Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233352e302f32342d3234203d3e203631363936.roa
File:                     3133382e33362e3233352e302f32342d3234203d3e203631363936.roa (raw, json)
Hash identifier:          hFvPMz9vJMtve4M7Tdww9BzT7X7ZAeU6OUkHeDQMF5w=
Subject key identifier:   0E:E6:23:97:F6:9D:03:3C:EE:50:EC:77:F0:32:02:4A:6E:A3:A0:BB
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       125E7D6C2371B7CC7F081698D88B4A406D9EF4EA
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233352e302f32342d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:23 +0000
ROA not before:           Fri 06 Oct 2023 19:42:23 +0000
ROA not after:            Fri 04 Oct 2024 19:47:23 +0000
asID:                     61696
IP address blocks:        138.36.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5e:7d:6c:23:71:b7:cc:7f:08:16:98:d8:8b:4a:40:6d:9e:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:23 2023 GMT
            Not After : Oct  4 19:47:23 2024 GMT
        Subject: CN=0EE62397F69D033CEE50EC77F032024A6EA3A0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:33:2c:4e:64:63:63:de:fb:a5:12:8c:6e:
                    9c:aa:c1:54:ad:7d:19:6d:40:c2:a3:63:59:d1:eb:
                    12:10:90:05:92:60:70:8e:c9:94:11:33:ee:bd:da:
                    8b:88:24:27:f8:e0:49:55:b4:ce:4b:7b:98:f6:c5:
                    3f:13:bb:18:75:5a:f9:87:56:3c:e4:af:9c:c9:48:
                    e9:ea:68:1d:60:5c:be:a1:b2:13:2e:4e:7b:0a:45:
                    c6:fb:72:73:81:67:0c:f9:cb:b0:4d:f0:75:d5:87:
                    0d:44:65:7a:14:26:de:77:91:f5:de:20:7e:55:72:
                    95:54:e8:a2:08:88:ea:a9:00:63:30:2c:7b:d0:b5:
                    62:ed:c1:2c:e1:87:c0:1b:53:36:6b:55:48:0a:28:
                    09:a9:be:4b:14:0d:cc:0f:b6:1d:e0:00:b6:52:90:
                    70:a7:bc:a9:98:b2:97:3c:98:4d:09:22:30:35:c9:
                    eb:61:86:b4:b3:56:a0:c1:fc:e0:92:7e:70:31:17:
                    b2:ad:c2:79:48:b2:ab:b8:1d:4a:24:f3:7e:a8:4e:
                    88:6b:cd:50:78:76:79:a8:ab:57:4d:15:7e:cb:68:
                    04:65:58:e8:b3:80:ad:6b:4e:5c:20:d7:da:a9:7e:
                    81:72:9f:d8:d6:ba:d7:00:24:b4:e4:3f:c5:f8:ed:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E6:23:97:F6:9D:03:3C:EE:50:EC:77:F0:32:02:4A:6E:A3:A0:BB
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3133382e33362e3233352e302f32342d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:43:88:fd:af:55:9e:e1:dd:fe:43:1c:2b:5b:a9:dc:8c:
         8d:e6:e7:bb:9c:aa:71:c1:c0:44:ab:7c:a3:78:78:3c:4a:72:
         95:18:bf:bd:a2:1e:f0:d7:e0:ca:95:95:5d:3e:c1:04:24:ad:
         b2:93:ae:0c:dc:33:94:cf:45:1e:9c:ea:f1:f1:dd:6b:bf:83:
         1e:6e:3b:e5:85:ca:ea:41:b1:88:3e:4a:85:d1:25:d7:af:13:
         0f:d4:66:b4:77:57:aa:06:0d:8c:90:ad:35:3b:46:11:9f:4d:
         bd:3d:60:51:dc:9f:a1:79:3c:c2:0b:e6:e1:2b:87:e5:b7:a9:
         a3:69:55:35:8d:ac:a3:97:ca:5f:d5:3c:04:83:17:b6:c6:77:
         9c:73:89:30:1f:77:1b:15:7f:c8:2c:56:2f:95:3e:c1:46:06:
         46:1b:fc:ae:9e:1f:71:87:24:83:75:38:7d:b8:37:f9:8c:12:
         30:5a:d6:9e:bb:fb:b0:47:0b:f6:ef:75:f6:37:b3:0b:60:55:
         2d:66:a4:d1:e5:e3:68:ca:41:c0:b6:30:6a:4f:c8:17:64:87:
         4a:0d:ff:85:0f:74:06:29:06:9a:be:bf:4e:97:ec:d4:00:94:
         dd:6e:93:a9:d2:5d:ef:79:8b:a0:15:c7:a3:e1:d5:a4:6e:8a:
         62:d7:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org