Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa
File:                     3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa (raw, json)
Hash identifier:          uWC/KFkoBuoI6fSYBWqOQbSX1dhDPjcWNDfOGNVZ55M=
Subject key identifier:   FF:F8:AA:3A:5A:95:01:7C:5C:AF:58:02:A0:17:82:DC:C2:8A:39:21
Certificate issuer:       /CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Certificate serial:       1679D038637A9ACD800B02C2C32ADF48F5C8E79C
Authority key identifier: CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa
Signing time:             Sat 30 Mar 2024 00:46:21 +0000
ROA not before:           Sat 30 Mar 2024 00:41:21 +0000
ROA not after:            Sat 29 Mar 2025 00:46:21 +0000
asID:                     264269
IP address blocks:        138.118.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:79:d0:38:63:7a:9a:cd:80:0b:02:c2:c3:2a:df:48:f5:c8:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC5082E3270948C4997CD8918CABFFD0682335
        Validity
            Not Before: Mar 30 00:41:21 2024 GMT
            Not After : Mar 29 00:46:21 2025 GMT
        Subject: CN=FFF8AA3A5A95017C5CAF5802A01782DCC28A3921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:26:4e:ae:bf:87:df:50:5b:86:35:d8:90:
                    da:19:c5:5c:67:30:ed:83:f1:1c:ff:f9:05:36:b0:
                    0a:bd:34:2e:a3:1c:34:6f:1b:b9:c2:44:df:be:d0:
                    69:36:61:fa:f6:55:7b:4e:7c:d3:c2:9b:00:0b:eb:
                    67:51:57:05:b7:3b:af:ec:cd:57:7f:73:02:34:40:
                    22:fa:1e:b6:c8:bb:71:1a:94:3f:2b:1e:b9:91:cc:
                    78:16:3e:5b:33:78:49:66:f4:22:a2:02:ea:10:86:
                    85:93:ca:4e:69:ad:ae:67:96:52:26:73:06:cb:ce:
                    01:1c:ea:4c:5d:64:9e:f0:ae:9d:fb:0f:7b:c2:ee:
                    d6:4a:3d:69:51:1c:e5:a6:58:0c:fb:81:b6:6b:45:
                    5e:1a:73:71:f3:0c:ab:40:6d:ea:15:98:c7:d6:f4:
                    99:62:8c:e3:53:6d:62:23:e9:71:c2:c0:31:77:a3:
                    3d:81:b2:ab:e3:d5:d7:0a:30:a7:4c:0a:31:cc:e1:
                    af:79:c9:af:76:2e:fb:61:1e:50:20:4b:76:b0:48:
                    a1:6e:a2:63:50:7f:fa:7e:e8:6f:29:dc:55:2e:e6:
                    53:32:ed:b7:63:09:28:6b:09:b1:53:60:8d:86:f8:
                    25:ea:71:26:32:d0:65:16:06:7d:1f:36:85:09:73:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:AA:3A:5A:95:01:7C:5C:AF:58:02:A0:17:82:DC:C2:8A:39:21
            X509v3 Authority Key Identifier:
                keyid:CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32322d3232203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:0e:75:89:f2:15:19:0d:06:78:b3:4e:9f:61:75:42:4c:
         9e:c9:1f:3d:e4:0c:92:c0:2e:a6:08:a9:7a:98:dc:49:46:ea:
         b7:b8:0a:77:a8:2b:5b:04:06:98:80:b3:36:09:f5:82:a3:d3:
         10:a2:b1:20:93:d8:6e:a5:80:5e:26:87:05:6a:e3:de:51:2e:
         8f:6f:fe:e5:9a:6c:bf:83:5d:fd:51:40:7b:7c:19:f5:f8:84:
         4c:24:76:a2:83:3a:46:8c:70:93:fa:2b:be:ae:76:83:58:03:
         ad:10:7d:7d:4d:ee:77:5d:67:86:b3:0c:0e:94:ac:14:ba:f6:
         93:85:bf:9c:62:12:91:66:c6:cf:f2:6d:4d:5f:0a:92:b1:db:
         25:8f:57:7f:3f:ca:a3:e7:d0:68:1b:d0:12:5a:88:67:d5:5e:
         37:5c:64:ed:0b:b4:d4:ea:8a:84:c8:bb:ac:6d:bc:cc:99:72:
         21:14:26:49:04:d2:93:6a:61:d8:d3:18:85:82:a7:08:d7:a0:
         15:44:69:f8:89:46:1a:17:35:cd:75:44:92:c8:04:f9:d2:4f:
         01:c0:9a:b6:70:c5:e2:f4:b4:6e:34:bf:05:81:1b:4a:dd:72:
         be:e5:93:c2:fb:90:d0:38:be:b7:f9:a0:f8:3f:50:02:f8:8d:
         3a:88:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org