Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203533303539.roa
File:                     3133382e302e3130302e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          MNgucP0kxI5aLwkjAUyDGXKKXCFT4X8/2bP2//jKyZE=
Subject key identifier:   F2:E6:BE:E4:C2:47:8D:CE:E0:78:FD:8B:87:D5:4B:05:32:E7:95:35
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       7FD4CBB877B7FD7F67EA44565E93B59B3270C2DF
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:04 +0000
ROA not before:           Fri 03 Mar 2023 12:13:04 +0000
ROA not after:            Fri 01 Mar 2024 12:18:04 +0000
asID:                     53059
IP address blocks:        138.0.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d4:cb:b8:77:b7:fd:7f:67:ea:44:56:5e:93:b5:9b:32:70:c2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:04 2023 GMT
            Not After : Mar  1 12:18:04 2024 GMT
        Subject: CN=F2E6BEE4C2478DCEE078FD8B87D54B0532E79535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:5e:97:eb:95:44:e7:a8:3b:b4:30:9b:e5:
                    0d:bb:89:be:de:14:13:f4:3d:a0:77:82:fc:7b:74:
                    b3:62:7c:57:fe:20:aa:c0:3a:74:76:67:9f:10:ec:
                    d4:cc:e6:1b:b1:45:ba:5a:6f:6f:e2:ff:cc:b9:c4:
                    6b:fc:7f:ab:4e:cf:ea:90:91:cb:2b:44:76:13:22:
                    8c:fe:c8:32:5b:f3:3e:04:75:4e:0c:4e:f5:b6:e6:
                    9f:27:57:08:0c:6a:02:f8:9c:2c:07:31:fe:26:2d:
                    fa:62:c7:b2:06:84:29:9e:48:28:fa:67:8d:77:a0:
                    f9:77:6a:d5:09:38:f0:2a:34:c9:a8:88:5d:ee:8c:
                    2d:46:db:f2:cc:17:00:c3:13:ba:d4:23:8f:44:c5:
                    7b:5f:9e:08:e4:d5:79:d0:96:f7:75:b6:28:70:e6:
                    34:a3:bd:33:14:61:52:2a:e6:90:53:4f:0d:ae:88:
                    8e:a2:04:b9:f8:ed:ae:0d:5b:eb:51:38:0d:92:8a:
                    27:ff:3e:84:46:75:3b:55:d3:c6:08:23:47:62:f1:
                    3e:66:99:01:9b:f7:d6:b6:b3:1f:c2:a8:66:2a:0e:
                    a7:ff:71:ca:10:ea:93:c3:04:c7:0e:1d:a5:b3:fa:
                    2a:b4:54:18:c9:2b:6a:ec:6f:16:39:2c:78:2b:ad:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E6:BE:E4:C2:47:8D:CE:E0:78:FD:8B:87:D5:4B:05:32:E7:95:35
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3133382e302e3130302e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:d8:7b:f4:3f:56:ec:c4:97:b0:b8:c9:93:8e:30:78:b0:
         83:0d:64:07:5f:4f:29:32:77:5d:f2:b6:8b:92:40:0f:f9:3d:
         22:3d:67:6c:0a:9a:01:b3:69:c8:a8:20:b4:f1:1a:4e:c6:50:
         df:a7:79:c3:24:6d:2d:34:e3:0d:9a:62:ac:4a:ba:9c:2e:39:
         23:db:71:15:c6:0c:1b:02:46:07:3c:f5:b8:95:d2:b4:ed:6a:
         7a:02:c7:4b:1b:54:94:46:72:ae:d1:67:d3:fd:51:a7:a1:c3:
         67:86:2c:4b:b7:e2:d2:37:de:10:77:ed:dc:52:99:e0:a4:ea:
         f8:2c:2f:a2:9f:48:6e:2a:70:94:5e:ba:08:81:5f:f6:48:fc:
         23:52:9b:4f:c0:cc:cf:34:b6:3e:26:cf:86:75:d6:0b:e5:7f:
         87:f7:ed:5d:fc:e8:15:62:10:06:c4:bb:ad:bf:66:7a:cc:fa:
         ba:7a:a3:e7:15:df:92:4d:23:2c:0d:19:48:04:f8:cb:85:be:
         9c:0a:60:50:91:e7:b0:6f:e6:ec:f9:9c:f7:f7:4a:15:39:d0:
         78:63:92:83:6a:9a:0b:98:5a:e6:22:9f:83:02:f0:0f:08:76:
         00:c5:1c:4c:5d:a2:df:7a:36:24:f5:0a:dc:41:a9:ab:46:06:
         a4:2f:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org