Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
File:                     3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (raw, json)
Hash identifier:          Y9SDvt91fUW4LfjHPKKQ57kNvg8BMY0oQYYpSTmIXxw=
Subject key identifier:   87:26:8D:52:A0:5E:DF:40:9D:6A:5D:1F:5E:F0:A5:92:5B:5F:E7:55
Certificate issuer:       /CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
Certificate serial:       36A91032A4009796DE2A9F7CABC67B1221EB1E1C
Authority key identifier: C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
Signing time:             Fri 15 Sep 2023 15:11:21 +0000
ROA not before:           Fri 15 Sep 2023 15:06:21 +0000
ROA not after:            Fri 13 Sep 2024 15:11:21 +0000
asID:                     264278
IP address blocks:        138.121.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a9:10:32:a4:00:97:96:de:2a:9f:7c:ab:c6:7b:12:21:eb:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
        Validity
            Not Before: Sep 15 15:06:21 2023 GMT
            Not After : Sep 13 15:11:21 2024 GMT
        Subject: CN=87268D52A05EDF409D6A5D1F5EF0A5925B5FE755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:53:c6:0c:a0:fd:6e:1e:81:be:11:dc:af:
                    7d:03:58:7f:a8:c7:90:6f:4f:91:74:3e:a6:ab:fe:
                    e9:15:4f:82:28:98:dc:15:d3:dc:eb:29:6f:14:46:
                    e4:85:5f:8c:02:6c:78:a2:7b:6e:0d:91:1d:35:68:
                    e6:e8:12:64:77:7a:f3:98:0f:5b:03:e9:b1:62:8c:
                    a4:df:d2:d9:0e:40:20:1f:ea:12:f7:ee:43:8a:7c:
                    73:48:d8:de:9f:40:ad:35:a0:d0:8f:f0:d2:a6:e5:
                    86:cf:c4:bb:e1:53:50:b7:42:09:29:d0:f8:1a:1c:
                    ce:e2:5d:f3:9f:fa:ad:58:6d:5d:45:60:f5:38:98:
                    69:1f:21:fe:ad:34:a3:61:07:57:41:d8:1f:1d:a8:
                    33:5b:6e:5d:c4:4e:ec:a5:07:51:bd:5a:61:9c:20:
                    18:54:06:df:29:dd:e3:40:c0:be:82:7a:6f:48:ab:
                    0d:97:2e:8c:80:07:73:cb:29:cc:d1:1b:fa:b9:de:
                    44:4c:7d:5f:9b:49:df:bb:6c:21:4f:94:1d:c4:57:
                    91:b4:f5:76:96:7b:35:e8:67:3e:c6:4a:df:f6:c7:
                    f9:53:56:2b:a1:87:17:50:aa:d3:74:a5:58:6c:33:
                    9f:d6:93:bb:43:a6:a9:b9:c3:c2:9a:c9:7a:84:57:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:8D:52:A0:5E:DF:40:9D:6A:5D:1F:5E:F0:A5:92:5B:5F:E7:55
            X509v3 Authority Key Identifier:
                keyid:C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:58:6f:16:fb:18:6f:e8:fd:19:b1:f8:a0:71:51:c3:1a:
         b5:bb:ba:4c:5f:a2:21:ad:81:b8:0a:4e:c1:cf:74:db:82:1d:
         16:1e:45:62:ed:49:be:2a:58:3b:bf:c4:90:f3:ba:62:ae:08:
         45:cb:9e:ea:b9:78:68:b8:82:c1:c2:82:db:5c:2f:4a:10:44:
         41:fe:e9:28:17:36:25:3b:5a:42:6c:68:9c:c0:3e:21:b7:9a:
         57:9f:c8:b3:d4:ac:f7:a3:69:9d:ad:7a:80:cb:2d:d3:50:1b:
         31:b1:54:66:0c:5a:b5:86:52:c7:d8:1d:84:12:be:4f:87:d1:
         af:9d:f8:b0:53:da:24:3a:79:3c:4d:c5:28:23:9f:c2:57:e9:
         c5:70:8b:e0:0f:02:ec:1c:e3:a8:58:7f:a1:45:3a:4a:01:69:
         93:3b:5e:04:9a:10:09:c8:fc:8c:30:7a:fc:71:6c:55:11:bb:
         8f:41:7f:ca:cf:fe:6a:74:55:a2:91:02:15:17:37:d4:cd:ea:
         2f:7f:ad:7c:2d:98:c2:73:6c:b5:e6:06:e3:af:1f:74:20:ff:
         5b:76:ed:a6:92:d2:6a:f4:f4:ce:2d:a5:ac:12:de:bb:4a:21:
         76:7a:23:89:b9:2a:c1:57:cd:50:1b:1d:1d:98:ac:5f:21:f4:
         79:52:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org