Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203238323630.roa
File:                     3133382e3235352e3134302e302f32322d3332203d3e203238323630.roa (raw, json)
Hash identifier:          2PBhVQnDxMNyAhdDAG3m26fDP4aS7qBlv7Q/VEsC6cQ=
Subject key identifier:   D8:46:06:09:0C:52:4E:AA:7B:37:0B:5B:23:1D:70:5B:D0:3D:40:8D
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       193210FA9442233154AF60C8861D2BADE877D620
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203238323630.roa
Signing time:             Sat 11 Mar 2023 01:20:24 +0000
ROA not before:           Sat 11 Mar 2023 01:15:24 +0000
ROA not after:            Sat 09 Mar 2024 01:20:24 +0000
asID:                     28260
IP address blocks:        138.255.140.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:32:10:fa:94:42:23:31:54:af:60:c8:86:1d:2b:ad:e8:77:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 01:15:24 2023 GMT
            Not After : Mar  9 01:20:24 2024 GMT
        Subject: CN=D84606090C524EAA7B370B5B231D705BD03D408D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:63:4a:4b:5d:b5:da:83:de:6d:01:a7:cf:
                    de:91:55:b0:a8:74:2a:b0:35:75:ca:dd:6b:11:2f:
                    ba:e8:d5:74:af:69:5b:27:3a:83:50:2b:43:10:76:
                    b3:a0:cf:0c:7e:b1:28:07:b7:05:ee:29:d1:14:8a:
                    06:f8:6d:12:78:28:df:fb:5f:fe:44:09:96:9c:dc:
                    f7:83:61:4b:b2:01:10:64:68:b0:63:f8:7f:aa:08:
                    56:92:cf:af:a1:9c:73:1b:57:72:4b:fb:f9:04:ce:
                    6c:ba:c4:cd:a5:ed:92:1e:9b:02:96:54:d0:d8:ab:
                    71:b6:75:6f:d9:e2:f1:91:2f:41:a7:42:48:fe:e3:
                    bc:ac:1d:b0:12:e3:79:96:27:d6:6a:fe:07:74:c4:
                    aa:fa:b9:93:af:f3:7b:4d:a7:04:c4:d2:43:62:ad:
                    95:27:70:9a:53:18:ea:09:d5:97:c1:90:12:8f:46:
                    01:00:00:f1:88:00:ef:46:ea:64:a8:ee:a0:e8:df:
                    98:28:97:6f:2d:c4:02:2d:83:34:08:01:5b:d1:29:
                    d5:b1:be:05:4c:11:74:06:4d:f9:f3:4d:fe:61:ed:
                    7d:90:c0:ef:7b:f7:de:84:1d:e2:4b:f9:22:b2:87:
                    d5:51:2c:03:88:3b:8f:ee:ba:5f:42:ee:d7:05:f9:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:06:09:0C:52:4E:AA:7B:37:0B:5B:23:1D:70:5B:D0:3D:40:8D
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3332203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:70:0f:58:8e:d2:2b:b2:16:bb:0e:5e:bf:e7:58:13:66:
         73:4e:94:82:83:28:ea:31:ba:aa:c7:2a:c5:48:0d:9a:33:df:
         b1:45:1b:08:9a:75:06:1f:2f:33:6b:f2:ca:e5:5b:72:f8:ac:
         97:82:2b:11:df:0e:37:75:a2:7b:ca:70:01:e6:17:d3:6f:52:
         95:ea:ef:e6:a6:e9:88:7c:32:92:82:23:d1:fa:4b:af:23:b9:
         44:7d:5c:13:13:80:5e:5a:71:d0:25:03:92:cc:29:3f:8f:87:
         20:86:52:56:f2:2f:f3:5e:9f:5b:bf:bd:65:35:a3:e2:87:0e:
         b0:67:21:02:0b:c1:a1:2e:62:71:9b:e8:5e:f7:e3:01:65:a6:
         81:eb:3b:cf:93:9a:16:5b:b7:7e:cc:7a:74:27:52:03:ec:8c:
         12:10:6f:55:50:63:fe:05:fa:4a:0b:ac:64:0e:5d:9d:d5:2d:
         5a:10:da:41:a5:fc:12:5c:7f:ff:6a:80:5d:43:b5:84:eb:cb:
         a5:fe:37:7d:5d:1c:b2:77:2f:ff:b2:2a:72:da:fd:18:e6:c3:
         26:7e:24:fc:7b:93:67:33:db:11:5d:26:26:93:21:e1:b4:4e:
         bf:5f:20:96:3c:b2:27:39:cc:4f:98:23:37:9a:68:82:44:37:
         d2:8f:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org