Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3234203d3e20323634353730.roa
File:                     3133382e33362e34302e302f32322d3234203d3e20323634353730.roa (raw, json)
Hash identifier:          HeXREiZki3yRmyhgxgHrX1uegaX/mTdM0m5czzJ1JTk=
Subject key identifier:   83:09:3E:6D:63:2C:F1:1F:87:9B:2E:0D:06:93:4F:46:19:27:F9:7A
Certificate issuer:       /CN=36729E9397EC3A3BAF16C4493F8EBB20B38367A9
Certificate serial:       69A7B9A5054A27D34EFF51EDF85F2936C2530678
Authority key identifier: 36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3234203d3e20323634353730.roa
Signing time:             Mon 08 Apr 2024 17:09:28 +0000
ROA not before:           Mon 08 Apr 2024 17:04:28 +0000
ROA not after:            Mon 07 Apr 2025 17:09:28 +0000
asID:                     264570
IP address blocks:        138.36.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a7:b9:a5:05:4a:27:d3:4e:ff:51:ed:f8:5f:29:36:c2:53:06:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36729E9397EC3A3BAF16C4493F8EBB20B38367A9
        Validity
            Not Before: Apr  8 17:04:28 2024 GMT
            Not After : Apr  7 17:09:28 2025 GMT
        Subject: CN=83093E6D632CF11F879B2E0D06934F461927F97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:85:27:bc:79:d5:10:98:98:c2:73:fc:36:
                    f7:2d:e7:69:eb:2d:23:83:99:8c:52:62:4e:24:6d:
                    86:c3:8f:24:d2:15:d2:ff:be:dd:db:19:03:4f:98:
                    85:32:40:f1:75:57:fe:90:e7:19:50:4a:e3:67:47:
                    e1:74:92:9e:17:07:ee:c1:f5:50:6d:0d:7c:74:62:
                    c2:d6:19:c2:a2:d7:b3:a1:5d:c6:22:1c:fe:31:c6:
                    47:0b:bd:d1:fb:fe:e6:cc:e4:6e:a4:14:4b:7b:a1:
                    79:6f:ca:e6:b5:99:a7:f6:39:05:e2:42:ae:f4:c6:
                    a6:60:ba:12:ef:db:82:c7:5a:10:47:61:82:54:4d:
                    99:9a:b6:8d:71:39:f3:76:81:94:f3:55:5e:a2:fa:
                    28:e9:2c:38:34:6d:54:74:c7:91:0d:28:00:a9:7b:
                    b3:ea:ed:b4:00:4d:70:ea:5c:56:2f:f6:db:de:03:
                    ec:a0:84:c8:04:93:b1:2f:83:7c:35:ee:22:e6:b7:
                    43:9b:b6:ab:07:e2:56:18:3d:fe:ad:4c:ba:79:e4:
                    48:b1:10:3c:ba:ea:03:a0:10:b9:82:75:a0:3a:3f:
                    e0:c4:12:e8:c2:00:54:a8:a7:d1:30:33:d1:67:59:
                    12:8b:46:df:86:88:e5:ee:2d:16:af:3f:fa:19:04:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:09:3E:6D:63:2C:F1:1F:87:9B:2E:0D:06:93:4F:46:19:27:F9:7A
            X509v3 Authority Key Identifier:
                keyid:36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/3133382e33362e34302e302f32322d3234203d3e20323634353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:50:ce:b2:cb:01:6f:5d:45:b3:11:35:a6:f8:e4:dd:bb:
         3c:25:ea:76:e3:0c:c9:a7:b5:ce:8f:41:8c:e5:dc:a8:05:60:
         e8:8a:1d:b5:c0:0f:f0:1f:ee:17:66:69:a4:80:c5:2e:2f:c6:
         19:47:a4:79:5b:1b:cd:25:a2:6c:b2:e0:b0:14:eb:9c:76:42:
         6a:f6:77:41:a0:37:36:5d:ad:26:00:62:bc:4d:26:cf:9c:8a:
         1a:6f:17:49:c0:87:11:36:ee:70:a5:ec:dd:24:de:1d:89:e7:
         9f:3a:b2:ff:43:c2:46:63:ea:d7:75:72:c8:bf:fc:80:2d:5e:
         85:d7:39:06:14:e7:c9:19:1e:7e:10:79:0d:cc:f8:ae:0d:3a:
         5d:14:6b:64:82:99:df:32:6c:96:68:34:a2:cf:eb:c7:2a:4c:
         a1:f9:f3:d4:f1:d6:b3:3d:9f:e1:d0:45:e1:c7:98:b6:79:d3:
         a3:e9:b5:ab:d4:d9:ce:39:20:28:60:65:7d:2a:7d:54:82:04:
         35:12:25:83:d0:d4:0e:d4:2b:25:c2:74:44:20:54:bb:9a:79:
         6b:3c:a6:e9:64:54:70:e5:7b:9c:9b:fd:bf:bd:a5:18:c1:25:
         be:06:48:03:65:e4:68:2f:ff:34:92:5c:7b:b2:52:68:0b:67:
         b3:b3:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org