Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34332e302f32342d3234203d3e20323730393330.roa
File:                     3133382e39342e34332e302f32342d3234203d3e20323730393330.roa (raw, json)
Hash identifier:          9XdsCINOjVU2YfIZgaXQWqC5q1OSA0yKKrYeypHnTLk=
Subject key identifier:   3E:95:E2:B7:86:51:7D:39:A3:88:D8:B2:33:45:8C:59:15:14:A1:13
Certificate issuer:       /CN=69BAEDBA4E49257B951660C842A16EF5C736B492
Certificate serial:       44FAF6C6D3B64880CA41EBB1BB085391BA7C2AF6
Authority key identifier: 69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34332e302f32342d3234203d3e20323730393330.roa
Signing time:             Mon 22 Jul 2024 12:50:20 +0000
ROA not before:           Mon 22 Jul 2024 12:45:20 +0000
ROA not after:            Mon 21 Jul 2025 12:50:20 +0000
asID:                     270930
IP address blocks:        138.94.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:f6:c6:d3:b6:48:80:ca:41:eb:b1:bb:08:53:91:ba:7c:2a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BAEDBA4E49257B951660C842A16EF5C736B492
        Validity
            Not Before: Jul 22 12:45:20 2024 GMT
            Not After : Jul 21 12:50:20 2025 GMT
        Subject: CN=3E95E2B786517D39A388D8B233458C591514A113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:ab:8f:a7:27:be:b0:e5:33:6f:fb:69:e4:
                    39:f1:94:1d:ea:dd:40:8d:e9:7b:f5:6a:09:99:d4:
                    82:05:59:68:89:76:94:ae:80:90:13:e5:0d:3e:98:
                    a1:15:6e:9a:9c:ef:46:a0:a4:17:d0:86:7f:1e:1b:
                    4b:42:0b:32:fd:f2:88:59:3a:d2:35:1b:c3:05:c4:
                    09:f3:7c:69:84:55:80:7e:64:14:7f:3b:ac:a1:2c:
                    1d:1c:0a:c6:26:6f:09:30:f2:a4:21:30:7e:2f:8a:
                    da:f5:fe:ed:5d:8f:eb:7b:48:c8:ec:68:ef:be:a5:
                    51:e5:83:c9:9a:4d:8f:1c:9f:f0:aa:b4:03:c7:02:
                    40:c7:0c:2b:68:0a:27:18:9f:5e:d8:3b:d5:23:cb:
                    2a:01:eb:cb:8d:7c:4c:e3:cf:5f:1b:23:41:55:d4:
                    d4:57:6a:1a:50:79:ad:6d:c7:4c:bc:99:82:fa:9d:
                    b4:e4:58:ef:1d:37:93:bc:2d:c8:a6:ff:4f:82:de:
                    c9:a0:d5:b7:c2:d4:b6:2b:1c:22:bc:2a:e5:14:52:
                    01:08:b6:6b:7d:db:fc:81:da:de:ac:3c:a2:44:68:
                    9f:bb:e1:d1:ba:50:61:19:d5:17:9c:c4:07:dd:e8:
                    a1:82:9d:a9:8d:40:66:36:dc:6f:b1:7f:32:4a:9d:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:E2:B7:86:51:7D:39:A3:88:D8:B2:33:45:8C:59:15:14:A1:13
            X509v3 Authority Key Identifier:
                keyid:69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34332e302f32342d3234203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:1f:51:97:4a:92:96:1a:d6:7d:de:75:13:45:a8:c5:9e:
         16:f6:01:9d:2c:c7:15:ed:8e:c2:12:02:9d:d4:69:b6:49:a3:
         a9:a2:36:cf:e7:4e:fd:59:3c:fe:c5:84:77:89:14:58:31:cc:
         c3:b1:b2:4c:6b:75:22:c8:f6:02:79:19:fa:0f:da:c8:14:4a:
         2b:49:5f:16:3c:a5:7a:6e:5d:57:1b:06:bf:d9:a5:48:c3:29:
         da:cd:3a:1c:58:ea:dd:aa:77:70:a7:e6:75:84:86:4f:98:70:
         68:e2:80:75:d1:03:6e:ef:27:c1:b6:35:d1:8a:2e:2a:45:b3:
         35:cc:03:5b:b3:b4:0d:8d:75:3d:c5:f5:29:4a:5b:7d:ee:56:
         a0:18:82:1b:58:aa:d6:79:88:b9:88:7f:8d:5a:7b:be:b2:42:
         02:45:fc:aa:25:73:88:66:fb:e9:62:ed:10:e5:40:63:e6:63:
         fc:04:96:9c:85:73:80:f8:e1:05:0e:82:c8:15:28:9b:c7:46:
         f7:cd:82:d5:f4:20:ac:d5:59:8e:62:c6:24:80:67:04:5a:e0:
         43:50:8e:aa:7e:db:a9:28:79:21:71:38:a1:38:07:f8:66:74:
         24:73:5c:be:e0:cb:69:c6:7b:5b:a8:44:c7:e5:de:59:46:c6:
         90:85:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org