Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa
File:                     3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa (raw, json)
Hash identifier:          hYcHL2sBs+kQOcJX6Ar/t0ubBKLW9hfUTn8XiSqh2nU=
Subject key identifier:   BA:BA:EC:7A:67:BD:08:29:4E:B5:E0:B4:A4:AE:A8:73:6D:AE:85:33
Certificate issuer:       /CN=68B79D737297088228371E4509382F36484FD924
Certificate serial:       43242390C520CF720282A4663128A40882DD2E2F
Authority key identifier: 68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa
Signing time:             Wed 02 Aug 2023 19:29:04 +0000
ROA not before:           Wed 02 Aug 2023 19:24:04 +0000
ROA not after:            Wed 31 Jul 2024 19:29:04 +0000
asID:                     52721
IP address blocks:        138.185.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:24:23:90:c5:20:cf:72:02:82:a4:66:31:28:a4:08:82:dd:2e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B79D737297088228371E4509382F36484FD924
        Validity
            Not Before: Aug  2 19:24:04 2023 GMT
            Not After : Jul 31 19:29:04 2024 GMT
        Subject: CN=BABAEC7A67BD08294EB5E0B4A4AEA8736DAE8533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:a3:5d:a4:b6:8f:0d:d7:48:10:4a:0b:36:
                    d5:d0:28:4a:65:dd:51:07:a6:d0:a4:84:72:00:02:
                    ee:ce:3c:f7:57:93:b5:f7:5e:0b:91:76:78:0d:87:
                    b4:f8:d7:55:22:22:9e:c8:d5:1a:de:01:a1:d5:f5:
                    e1:b0:e3:31:5f:bf:68:4d:38:bd:90:ad:05:14:9f:
                    1e:a1:be:e0:ac:88:fc:a7:21:a5:fc:52:9e:ef:84:
                    77:7b:4e:be:16:47:dc:99:c4:f1:b2:0d:4d:8e:23:
                    32:f6:41:02:f2:d3:7f:11:e5:57:eb:10:a8:25:ea:
                    4d:ff:18:97:65:5e:8f:92:9d:9a:ed:ad:db:9d:09:
                    5b:9e:ee:b0:64:4c:f1:4d:d2:11:10:14:d3:a8:6f:
                    32:ad:06:aa:a1:e3:6a:88:ab:f0:67:cb:b2:9b:d4:
                    91:81:2f:ed:9f:43:81:4c:c3:4c:e3:7b:79:67:0c:
                    3c:fc:f9:54:0b:b1:e7:bc:9b:ec:f4:d2:89:b4:d5:
                    a8:48:be:50:d3:24:e6:f1:34:39:45:52:c5:0d:b6:
                    ec:d6:28:ab:42:8b:b7:d9:54:8e:ad:94:9d:cd:3f:
                    5a:d4:34:3e:3d:f4:e6:e6:f8:f4:00:6a:0c:2d:04:
                    a6:c1:de:a3:39:b0:68:0c:61:fc:35:9c:9a:44:2b:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:EC:7A:67:BD:08:29:4E:B5:E0:B4:A4:AE:A8:73:6D:AE:85:33
            X509v3 Authority Key Identifier:
                keyid:68:B7:9D:73:72:97:08:82:28:37:1E:45:09:38:2F:36:48:4F:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/68B79D737297088228371E4509382F36484FD924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68B79D737297088228371E4509382F36484FD924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/1/3133382e3138352e3130382e302f32322d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:82:2d:50:07:fe:9f:a7:3a:06:b8:aa:5c:6c:e9:17:3b:29:
         86:4c:f3:68:3a:19:29:1b:4e:98:a3:cc:9d:c4:07:31:aa:93:
         7c:7b:9f:d0:9e:15:a9:b0:c1:42:e0:6c:d7:93:35:f3:eb:74:
         f0:aa:20:67:88:be:90:a7:55:ed:b2:38:3e:59:61:76:5b:68:
         71:c8:12:b8:29:52:3c:37:7e:7e:96:8a:84:ad:0d:7a:de:a1:
         8d:9d:e1:36:fb:b5:e9:8e:4c:bc:1b:38:33:ea:13:47:fd:c7:
         46:b1:d1:5c:42:68:8f:5c:6a:6f:72:e2:22:b6:2a:4f:36:32:
         f2:53:e1:27:32:67:fb:b9:c1:92:33:2f:9d:26:f6:51:95:46:
         78:1d:ad:4b:b0:ac:66:ea:fc:c7:21:3a:a4:02:55:9b:62:c7:
         e4:19:fb:4e:75:c5:b7:05:d6:25:a7:dd:0b:1d:61:ac:0a:1d:
         b7:a3:0a:66:ea:a9:58:9c:8e:6e:de:8b:11:b2:61:77:ab:18:
         b5:b3:49:6d:7a:39:9c:4b:33:51:a1:f3:ce:d7:87:46:cf:02:
         6f:dc:d8:c7:98:58:c2:fa:6f:c4:37:ce:ae:5e:31:33:7c:8a:
         b4:b4:fb:c2:0e:39:c9:88:01:1d:19:eb:bd:47:2c:f8:a7:70:
         84:36:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org