Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa
File:                     3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa (raw, json)
Hash identifier:          a1HfMbs/dyusdTLFwuUc7b7CnBhl8c5lBTbXaV6IHFM=
Subject key identifier:   65:AB:D0:6A:76:7E:52:BA:D2:CB:24:2D:5B:35:39:2C:A0:15:1C:26
Certificate issuer:       /CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
Certificate serial:       6D0DB73602F0B403CF66042A49FDFBA889C5AD8C
Authority key identifier: BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa
Signing time:             Tue 22 Aug 2023 18:22:49 +0000
ROA not before:           Tue 22 Aug 2023 18:17:49 +0000
ROA not after:            Tue 20 Aug 2024 18:22:49 +0000
asID:                     264585
IP address blocks:        138.36.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:b7:36:02:f0:b4:03:cf:66:04:2a:49:fd:fb:a8:89:c5:ad:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00
        Validity
            Not Before: Aug 22 18:17:49 2023 GMT
            Not After : Aug 20 18:22:49 2024 GMT
        Subject: CN=65ABD06A767E52BAD2CB242D5B35392CA0151C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:1f:23:c4:8f:9e:c9:f1:52:88:98:82:6c:
                    61:42:59:54:99:ef:12:c9:be:5a:b7:83:86:41:59:
                    a5:f5:9e:6f:57:1a:6c:ff:82:7d:de:1f:c3:e0:df:
                    a1:c9:b8:13:bc:67:2b:f4:fd:75:13:ab:32:c2:bf:
                    39:d8:47:9f:0b:f9:8a:dd:af:3c:f8:a7:4c:93:bc:
                    24:dc:fb:eb:a6:30:84:13:13:b8:5c:21:04:b4:19:
                    09:82:a0:78:98:1d:6d:7b:1d:e2:d8:d3:07:80:03:
                    80:1a:c6:7d:a0:36:0c:cc:04:11:91:b8:c2:15:6f:
                    c1:e7:50:a1:78:97:4f:03:5e:6a:9c:93:aa:2d:d6:
                    aa:dd:5d:c7:da:1a:51:c3:9f:5c:3f:3d:3f:5a:a9:
                    a8:90:5c:06:af:bf:dc:d9:9f:3b:45:8f:30:b2:c9:
                    20:8d:d4:3b:82:a7:e0:34:ca:c0:e1:e8:b7:ec:09:
                    90:82:62:cc:9b:e2:b9:d2:84:b8:2c:f2:8c:93:0e:
                    0c:67:98:9d:a2:23:d9:42:db:ac:ed:05:e3:c4:1b:
                    73:7e:0c:0c:6e:0a:e2:5c:a8:dd:c4:c3:47:d0:50:
                    c3:ee:79:60:81:37:76:92:c7:4f:69:e2:a6:8a:11:
                    ee:1a:80:ff:6c:99:e1:27:26:9b:de:29:e9:16:38:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:D0:6A:76:7E:52:BA:D2:CB:24:2D:5B:35:39:2C:A0:15:1C:26
            X509v3 Authority Key Identifier:
                keyid:BC:60:1E:88:EF:B9:15:EE:FB:93:8F:5E:EE:16:D0:8B:8D:EB:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC601E88EFB915EEFB938F5EEE16D08B8DEBFD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:b3:cf:15:a6:5a:16:d2:ec:a0:5d:3f:39:6d:dc:37:d1:
         c6:fd:b5:29:46:d7:35:f6:d3:3d:12:bd:0f:76:75:aa:cd:e5:
         b0:79:c0:c7:dd:a6:a5:dc:26:0e:0a:78:1a:17:6a:c0:e2:69:
         cb:8e:ea:86:24:e7:eb:e1:6a:f5:76:f4:c4:61:3c:08:fd:90:
         66:91:df:90:73:b0:36:f6:1e:c5:c8:38:e0:23:8a:82:b4:26:
         6b:5b:b7:ac:6b:45:aa:9c:2d:92:e3:ce:08:25:6a:6d:56:e0:
         96:e4:70:03:b9:e3:00:86:52:81:be:ab:a6:36:ff:73:82:45:
         1a:e7:b8:19:36:a9:53:dc:00:10:04:b9:6e:64:24:94:70:b3:
         0e:30:43:bc:e9:b8:56:d4:cb:02:26:df:a9:91:ad:2a:6a:ec:
         f4:8b:c8:4e:2a:31:db:be:72:79:4c:e9:4a:01:80:14:69:e2:
         af:7a:8d:22:74:1d:6b:d2:33:b6:1e:c3:05:e0:70:2c:ab:11:
         43:c8:e9:e7:f4:ab:7b:13:e5:94:fb:b3:89:18:b0:04:c4:f7:
         6e:12:a9:8a:35:48:ec:d0:e2:4d:4b:c2:61:53:cb:c6:6b:1f:
         a8:72:d3:8c:eb:9c:f7:76:ee:d4:eb:a5:6e:08:a1:80:eb:d3:
         62:70:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org