Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa
File:                     3133382e39342e3131362e302f32322d3332203d3e203532363132.roa (raw, json)
Hash identifier:          nAvQJD2vWVLQVLCj4To2JMDxbxCHUcyT+O5wqN4CQ94=
Subject key identifier:   76:40:C5:12:D9:32:57:80:B8:69:E2:EC:E1:C5:87:E9:15:1D:6A:F0
Certificate issuer:       /CN=1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0
Certificate serial:       7B1254C3EAAE061963DC7F5487F8BB77830C1741
Authority key identifier: 1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa
Signing time:             Fri 05 Apr 2024 00:53:32 +0000
ROA not before:           Fri 05 Apr 2024 00:48:32 +0000
ROA not after:            Fri 04 Apr 2025 00:53:32 +0000
asID:                     52612
IP address blocks:        138.94.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:12:54:c3:ea:ae:06:19:63:dc:7f:54:87:f8:bb:77:83:0c:17:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0
        Validity
            Not Before: Apr  5 00:48:32 2024 GMT
            Not After : Apr  4 00:53:32 2025 GMT
        Subject: CN=7640C512D9325780B869E2ECE1C587E9151D6AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:6b:92:68:c4:2e:d3:3e:d7:15:a5:0b:7c:
                    b5:b9:23:7e:76:f1:9a:47:18:a9:70:6d:05:d9:c2:
                    62:75:1b:3e:de:f4:55:75:aa:59:97:5c:02:f2:41:
                    da:b2:4a:65:5a:56:e6:a7:62:f7:5f:a6:e2:ea:1c:
                    45:54:80:ff:d3:f6:ac:6e:f1:6c:e5:17:13:84:a4:
                    40:fa:13:ec:eb:8c:e7:69:c4:90:3f:3e:e2:71:e7:
                    5f:8b:af:7c:6b:aa:3a:22:ff:39:eb:6b:67:ae:0b:
                    b4:c3:a6:ec:77:a8:f5:55:51:71:93:72:b8:ab:10:
                    88:7f:ec:2c:83:d6:09:4f:ea:91:77:ef:41:70:42:
                    f4:39:9c:87:72:84:c0:d7:8e:91:8f:c2:e9:ef:2c:
                    3e:01:2c:8e:c0:d0:a6:ae:c2:b2:52:47:f0:57:6c:
                    5d:56:0b:b2:b8:3c:64:18:47:84:72:07:0f:57:c2:
                    90:a9:36:d0:4e:8e:30:f3:ef:10:c4:ab:30:21:55:
                    ed:61:18:77:f3:d6:c5:00:ca:73:7a:79:b9:c7:66:
                    5a:e2:50:94:01:b5:68:3c:12:5e:e3:48:9a:17:8a:
                    9c:62:f0:b5:58:80:89:31:49:e7:b7:bf:ee:4b:be:
                    84:31:05:de:9e:52:95:a5:46:15:ef:12:21:c4:a9:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:40:C5:12:D9:32:57:80:B8:69:E2:EC:E1:C5:87:E9:15:1D:6A:F0
            X509v3 Authority Key Identifier:
                keyid:1F:B4:A7:B0:6E:D8:1D:56:33:15:45:E9:4F:CC:5A:9F:0E:4E:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB4A7B06ED81D56331545E94FCC5A9F0E4E6BD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/1/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:e3:58:fc:79:4a:af:31:5f:d9:c5:2d:ed:f4:fc:07:7d:
         73:74:c8:53:13:5c:58:c6:f9:79:3c:6c:53:50:ef:45:e9:52:
         66:22:ff:85:b1:a2:b1:ed:3b:ec:6b:ae:cb:86:c8:93:9d:0f:
         38:a7:3d:65:70:13:20:d5:25:98:e9:5a:20:be:f1:95:6e:98:
         4b:09:0b:36:ee:42:18:08:81:a8:76:73:ba:84:c3:5b:62:ec:
         02:27:42:1d:24:19:bb:cc:80:1e:2c:67:ce:65:44:b1:c3:39:
         78:c0:4a:6a:9e:20:17:0b:86:70:3f:79:85:8a:6e:4c:7e:82:
         1a:39:fe:bd:11:13:ad:7f:c2:6f:a4:fe:0b:e8:f4:b7:44:83:
         60:73:50:1b:66:d9:a5:5a:85:e9:80:6b:57:bf:d9:16:81:a7:
         ad:38:27:d7:18:40:61:0a:7d:b6:22:3f:f0:ee:4c:86:88:9f:
         66:56:b2:30:74:99:b2:bb:ab:46:1f:88:05:5e:fb:85:9b:3f:
         46:9b:a2:62:1a:c4:17:5a:2e:c6:81:68:6b:e5:b0:62:cc:72:
         38:43:0f:6e:b1:ec:30:71:ac:71:a4:1c:f9:09:25:02:8a:68:
         13:de:fd:be:c2:ef:0c:1e:40:06:bb:89:e0:1f:92:60:e2:e9:
         75:d7:a3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org