Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32332d3233203d3e203631363936.roa
File:                     3133382e33362e3233322e302f32332d3233203d3e203631363936.roa (raw, json)
Hash identifier:          Ji/B3LDZGf0n2LYkEYJUPzZ1crpUZBEFvMXoizljrg8=
Subject key identifier:   1B:C2:3F:71:EA:D6:CD:AD:8B:A8:20:15:5F:42:73:77:92:7C:06:58
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       185414C1A57086A242D9F64534514D8584FDCDAB
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32332d3233203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:12 +0000
ROA not before:           Fri 06 Oct 2023 19:42:12 +0000
ROA not after:            Fri 04 Oct 2024 19:47:12 +0000
asID:                     61696
IP address blocks:        138.36.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:14:c1:a5:70:86:a2:42:d9:f6:45:34:51:4d:85:84:fd:cd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:12 2023 GMT
            Not After : Oct  4 19:47:12 2024 GMT
        Subject: CN=1BC23F71EAD6CDAD8BA820155F427377927C0658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:f0:65:66:d7:93:3c:69:bc:dc:76:46:aa:
                    bc:38:54:ed:4b:7d:36:94:2e:1e:a9:50:cf:d9:8e:
                    bb:b5:2c:81:22:f1:40:45:65:74:1d:d2:fd:5c:bb:
                    16:70:85:75:fd:a1:0b:b3:89:e3:d7:c0:db:ad:1f:
                    1b:28:03:a4:ee:81:b1:4c:f2:f5:63:a5:2f:36:92:
                    8d:8c:8f:50:29:aa:4b:b3:f0:6b:ab:4f:57:1b:c8:
                    7b:27:ba:6f:3e:7d:38:d4:b7:98:4c:c3:aa:dd:d8:
                    f2:ca:36:c0:3a:e5:11:a7:c4:84:82:1e:d0:ff:cb:
                    d1:25:ee:7f:67:92:d0:5f:0c:dd:89:6c:27:e7:f0:
                    ff:35:ab:50:48:7f:d7:09:01:5f:0c:05:64:ef:e3:
                    f2:43:3e:12:18:3f:aa:0a:de:20:c1:65:cf:f2:be:
                    31:0a:7a:29:1a:f1:f0:c5:83:b9:f3:08:58:24:45:
                    84:66:57:af:da:6a:45:61:67:f1:6f:6a:00:e2:2c:
                    40:3a:01:c2:41:9c:7f:7d:91:ce:ed:ad:be:31:00:
                    27:17:45:8e:02:1d:99:9b:a6:59:81:75:27:61:d7:
                    a4:5f:37:a5:a1:25:cc:5b:d4:81:ba:72:c0:d1:c6:
                    3a:d2:2b:11:d2:ab:02:d2:80:91:a2:4b:f9:58:59:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C2:3F:71:EA:D6:CD:AD:8B:A8:20:15:5F:42:73:77:92:7C:06:58
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233322e302f32332d3233203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:5e:51:20:0c:ef:a6:9e:77:23:7b:44:ee:92:44:cc:f6:
         43:3c:51:97:fc:7c:8a:fe:b5:f5:13:e3:1a:87:07:64:9a:f8:
         e1:04:48:96:5d:90:23:30:41:98:a4:5d:98:70:fb:55:9a:29:
         84:77:41:14:10:a3:42:12:4f:28:8e:f6:13:85:4b:c7:1c:33:
         3a:5d:f1:b7:e3:63:36:e7:cb:32:3f:d2:ba:56:32:09:d1:9c:
         4f:ec:51:91:af:df:b7:43:58:c5:8e:df:7b:98:f8:cd:12:44:
         9d:35:7c:34:21:db:59:61:82:c5:4a:e2:22:e2:91:12:5b:f7:
         05:b9:d0:de:35:e2:48:60:06:85:ad:dc:f4:a7:8b:e6:cd:3f:
         21:52:82:71:2d:54:70:19:96:a6:ea:e5:8e:a5:91:10:a8:cc:
         7d:db:18:5c:61:51:b9:48:e0:d8:47:89:c5:8d:d7:38:08:f2:
         0d:56:cd:9c:a5:30:2a:17:4d:3b:08:da:05:ae:a2:33:ae:f9:
         c2:e2:e9:55:4e:b5:8e:11:15:1b:73:f1:7c:c2:c8:ea:d9:a9:
         16:4b:c5:33:99:7c:42:a8:9f:2c:02:cf:82:0f:7c:f2:12:9e:
         ab:bb:9e:58:f2:34:46:20:1d:73:7d:8d:0a:de:8c:b7:af:d8:
         ce:2e:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org