Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e342e302f32322d3234203d3e203532393031.roa
File:                     3133382e39342e342e302f32322d3234203d3e203532393031.roa (raw, json)
Hash identifier:          55OtX11BkBRzlxvMllBY756m88r3XFm9cyb8RceLjVY=
Subject key identifier:   0A:48:0B:45:E1:09:89:1F:EC:29:13:82:98:44:DC:AA:52:DF:39:AC
Certificate issuer:       /CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
Certificate serial:       68B70F4B7384F7993668640041734A18B18DAA89
Authority key identifier: CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e342e302f32322d3234203d3e203532393031.roa
Signing time:             Tue 12 Jul 2022 12:55:21 +0000
ROA not before:           Tue 12 Jul 2022 12:50:21 +0000
ROA not after:            Tue 11 Jul 2023 12:55:21 +0000
asID:                     52901
IP address blocks:        138.94.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b7:0f:4b:73:84:f7:99:36:68:64:00:41:73:4a:18:b1:8d:aa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E
        Validity
            Not Before: Jul 12 12:50:21 2022 GMT
            Not After : Jul 11 12:55:21 2023 GMT
        Subject: CN=0A480B45E109891FEC2913829844DCAA52DF39AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:91:96:65:3b:b6:74:9d:b9:24:b4:dc:a6:45:
                    11:cb:8b:07:a8:6c:39:fe:65:59:f2:74:1a:b7:c0:
                    21:a1:f7:81:22:e3:0b:43:9d:15:9c:f3:34:35:67:
                    61:ed:8a:21:bb:8f:03:45:f7:f5:89:90:4e:c4:12:
                    05:f7:9a:18:14:b8:81:ce:33:0a:74:36:58:94:07:
                    86:19:7e:e1:79:eb:86:17:c5:57:a6:b2:6b:49:f6:
                    60:88:a5:31:b9:01:73:7f:a2:38:f6:09:87:65:83:
                    ba:96:36:6c:0d:07:7f:c6:07:b5:64:87:a0:bc:4f:
                    5e:0d:9e:5a:27:60:5b:1e:bd:71:fb:6b:ca:7c:a3:
                    f9:5a:a4:b6:f2:37:c6:c2:c2:40:73:b2:c2:d2:a1:
                    f9:71:bf:64:0b:3c:07:f6:a0:56:91:45:cb:ce:07:
                    29:be:40:c1:c7:6e:e3:5f:f6:ea:c7:a9:49:61:d3:
                    81:ee:b2:fa:86:39:a2:16:5e:a1:92:0b:b7:14:7e:
                    2e:bd:73:f0:93:24:17:64:78:03:3e:65:eb:01:96:
                    57:96:dd:3e:24:a7:e6:d6:39:47:d3:04:8a:a3:00:
                    5c:2c:55:11:c8:4a:97:8d:ce:cc:87:06:0a:2d:da:
                    ad:55:de:59:3c:34:b3:bf:ec:81:60:2c:2c:f7:1e:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:0B:45:E1:09:89:1F:EC:29:13:82:98:44:DC:AA:52:DF:39:AC
            X509v3 Authority Key Identifier:
                keyid:CD:43:0F:A1:1C:F9:9A:2A:02:BA:82:D5:05:CC:F2:4F:BC:8C:E7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD430FA11CF99A2A02BA82D505CCF24FBC8CE77E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3133382e39342e342e302f32322d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:f1:25:af:9f:e6:cf:bb:4b:4f:8b:51:ed:47:5d:9e:3b:
         d8:86:1d:2f:d9:51:0b:6d:39:9c:42:0a:bb:3e:ab:e9:db:cb:
         35:ea:41:c5:69:31:61:0f:62:7a:cc:9a:05:f2:85:1a:ff:82:
         b8:aa:50:74:b4:ea:f3:ad:33:88:7a:24:d5:7f:33:61:88:8a:
         bb:1e:49:a4:76:2f:21:31:ce:d9:88:91:c1:84:70:af:08:12:
         40:7b:1a:37:95:fd:8a:a1:43:e5:19:62:da:79:e8:1e:8e:dd:
         87:4b:dc:aa:9f:41:3a:07:b7:e4:5e:89:9d:76:da:d5:43:b5:
         81:e3:2e:a0:74:04:7d:6e:c3:bf:6e:fa:6d:19:f4:68:bd:e9:
         1a:e2:5a:81:c6:f8:e2:24:8b:41:23:82:53:ce:12:64:1b:3c:
         06:01:23:35:58:c1:71:ed:92:de:7a:d5:01:a3:fc:d7:82:b1:
         da:63:91:5c:1c:93:51:6d:64:fd:4b:eb:1a:fa:ec:f6:82:02:
         8c:e8:31:07:f8:95:8b:67:f0:af:97:03:97:9d:51:49:7e:89:
         09:38:3e:27:c6:c0:32:65:b1:e8:53:d5:c4:9e:31:dc:b0:e1:
         54:7e:28:3c:08:94:52:65:24:c6:1d:be:7c:b0:0e:2f:46:1b:
         eb:5c:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org