Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34322e302f32342d3234203d3e20323730393330.roa
File:                     3133382e39342e34322e302f32342d3234203d3e20323730393330.roa (raw, json)
Hash identifier:          BQBREDUlMOyytozb86IyQgUvsXxPHZvB7D58AmTelIo=
Subject key identifier:   19:C6:D9:43:99:1C:B4:94:B2:0A:6B:CA:E1:F8:AE:58:F4:50:BB:7E
Certificate issuer:       /CN=69BAEDBA4E49257B951660C842A16EF5C736B492
Certificate serial:       597FB14EF28B6F55CAD7C19C845639D1FA19D025
Authority key identifier: 69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34322e302f32342d3234203d3e20323730393330.roa
Signing time:             Mon 22 Jul 2024 12:50:21 +0000
ROA not before:           Mon 22 Jul 2024 12:45:21 +0000
ROA not after:            Mon 21 Jul 2025 12:50:21 +0000
asID:                     270930
IP address blocks:        138.94.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7f:b1:4e:f2:8b:6f:55:ca:d7:c1:9c:84:56:39:d1:fa:19:d0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BAEDBA4E49257B951660C842A16EF5C736B492
        Validity
            Not Before: Jul 22 12:45:21 2024 GMT
            Not After : Jul 21 12:50:21 2025 GMT
        Subject: CN=19C6D943991CB494B20A6BCAE1F8AE58F450BB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:0a:dc:cd:4a:43:89:17:c8:47:94:6d:e3:
                    10:1a:8a:fb:59:b0:0b:bd:6e:86:53:3d:ac:97:25:
                    68:e3:a8:cb:73:29:a8:7c:84:0a:28:45:ea:63:65:
                    18:5b:6e:39:e6:19:37:b7:c5:14:a4:f4:b4:1b:ea:
                    ce:fd:ad:4f:d8:a2:aa:a2:ce:a6:ed:55:b7:01:27:
                    01:64:c8:7c:9b:e9:5f:fb:41:17:a8:f6:0f:4c:9d:
                    ec:2f:72:fa:c0:85:0f:50:b5:b3:55:5c:a2:aa:96:
                    0d:39:d6:be:7f:41:3f:51:60:12:5e:42:91:da:61:
                    e2:5d:a0:d5:dc:c6:51:7c:59:eb:8a:11:12:76:cd:
                    3b:6b:3a:57:cc:8b:ee:5f:27:51:5f:3e:e0:c0:62:
                    c6:54:f5:ad:6b:f6:a5:f7:61:30:ce:d6:f0:79:37:
                    93:e6:80:96:59:cc:04:97:3b:32:5b:93:7d:09:29:
                    73:bd:b2:85:6c:30:6e:38:bb:a1:5b:cb:4d:6b:83:
                    01:7a:24:91:e9:0b:7c:a9:29:81:bd:ba:05:fa:31:
                    c4:ab:5c:d7:01:05:4e:72:b7:34:20:fd:97:42:5b:
                    9e:b0:65:ff:08:cc:eb:ce:23:94:c5:ea:a1:c0:6a:
                    14:3d:79:92:c1:6e:d0:57:46:94:bf:16:c6:5a:76:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:D9:43:99:1C:B4:94:B2:0A:6B:CA:E1:F8:AE:58:F4:50:BB:7E
            X509v3 Authority Key Identifier:
                keyid:69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34322e302f32342d3234203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:d8:0e:e8:06:f1:64:fc:2b:db:cb:c8:d2:cc:ca:88:3d:
         34:49:86:63:5d:fa:8b:80:a6:0a:b3:bd:52:7d:31:8e:02:f0:
         c2:a6:5d:31:a7:cb:46:13:39:18:70:e4:9a:22:9f:2f:62:9c:
         aa:86:b9:fb:56:45:95:44:aa:61:3a:23:18:f2:01:d0:67:cf:
         83:f5:ee:10:da:92:31:d7:40:cd:d6:99:e3:bb:07:aa:5c:5a:
         37:4b:37:a0:f5:6b:ea:5a:db:c9:1c:d7:2d:cc:ee:16:e3:10:
         f5:e8:e1:e8:87:e0:d6:7d:3e:2e:12:1e:c9:d9:5c:0c:64:d4:
         36:0f:1f:09:79:ba:36:07:08:15:02:01:6a:77:1f:17:47:49:
         c1:4b:27:99:e5:74:40:fd:10:40:1a:c5:9b:0a:96:6e:91:06:
         cb:e3:8c:4a:ab:ef:9e:00:32:83:0a:51:35:c6:fd:f6:bc:37:
         31:c7:ff:3c:7a:b5:c8:91:aa:a0:bf:2e:1e:99:d7:5d:ac:ae:
         25:d4:91:7a:d2:6d:77:da:f7:d5:ed:2d:f6:68:ef:bb:00:4d:
         47:2c:96:6f:fe:a7:2b:5f:ff:08:82:dc:79:79:59:e1:46:24:
         dd:c3:3e:5b:8b:3a:1d:bd:e5:4a:67:05:45:2b:99:a6:df:de:
         07:c9:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org