Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa
File:                     3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa (raw, json)
Hash identifier:          qfs2V47z4VvzX9Zu9E01rt4xBgeMVhbVBrkmX3fVVII=
Subject key identifier:   A6:3F:53:87:8C:65:7A:B0:A7:50:D7:0E:7F:4E:16:AD:00:5B:95:2E
Certificate issuer:       /CN=E20FFC18759781BEE5144ABD5D96B368D0C4576A
Certificate serial:       01ACA15B48D06CABB71C8CDC3E8D1F4AC0278502
Authority key identifier: E2:0F:FC:18:75:97:81:BE:E5:14:4A:BD:5D:96:B3:68:D0:C4:57:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa
Signing time:             Fri 15 Sep 2023 14:00:00 +0000
ROA not before:           Fri 15 Sep 2023 13:55:00 +0000
ROA not after:            Fri 13 Sep 2024 14:00:00 +0000
asID:                     52996
IP address blocks:        138.117.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:a1:5b:48:d0:6c:ab:b7:1c:8c:dc:3e:8d:1f:4a:c0:27:85:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20FFC18759781BEE5144ABD5D96B368D0C4576A
        Validity
            Not Before: Sep 15 13:55:00 2023 GMT
            Not After : Sep 13 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100B281230EAC506294B73A2292FB52E97BBF4DD4BE2AE804AAA6F8FF444AD66ECEBB7445A2B32E01F965CFCC0AA2239FD144DEB16BC9F5CED61D36008A59E47D6C25EC72FBAB8D74DADCB4E18D0380094C769EA126F0184E5D9438AF24864BBCB3C2D58BF10C833A4285BE929387D8190D936947309E681F362B1A9C528FE327A4BAAE78BFA5A8C42A10D94FB7417CF43F28F3EA32A79C265EB72B7097785D20F9AC20A0DAC1298DC93EDECC8726904A88E8D055B227FE29DB15E3D6C2A7492B3B3DA677A1BA589D093D646ACCC485BCE8D2783116904C4631A5A0455F063B7F4ED7C4163BE21D9014BF9BDE0015FE6238C79F0C5A17B61B331EB933529AB3F7AF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:23:0e:ac:50:62:94:b7:3a:22:92:fb:52:
                    e9:7b:bf:4d:d4:be:2a:e8:04:aa:a6:f8:ff:44:4a:
                    d6:6e:ce:bb:74:45:a2:b3:2e:01:f9:65:cf:cc:0a:
                    a2:23:9f:d1:44:de:b1:6b:c9:f5:ce:d6:1d:36:00:
                    8a:59:e4:7d:6c:25:ec:72:fb:ab:8d:74:da:dc:b4:
                    e1:8d:03:80:09:4c:76:9e:a1:26:f0:18:4e:5d:94:
                    38:af:24:86:4b:bc:b3:c2:d5:8b:f1:0c:83:3a:42:
                    85:be:92:93:87:d8:19:0d:93:69:47:30:9e:68:1f:
                    36:2b:1a:9c:52:8f:e3:27:a4:ba:ae:78:bf:a5:a8:
                    c4:2a:10:d9:4f:b7:41:7c:f4:3f:28:f3:ea:32:a7:
                    9c:26:5e:b7:2b:70:97:78:5d:20:f9:ac:20:a0:da:
                    c1:29:8d:c9:3e:de:cc:87:26:90:4a:88:e8:d0:55:
                    b2:27:fe:29:db:15:e3:d6:c2:a7:49:2b:3b:3d:a6:
                    77:a1:ba:58:9d:09:3d:64:6a:cc:c4:85:bc:e8:d2:
                    78:31:16:90:4c:46:31:a5:a0:45:5f:06:3b:7f:4e:
                    d7:c4:16:3b:e2:1d:90:14:bf:9b:de:00:15:fe:62:
                    38:c7:9f:0c:5a:17:b6:1b:33:1e:b9:33:52:9a:b3:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3F:53:87:8C:65:7A:B0:A7:50:D7:0E:7F:4E:16:AD:00:5B:95:2E
            X509v3 Authority Key Identifier:
                keyid:E2:0F:FC:18:75:97:81:BE:E5:14:4A:BD:5D:96:B3:68:D0:C4:57:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20FFC18759781BEE5144ABD5D96B368D0C4576A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/0/3133382e3131372e3130342e302f32322d3232203d3e203532393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:bf:c0:cc:b5:73:c8:dd:c7:28:c0:a7:0d:1e:d9:a2:b2:
         3e:d5:2d:ef:f9:00:80:5b:b2:98:94:f8:de:cc:54:97:ff:29:
         d0:04:c2:e3:5c:32:3f:40:f7:f5:46:2e:f1:82:21:28:13:69:
         d1:bb:96:88:f4:56:62:1b:f2:94:12:fa:6f:c3:28:fe:88:ee:
         f6:f5:8c:07:81:7b:2f:a2:04:3c:bb:5b:53:cc:c0:39:76:f8:
         ef:49:82:8c:b3:79:82:23:2d:1b:ec:6b:f0:e6:f1:a8:67:b5:
         aa:94:c9:c6:6d:77:fc:08:df:0e:77:fe:14:93:17:08:90:0f:
         49:81:98:9d:b7:97:52:58:f8:c2:a3:c2:7a:4e:96:e6:d2:59:
         da:9e:a6:a9:f8:ff:dc:b5:ad:08:7d:41:1b:3c:90:33:2d:11:
         a6:19:16:d1:67:15:b4:e9:68:d9:d8:46:bb:56:5c:04:df:cd:
         ec:d6:27:19:0f:f6:8a:7f:92:b5:d5:be:38:da:d6:91:21:a8:
         9b:0a:55:65:e5:4a:09:b7:ed:0d:7f:ea:7b:49:d2:f8:b9:59:
         e1:a6:e3:5e:74:4f:32:10:f7:07:d8:a0:da:bc:52:c9:48:d8:
         16:7b:78:60:30:9d:c7:89:4b:2c:b1:e0:e3:0b:ad:c3:00:52:
         77:c8:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org