Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
File:                     3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          7wKBIfRQp09UYiZPlMyKSyj4S4JeSg0ieOgtwJuXnGw=
Subject key identifier:   7E:B3:66:47:26:DD:81:EE:88:2B:2B:78:53:6A:0D:D0:D8:6E:EE:2A
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       676676405D4AC5BD189ECC056C0500C0399AC321
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa
Signing time:             Fri 02 Feb 2024 17:50:36 +0000
ROA not before:           Fri 02 Feb 2024 17:45:36 +0000
ROA not after:            Fri 31 Jan 2025 17:50:36 +0000
asID:                     264479
IP address blocks:        138.117.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:76:40:5d:4a:c5:bd:18:9e:cc:05:6c:05:00:c0:39:9a:c3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: Feb  2 17:45:36 2024 GMT
            Not After : Jan 31 17:50:36 2025 GMT
        Subject: CN=7EB3664726DD81EE882B2B78536A0DD0D86EEE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:d1:85:8c:e5:b6:c7:8e:57:90:5c:42:ee:
                    d2:4b:38:b5:96:38:81:91:80:ad:cb:20:f6:ad:0c:
                    10:1f:45:e6:e5:59:47:cb:87:73:2f:eb:af:de:34:
                    27:e7:8e:a1:1c:01:1b:43:d4:5b:3b:c4:42:54:9e:
                    6e:32:88:7f:17:d3:23:ce:05:d0:69:22:0b:e2:e8:
                    6b:8d:41:9f:af:2d:5f:1f:53:7c:09:47:ce:32:07:
                    4c:76:d8:ef:4c:69:71:d9:45:13:f7:f5:af:24:eb:
                    13:87:97:aa:b2:0b:81:14:aa:18:a6:12:fc:0f:70:
                    1f:08:63:db:da:04:3b:b8:1b:27:a1:15:4c:1c:33:
                    69:94:f8:fd:85:b7:1d:f1:01:66:54:c0:06:a5:d4:
                    d9:1c:c5:ab:c9:57:4f:44:57:02:28:07:5a:26:a9:
                    e5:00:58:25:52:42:18:15:34:20:03:80:a5:82:fc:
                    0b:1a:fc:bf:41:48:1c:f9:42:c6:60:2d:97:45:ce:
                    18:b7:8a:fc:8a:30:d0:30:90:88:10:ab:21:e6:b4:
                    e2:36:fc:f4:d0:36:22:69:82:85:4d:a9:8f:99:dd:
                    13:aa:a2:a1:95:42:df:3b:fe:16:60:79:92:74:78:
                    af:10:93:25:d7:52:9f:56:36:a1:b6:f1:0b:12:a8:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:66:47:26:DD:81:EE:88:2B:2B:78:53:6A:0D:D0:D8:6E:EE:2A
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133382e3131372e33342e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:24:8e:c4:e6:5c:f2:a2:8c:c0:ab:19:99:a7:c2:b4:17:
         f1:19:45:1d:2c:46:95:e7:9a:26:e7:86:fd:b3:dc:74:68:c5:
         4b:76:0d:fb:d8:b3:77:b4:ed:5a:1e:42:a7:24:3d:f1:b9:98:
         59:75:32:8f:26:f8:79:c5:4f:8d:3b:57:29:f5:d1:5f:c5:34:
         9a:22:e6:0e:1f:ce:d8:32:d3:17:37:05:62:d1:27:50:16:91:
         4f:bd:18:12:b7:35:86:85:04:e2:d2:dc:58:be:49:2c:d2:d9:
         47:2c:cc:ff:09:dd:24:51:9a:54:49:a1:9f:61:f4:d3:15:66:
         2b:5a:d0:f9:12:5d:f0:ee:f1:e0:ff:be:0c:24:7f:52:00:7f:
         96:07:a5:50:56:cf:9c:5c:96:63:0d:56:73:1d:35:ce:27:0e:
         3e:cb:cc:9f:39:e7:cb:e8:03:7c:91:1b:96:b9:f0:d4:1a:e1:
         a8:40:c2:c0:16:4c:2a:c4:41:da:31:7e:1e:e5:15:9a:e3:49:
         7b:72:d1:fc:f7:33:4c:60:a3:21:50:ce:30:fc:b6:34:f7:c9:
         59:43:4c:79:10:b6:74:17:a2:a0:99:7f:15:c1:c2:ab:08:c9:
         e8:3f:e2:b2:07:4e:e8:49:77:db:30:df:12:50:79:bb:36:3b:
         a7:8c:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org