Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32342d3234203d3e20323634353234.roa
File:                     3133382e302e302e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          DAFHFqrErJtAKU2rtdj1zLKfUs375hSCDZKl9lu9tE4=
Subject key identifier:   B6:0D:C4:A6:05:1B:B1:CA:A9:4F:AA:F7:6B:CB:5C:0D:B9:47:27:18
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       10F89C97EA6EC51D69A504663DD42EB4E9F0C856
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32342d3234203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        138.0.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f8:9c:97:ea:6e:c5:1d:69:a5:04:66:3d:d4:2e:b4:e9:f0:c8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=B60DC4A6051BB1CAA94FAAF76BCB5C0DB9472718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:11:36:ab:96:f9:65:07:4f:8f:68:cd:c5:
                    23:ed:4f:02:78:72:4e:17:9a:0f:2c:47:69:25:92:
                    f3:0e:73:57:54:bd:cd:98:53:ea:f6:2c:fb:f5:cc:
                    b6:e0:5f:06:5c:90:c6:7a:c6:03:4c:3a:f6:83:3a:
                    78:d1:11:30:6a:b7:b1:91:da:09:9c:57:6c:db:f7:
                    57:aa:dd:3e:39:b6:30:1f:04:6c:16:44:c4:5e:ca:
                    0a:6e:c7:42:e0:38:4e:42:1f:91:7c:a0:64:43:02:
                    a0:a0:79:46:16:62:9b:1e:76:8b:d3:66:25:12:47:
                    0a:1b:c7:4a:79:d0:7a:00:1d:ab:23:93:5a:20:18:
                    ee:4d:e7:fa:17:33:d4:b0:61:10:81:1c:b1:ff:db:
                    ce:c6:f3:7e:55:73:e8:cc:1f:d2:4a:07:66:6d:cb:
                    aa:ae:85:4e:3d:e1:42:7f:91:cf:8b:6f:e3:cc:49:
                    7c:a1:4e:86:9c:5e:16:83:19:88:db:61:ad:2a:68:
                    34:e3:50:c9:b3:b8:b9:c5:00:8e:21:45:c9:97:21:
                    10:63:c5:46:03:cb:e0:f1:de:61:f0:48:e1:c1:e2:
                    5a:3b:a1:59:14:59:9d:70:2c:ae:2b:c9:7c:13:e5:
                    61:85:bc:db:9b:f5:0b:2f:82:28:7f:09:a7:14:51:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:C4:A6:05:1B:B1:CA:A9:4F:AA:F7:6B:CB:5C:0D:B9:47:27:18
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:46:b1:86:e7:a2:1c:cd:f2:41:5a:d0:0d:18:2f:80:f7:
         7f:57:2b:a9:bb:fa:28:22:6a:e1:5e:2f:cb:ff:48:20:c1:14:
         38:55:7e:2f:7a:2b:00:29:c3:ca:29:bf:61:75:03:4d:ce:c7:
         23:c4:a7:6a:38:37:86:03:2d:bc:3c:9d:a8:da:4d:99:72:fd:
         ae:e2:cb:40:fb:43:76:9a:dc:54:65:46:e6:b0:ea:d5:11:c5:
         da:e3:36:30:13:1d:44:d7:d6:0c:21:6b:2d:21:57:15:cf:d5:
         c6:39:b3:17:6f:3a:86:19:8d:38:65:30:a3:89:b4:e5:fb:dd:
         8a:62:ba:32:16:cf:c5:71:b1:49:ca:8d:49:75:b1:0e:f9:92:
         18:ee:ab:23:58:e8:cc:87:0f:55:bc:9d:08:c8:55:85:55:37:
         d9:35:4c:84:09:c5:98:55:7e:8d:ed:26:8c:5c:da:d6:7c:30:
         fe:3d:2c:c0:f6:bb:51:4d:f8:4c:dc:52:75:86:cf:31:b7:3f:
         c2:99:eb:c7:7c:20:51:f9:05:2e:cd:d1:11:71:a4:c7:b8:36:
         77:1f:b6:56:f5:10:6c:75:17:d6:8b:ac:8d:81:cc:5c:0d:30:
         6a:64:c4:dd:92:34:60:7b:48:ef:f5:a8:8b:64:55:1b:ca:f3:
         09:14:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org