Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3234203d3e20323730393130.roa
File:                     3133382e3132312e3136342e302f32322d3234203d3e20323730393130.roa (raw, json)
Hash identifier:          oO0R01T0zkoJalQXmy9mWCuydSD492A7GI9g/qTP1UQ=
Subject key identifier:   C5:42:12:2A:87:BB:66:7C:F5:54:61:C8:D5:A2:EE:7F:4A:E2:8A:49
Certificate issuer:       /CN=7B0258785B876E9529605F2A6704AA3FFDC799B0
Certificate serial:       3CBB52660A9E56230521028189950FA25171F5DF
Authority key identifier: 7B:02:58:78:5B:87:6E:95:29:60:5F:2A:67:04:AA:3F:FD:C7:99:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3234203d3e20323730393130.roa
Signing time:             Thu 01 Sep 2022 04:21:36 +0000
ROA not before:           Thu 01 Sep 2022 04:16:36 +0000
ROA not after:            Thu 31 Aug 2023 04:21:36 +0000
asID:                     270910
IP address blocks:        138.121.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:52:66:0a:9e:56:23:05:21:02:81:89:95:0f:a2:51:71:f5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B0258785B876E9529605F2A6704AA3FFDC799B0
        Validity
            Not Before: Sep  1 04:16:36 2022 GMT
            Not After : Aug 31 04:21:36 2023 GMT
        Subject: CN=C542122A87BB667CF55461C8D5A2EE7F4AE28A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:5c:fb:a2:73:58:4e:e9:b5:50:e2:c1:9c:
                    cc:0d:a5:62:56:79:22:2d:fc:ad:97:d9:1c:8a:63:
                    38:19:1f:18:81:47:dc:15:a3:87:97:f4:0b:b0:7d:
                    73:0c:9e:84:99:e3:94:6b:41:af:a2:1e:ab:0d:51:
                    cf:ad:e5:e0:cf:44:79:61:0f:60:29:df:69:e3:e6:
                    82:9c:a0:d7:01:c0:7d:fe:4d:5f:06:54:f0:4b:45:
                    43:9b:af:87:97:21:3a:34:87:eb:f0:87:93:5c:90:
                    79:33:f4:ed:9b:83:04:a1:ca:5f:c0:93:07:52:76:
                    71:a6:26:e9:a0:cb:4b:23:4b:1a:6c:76:0d:79:6a:
                    ef:22:59:2e:d4:76:b8:f0:09:ae:52:43:73:5a:f6:
                    42:33:d4:c4:f4:b2:85:19:fc:d4:8f:0e:ff:01:ab:
                    72:2b:59:85:88:b1:e2:8e:1c:60:43:69:16:22:1c:
                    85:a8:a1:aa:0b:69:76:ba:ed:a9:65:1a:3c:d1:6b:
                    1a:5f:22:91:fe:97:88:c9:f4:a5:36:6a:a4:b4:ab:
                    ec:f4:fb:d3:73:dc:e1:71:2d:68:e5:ee:57:4c:b9:
                    7e:4b:7d:b9:5d:80:78:08:fb:97:d7:a7:08:5f:90:
                    4a:22:29:11:4e:53:58:4a:fe:4f:c2:ca:6e:52:3c:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:42:12:2A:87:BB:66:7C:F5:54:61:C8:D5:A2:EE:7F:4A:E2:8A:49
            X509v3 Authority Key Identifier:
                keyid:7B:02:58:78:5B:87:6E:95:29:60:5F:2A:67:04:AA:3F:FD:C7:99:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3234203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:0c:a5:6b:57:4a:6c:09:7a:66:3e:aa:65:f5:45:55:45:
         24:ff:31:93:ba:f5:f3:e3:05:1c:eb:ea:4b:b6:aa:45:9d:29:
         1a:87:7d:b5:74:c3:3f:1a:8e:c7:86:81:9d:00:73:de:e4:2b:
         be:ab:84:e9:96:ac:35:e0:93:7b:b2:c5:d7:1b:bf:df:e8:7b:
         c6:c0:84:8d:38:dd:25:bc:65:50:a1:e7:49:9d:29:09:2e:ce:
         fc:f4:c1:17:2f:50:1e:a0:de:d5:29:5f:db:7b:91:ea:68:4a:
         d6:4f:7d:72:b2:c3:d1:df:93:13:fb:c7:90:e9:a0:a5:86:5e:
         0f:9c:48:f9:ec:bc:9c:93:e8:35:b3:d1:97:d4:70:8e:83:5c:
         79:08:63:fe:ca:90:b4:3d:7c:bb:df:b1:1f:a2:1b:78:a5:27:
         34:08:0a:03:d6:e1:09:1a:70:ec:f3:30:7a:bc:b0:3a:fc:d6:
         c3:39:ab:28:83:fa:92:a2:d9:ea:3b:1d:66:b7:c1:1b:ad:77:
         00:fa:96:ed:95:be:c9:ba:77:d1:8e:7b:97:47:d7:c5:65:36:
         27:5d:e8:b2:0f:f9:c1:c9:39:bc:fe:14:a4:07:75:c1:7a:8f:
         d2:96:5d:51:1b:66:8f:46:84:d0:f7:87:10:23:54:49:58:db:
         51:3d:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:56 2023 by rpki-client on console-fra.rpki-client.org