Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa
File:                     3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (raw, json)
Hash identifier:          YIV7tNrXRLB6A7UTtPNGKzd9cmxrJcAOkQA2B4/8GQw=
Subject key identifier:   BA:59:4E:5D:81:E8:FC:97:87:33:D4:BE:C6:C4:A0:9C:9E:4F:CA:FA
Certificate issuer:       /CN=38A142BBA0A65C853D9555B68E29AAFFF43DC2E5
Certificate serial:       268F2BCA519065B7D146FCF57E4C231B326FD855
Authority key identifier: 38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa
Signing time:             Fri 27 Oct 2023 12:20:04 +0000
ROA not before:           Fri 27 Oct 2023 12:15:04 +0000
ROA not after:            Fri 25 Oct 2024 12:20:04 +0000
asID:                     61830
IP address blocks:        201.140.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8f:2b:ca:51:90:65:b7:d1:46:fc:f5:7e:4c:23:1b:32:6f:d8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A142BBA0A65C853D9555B68E29AAFFF43DC2E5
        Validity
            Not Before: Oct 27 12:15:04 2023 GMT
            Not After : Oct 25 12:20:04 2024 GMT
        Subject: CN=BA594E5D81E8FC978733D4BEC6C4A09C9E4FCAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:60:21:fd:59:2f:b5:7b:57:98:b5:03:2d:
                    e9:00:62:34:6c:a6:5d:33:7c:56:18:49:63:bf:48:
                    46:8d:8d:f0:f9:3a:03:d3:6f:05:1a:03:a5:78:c7:
                    3f:e6:62:b5:40:d8:81:6f:f7:4e:70:80:66:ca:75:
                    2e:55:df:ea:09:1e:75:9b:0f:68:a5:cf:87:0b:3c:
                    c2:03:24:7d:5e:2c:05:b3:d0:00:2d:3b:96:d1:ae:
                    7d:f6:8c:d8:11:e4:1f:ea:eb:b8:88:b7:e0:97:7d:
                    ad:52:eb:0c:42:d7:5d:30:c8:f5:a2:e6:3e:58:cf:
                    40:f2:03:21:e1:ba:49:cf:5f:f1:67:a7:8f:39:20:
                    0f:1b:f6:60:d6:70:e2:a2:33:ce:63:84:a8:e1:0a:
                    7f:b8:62:d1:6e:3b:7b:93:d4:25:09:52:cf:12:4c:
                    fd:03:4d:68:ac:2d:b5:98:4b:67:26:9b:0a:45:0d:
                    90:86:72:4b:47:04:0c:3f:79:43:1d:a1:eb:87:b5:
                    37:fd:10:5c:4e:90:86:89:5a:06:b8:87:04:ef:0f:
                    5d:6e:0a:57:c1:f6:ab:4d:b9:08:d0:3b:b1:48:fe:
                    01:6a:fd:b9:b7:09:74:7f:92:5e:fa:36:88:f8:ff:
                    f0:40:de:68:30:67:06:5d:f3:1d:c9:75:19:1c:97:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:4E:5D:81:E8:FC:97:87:33:D4:BE:C6:C4:A0:9C:9E:4F:CA:FA
            X509v3 Authority Key Identifier:
                keyid:38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:df:3a:79:f5:b1:eb:49:b8:48:f1:54:90:33:2d:3a:42:
         42:b7:c9:fd:e9:3f:f1:9a:f1:7f:76:9b:b9:60:70:77:fa:f9:
         30:2c:32:5c:48:2d:9e:07:fd:60:ed:22:cc:2b:3e:1f:9b:09:
         5c:50:43:51:97:dd:f7:55:5b:01:41:31:a0:ab:fd:ae:b2:04:
         8b:5a:94:5c:c3:8c:6e:fe:6f:a3:dd:9e:ef:4e:88:2f:86:63:
         4c:83:fc:8c:b6:98:fa:00:c1:77:3d:90:c4:c3:5f:5a:ad:4f:
         88:ed:41:1a:70:90:86:3c:a5:a4:9d:37:a9:64:a9:ea:d1:d0:
         32:88:d0:da:a6:f0:f5:18:90:0c:26:62:18:77:c1:a7:9f:9b:
         ac:77:1b:98:1d:b0:ea:e5:66:51:eb:09:c5:aa:ad:df:a3:47:
         61:f0:65:37:05:9c:b8:0e:5d:e1:35:af:d7:04:31:ae:cc:3d:
         e9:48:18:ea:c0:cc:e4:23:43:1a:1c:be:cf:8f:ba:65:12:a2:
         9b:e7:a8:4a:37:f8:36:6f:c4:26:a3:76:7c:df:9b:cf:70:f0:
         2b:6d:62:5f:c0:5b:9a:7f:13:86:dd:2d:c9:af:23:57:1f:33:
         23:d4:7b:c9:d0:99:28:53:9b:de:60:85:da:ad:54:a8:4d:91:
         e7:f7:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org