0:
                    f3:f0:07:1f:63:f3:1b:a0:1f:2d:62:e4:d4:97:d1:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:C1:57:35:F3:01:90:41:D7:83:01:A5:D9:5D:B5:E9:BB:86:27
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3133382e302e34362e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:82:e5:30:a2:ad:bc:67:3c:cf:4b:1a:4b:b4:9d:d4:ed:05:
         08:d7:0b:10:9b:c2:3c:ab:74:b7:74:56:cf:98:1a:0b:dc:f4:
         f3:08:21:20:f8:0a:2f:30:56:df:ff:ea:33:19:41:96:c7:2e:
         47:27:03:f8:fa:ce:da:b2:70:c2:55:63:c1:03:ce:51:3b:27:
         63:3f:0c:2f:f8:75:17:6e:9f:d1:11:3b:74:34:16:e0:d9:45:
         73:28:17:58:58:44:f6:39:a8:a0:6f:7f:46:1f:2c:91:21:e6:
         26:61:f3:40:6b:cf:42:05:48:5e:7f:e8:fc:bc:9d:6d:3e:8f:
         d5:35:6c:d9:73:38:2e:33:7d:bb:1c:4d:9e:20:74:15:84:70:
         87:9d:38:e2:b0:c2:4b:eb:58:0b:96:9e:df:e4:fe:7d:aa:e9:
         e2:56:f5:42:34:44:7f:88:14:81:33:4e:c8:9d:b6:57:51:58:
         ce:f3:45:36:6c:36:8b:c0:f3:15:c5:eb:7f:a0:6f:49:68:3b:
         c7:11:39:4b:45:7a:c0:0a:9a:ff:7f:68:f8:44:d9:bd:33:07:
         bf:c5:d0:24:d5:47:99:d8:27:82:f1:0b:96:6d:95:c7:4b:c6:
         8a:15:f7:a9:7c:89:23:d1:aa:ce:4c:52:f1:c6:df:72:73:51:
         76:49:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org