Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa
File:                     3133382e39342e3133302e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          NQzjJcMrq5taQXB61caPP0JzqjG/SY3EH99Pf9QcsUo=
Subject key identifier:   39:FB:17:16:77:A6:59:DA:99:3B:7E:0F:DB:94:4A:41:E4:95:31:AB
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       704ACD9156BB4CB0CA79B795EDF7781D822A104D
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:32 +0000
ROA not before:           Mon 10 Jul 2023 19:01:32 +0000
ROA not after:            Mon 08 Jul 2024 19:06:32 +0000
asID:                     61584
IP address blocks:        138.94.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:cd:91:56:bb:4c:b0:ca:79:b7:95:ed:f7:78:1d:82:2a:10:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:32 2023 GMT
            Not After : Jul  8 19:06:32 2024 GMT
        Subject: CN=39FB171677A659DA993B7E0FDB944A41E49531AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:db:0e:ca:fe:50:c1:fc:a2:f5:af:fb:1a:
                    ac:77:ba:8f:1a:0d:83:bd:ba:05:97:7b:e7:61:9b:
                    65:21:18:16:05:64:9b:d9:fb:11:e9:85:00:03:3b:
                    52:bc:6f:08:57:d7:f9:50:83:2c:da:7d:75:87:b5:
                    34:02:96:25:8a:ac:f4:4f:75:8e:25:c7:21:68:71:
                    1c:80:e2:b9:f5:dd:1c:56:09:a4:85:8f:c9:d2:5e:
                    44:61:f0:1e:3e:0d:74:f5:06:b7:e9:9f:4f:63:fd:
                    58:1a:83:92:41:0f:84:98:7b:8a:57:46:73:92:bc:
                    f7:53:aa:66:2c:fa:ba:28:d4:1a:5b:95:fb:18:4b:
                    56:86:6a:b6:66:f2:74:6c:ef:25:ab:90:80:25:d8:
                    6c:fb:a3:11:50:99:a3:e6:e2:84:c9:52:4e:56:ff:
                    bd:f9:c3:49:06:20:e6:a3:20:1c:44:cd:bd:9c:eb:
                    79:b5:33:4b:cb:74:a5:35:65:ba:92:94:ed:c3:a1:
                    09:00:cc:22:de:ef:44:eb:2a:74:34:73:93:9a:35:
                    cc:6d:ae:08:a5:04:d5:fe:4c:2c:62:b0:f5:77:e8:
                    a3:3d:b7:01:88:9f:42:15:f7:0c:7b:31:f8:a3:b7:
                    f0:b2:bb:7d:f9:73:0c:f0:e6:a8:8a:c9:2a:b1:45:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:17:16:77:A6:59:DA:99:3B:7E:0F:DB:94:4A:41:E4:95:31:AB
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:71:76:80:7f:0c:80:bb:d3:47:c2:5e:fa:9c:29:11:9a:
         c7:e4:30:5b:99:d2:23:d6:0a:f3:e8:fb:0d:69:58:4b:f0:01:
         eb:bd:ec:2b:b7:83:3c:cf:4c:b1:16:33:eb:50:da:d8:1c:c4:
         56:a5:ad:f7:1f:dd:df:99:46:81:6f:31:7a:e8:f6:c2:7c:70:
         9e:eb:3c:aa:e7:32:e5:a1:90:58:ea:92:e4:a4:72:81:5d:91:
         2a:bc:a0:e8:14:f9:e9:a8:7f:4f:c9:0a:07:b1:f3:75:1a:08:
         82:9a:12:3d:a5:b4:31:ab:88:e2:5d:41:a3:95:46:38:7b:cd:
         97:92:df:84:fa:70:c8:f5:45:a6:50:77:33:bd:b6:06:7f:bc:
         30:c6:5c:ec:7c:3a:21:36:44:98:02:d7:2f:d0:80:9d:ba:21:
         bd:28:c6:e2:ee:01:8d:28:b9:3b:f9:a4:36:fe:23:35:a6:84:
         f1:51:60:aa:e9:4b:34:5f:46:e8:28:2c:cd:aa:b5:32:6f:c3:
         e9:fd:58:c4:34:aa:a6:4e:fd:6c:bc:8b:35:c1:4b:f2:4c:6d:
         b8:9f:24:bc:8d:0c:b0:b1:4c:bc:eb:d5:9a:10:54:c3:ac:7f:
         01:5e:13:90:43:83:fe:60:8b:d0:1c:83:05:d4:d5:0e:3c:34:
         91:f3:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org