Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa
File:                     3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (raw, json)
Hash identifier:          J0BpXfywpSqWfNu05AUI65n9vdBi4tczur4r38nfGVE=
Subject key identifier:   97:1F:A2:63:77:3D:B0:88:AD:F8:1B:49:3B:21:40:86:E9:4F:B1:EF
Certificate issuer:       /CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
Certificate serial:       649F4212CB6E0C694497801043CD9F3D42574CBA
Authority key identifier: 00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa
Signing time:             Fri 16 Jun 2023 16:21:20 +0000
ROA not before:           Fri 16 Jun 2023 16:16:20 +0000
ROA not after:            Fri 14 Jun 2024 16:21:20 +0000
asID:                     263043
IP address blocks:        138.121.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9f:42:12:cb:6e:0c:69:44:97:80:10:43:cd:9f:3d:42:57:4c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307
        Validity
            Not Before: Jun 16 16:16:20 2023 GMT
            Not After : Jun 14 16:21:20 2024 GMT
        Subject: CN=971FA263773DB088ADF81B493B214086E94FB1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:7b:25:2f:84:10:1a:d7:9f:fd:a7:d3:a2:
                    39:e8:db:ca:ee:fa:4d:83:41:30:56:21:08:74:f1:
                    0b:2a:ef:93:91:23:0d:87:d5:7c:94:c0:71:4c:85:
                    b8:9a:75:c3:ba:88:7f:49:e2:df:20:ef:f3:39:fe:
                    a5:24:fa:0a:0f:e9:61:db:a5:ca:72:d3:5e:4a:00:
                    49:9a:5e:cb:f9:90:df:6f:5d:7c:ff:06:11:77:26:
                    42:56:e1:6c:89:8f:b8:b1:66:6d:b9:ca:98:0b:47:
                    fd:cd:67:fc:4c:bb:da:7e:a3:91:8a:2c:be:5d:b5:
                    28:e2:bf:61:90:c3:76:13:82:df:27:79:e2:9c:da:
                    e5:d6:16:48:9c:ab:b9:0d:a7:07:ce:b6:f1:89:7d:
                    3c:c7:bf:ba:c2:d5:a1:07:27:c5:15:dc:62:cf:43:
                    82:33:13:1f:bb:a3:3a:e7:c3:1a:5f:9f:c7:45:f1:
                    53:89:cc:16:d6:4f:8a:b9:3e:df:09:59:63:19:d7:
                    37:fd:8c:cd:85:cd:d7:7e:ac:bd:71:d7:37:37:15:
                    1e:97:a2:be:49:5e:66:a4:b0:79:0d:43:06:6c:2d:
                    37:ce:86:9f:d1:a5:e9:b0:ef:b2:9a:49:5e:68:e5:
                    d2:86:b7:b4:fd:4c:1a:7b:6d:45:01:da:60:2c:6d:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1F:A2:63:77:3D:B0:88:AD:F8:1B:49:3B:21:40:86:E9:4F:B1:EF
            X509v3 Authority Key Identifier:
                keyid:00:3A:B6:DC:6A:AD:8C:55:BD:30:8C:A1:AE:1E:E4:84:1E:9D:C3:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/003AB6DC6AAD8C55BD308CA1AE1EE4841E9DC307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/1/3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:16:ae:11:bd:6c:c1:6c:24:81:39:43:22:36:3c:fb:91:b2:
         a9:d4:ec:9a:2d:4d:fe:e3:b2:bc:86:7d:8d:04:23:0c:d3:bf:
         dc:3e:96:3f:1d:0c:b1:35:51:7c:5b:23:b0:da:ef:c8:24:72:
         3e:00:96:70:19:3f:db:81:4f:ec:f2:b5:e9:b1:7b:6a:d2:23:
         48:02:c6:02:6c:5b:d8:ec:58:ee:96:f2:87:a1:a8:0d:2b:e8:
         9a:b8:e6:21:85:45:c2:09:26:e9:f4:75:88:19:9c:dc:f6:2e:
         42:4b:c5:20:bd:33:10:d6:68:60:3e:0d:7a:29:1f:f9:2a:18:
         2b:31:d8:c8:06:d6:6d:a2:ef:a0:a2:6a:b8:cd:e5:81:0b:15:
         e3:a1:32:7b:ef:f8:3d:91:d2:9f:c6:cf:99:4a:7b:fd:05:c7:
         c6:0a:c8:a3:4d:ff:bc:b7:c0:09:7f:be:e1:3e:75:05:7b:08:
         04:05:a3:46:00:9a:79:80:08:71:e8:4d:d4:f1:41:d8:6d:b5:
         6e:8f:78:af:9c:0e:a7:53:a0:22:c6:be:4e:a9:22:a8:32:a1:
         b7:3b:d0:db:61:24:69:3a:1d:3d:2f:4c:b7:75:39:18:ad:33:
         83:f8:6c:1e:be:a1:76:06:7c:12:6f:34:40:08:3d:87:56:34:
         1b:ab:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org