Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
File:                     3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          LR/6rb9RK+ciEvTP0h7eRp4+ekaYlpRj/eGqjlgsR8A=
Subject key identifier:   B5:99:1D:5E:9C:B4:2B:A2:3D:90:BC:6C:8A:08:D6:A3:02:FE:1B:1A
Certificate issuer:       /CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
Certificate serial:       275B95F59E68516159A0BC424E1644E887947A83
Authority key identifier: 7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
Signing time:             Wed 03 Apr 2024 23:43:13 +0000
ROA not before:           Wed 03 Apr 2024 23:38:13 +0000
ROA not after:            Wed 02 Apr 2025 23:43:13 +0000
asID:                     263948
IP address blocks:        138.219.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:95:f5:9e:68:51:61:59:a0:bc:42:4e:16:44:e8:87:94:7a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8
        Validity
            Not Before: Apr  3 23:38:13 2024 GMT
            Not After : Apr  2 23:43:13 2025 GMT
        Subject: CN=B5991D5E9CB42BA23D90BC6C8A08D6A302FE1B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:8c:b5:6a:98:1c:cc:f0:fb:65:9a:1c:84:
                    e3:17:39:99:f4:a9:94:93:2e:2f:75:d1:08:ff:5c:
                    bb:2c:ad:c0:b7:53:67:51:8c:d5:cd:50:d2:a9:3d:
                    72:1e:e2:68:bc:bb:4e:0c:84:60:43:d0:84:43:37:
                    ca:29:83:82:67:51:2c:cf:fd:50:cb:f2:6e:bd:e2:
                    85:89:3f:40:6a:45:3a:88:b5:a0:3f:be:07:bc:e1:
                    bd:6f:f1:45:fa:82:b7:5a:01:23:4c:6d:67:82:60:
                    02:0b:b1:5b:84:8f:82:6b:8a:20:23:71:8b:b9:50:
                    e5:4d:f0:a8:0d:5b:06:2e:70:16:65:40:d8:f1:04:
                    0e:54:46:50:80:89:de:4d:9e:3b:c1:22:8a:bb:c3:
                    31:35:4a:7b:b0:fa:98:1f:34:b9:ae:1e:23:7a:a3:
                    4a:85:b2:7a:c0:14:57:48:0a:3b:2f:67:e5:78:6b:
                    1c:17:47:98:f1:fd:2c:7d:05:86:f0:ab:bc:34:8f:
                    53:eb:af:48:3a:a9:83:dd:93:4b:af:12:28:06:51:
                    8b:b6:c8:46:9a:9b:6a:30:12:c1:d6:84:1a:fc:d3:
                    ce:d7:24:bf:eb:07:4b:55:a0:bc:0c:17:8a:3e:af:
                    20:1f:7a:43:f6:78:44:49:ae:3b:e0:e9:01:11:61:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:1D:5E:9C:B4:2B:A2:3D:90:BC:6C:8A:08:D6:A3:02:FE:1B:1A
            X509v3 Authority Key Identifier:
                keyid:7B:73:D8:6C:CA:23:6A:C5:4D:0C:FC:60:DD:B7:B3:61:0B:C9:8D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B73D86CCA236AC54D0CFC60DDB7B3610BC98DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/1/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:89:85:38:ec:9d:15:9c:7d:bd:5d:72:89:8d:82:2d:db:
         a1:25:e3:4a:e1:c3:49:5c:36:40:51:c3:73:7b:ab:cd:15:d9:
         2d:9c:cd:2e:05:a5:d8:ff:b7:f3:e5:dd:6e:64:f9:b8:dd:64:
         4b:88:ad:33:af:37:d3:78:84:43:43:7a:a2:d4:46:8a:14:29:
         66:07:97:a0:8a:83:b7:17:ee:d7:b9:14:59:96:8d:91:bf:1b:
         63:62:c6:10:90:03:8a:60:99:b3:80:0d:98:23:d1:e3:28:5f:
         2e:da:04:1b:85:e1:46:ca:31:03:3f:84:71:fb:37:9e:3b:6e:
         fd:45:13:1b:7e:5d:f2:37:17:62:51:45:3f:53:9f:3d:c2:74:
         a6:9c:1a:53:3c:c4:02:61:bd:3a:66:02:12:95:33:34:80:05:
         74:01:ed:e9:ce:fc:4e:7d:d6:0b:da:ba:cd:09:d8:22:00:03:
         a8:4f:9b:3e:2e:25:6f:d0:2b:87:a3:d9:7c:f7:b2:53:fb:b5:
         04:c8:66:6d:38:59:a3:ae:9a:8e:b7:ba:ff:24:64:00:99:c6:
         f2:c2:8b:80:ea:eb:7b:81:d2:e0:fd:58:39:77:32:7e:63:e5:
         27:c6:15:f9:8d:18:45:83:d7:23:79:cc:27:fd:1a:52:a1:f9:
         29:79:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org