Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa
File:                     3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          WZMukiS2hnNhEwH196zl7+rpVieGAPBQI949xZ2JV9Q=
Subject key identifier:   C0:6A:04:CC:73:BE:D3:C8:66:D4:A4:D0:3E:AA:D6:EC:31:EC:CE:0B
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       38259BAD728E405C904EC21385B5EC8BA7112E40
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:42:32 +0000
ROA not before:           Tue 28 Feb 2023 12:37:32 +0000
ROA not after:            Tue 27 Feb 2024 12:42:32 +0000
asID:                     271724
IP address blocks:        138.117.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:9b:ad:72:8e:40:5c:90:4e:c2:13:85:b5:ec:8b:a7:11:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:37:32 2023 GMT
            Not After : Feb 27 12:42:32 2024 GMT
        Subject: CN=C06A04CC73BED3C866D4A4D03EAAD6EC31ECCE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:13:a7:a7:15:64:33:64:86:11:b4:cc:39:04:
                    ee:1c:a0:36:ee:64:84:2d:ff:c3:6e:12:63:8d:7f:
                    72:a7:99:8d:1e:19:8e:b8:4f:e3:af:31:7e:92:bd:
                    84:1a:b4:db:89:cc:66:87:3d:66:c9:c9:28:e6:01:
                    73:d3:70:0a:42:4b:ce:f1:8f:62:fc:d3:02:e9:3b:
                    bd:94:85:ff:d1:57:02:c3:9a:80:f6:31:37:4c:17:
                    0d:43:55:33:25:e9:aa:f6:6a:91:08:d3:eb:fd:43:
                    b8:0e:e3:87:92:9c:14:9a:e8:b3:e1:c8:f9:8b:76:
                    69:b3:3d:85:e6:fd:6a:10:54:76:a0:5f:00:73:73:
                    cb:5d:12:74:f0:37:60:d6:72:aa:c0:b1:8a:f6:db:
                    38:f3:69:98:2e:87:fa:77:a4:92:2a:f5:65:30:10:
                    72:d8:0d:87:2d:16:9d:b6:22:1e:71:41:db:36:65:
                    57:27:5d:07:d3:e6:50:bf:20:fa:c6:ed:0b:4d:77:
                    c5:f7:0d:47:90:69:c5:b6:06:68:91:63:73:17:0e:
                    f8:10:cf:a1:ea:f8:02:0b:6e:e3:db:40:fc:23:8e:
                    16:bb:e1:34:c4:94:92:14:df:68:05:67:22:67:30:
                    b5:84:25:61:2a:ca:38:54:01:09:40:d9:5d:cc:2a:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6A:04:CC:73:BE:D3:C8:66:D4:A4:D0:3E:AA:D6:EC:31:EC:CE:0B
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:b9:2d:74:f7:21:aa:31:4a:4e:52:fa:d7:75:31:03:43:
         5d:47:b8:db:e3:34:08:a9:f7:fc:b5:49:43:bd:7c:90:22:d2:
         03:b1:4a:c8:b4:f3:d1:7b:64:57:93:3b:f4:93:24:52:3a:b7:
         78:9d:f1:74:ab:bf:87:33:bd:6b:e7:b7:60:a1:a2:04:1c:41:
         e1:fc:48:67:8d:1d:f9:d2:15:b0:cb:99:a7:21:51:42:ac:ac:
         53:51:5e:71:3b:9b:07:92:7e:32:75:94:84:6e:e4:26:83:73:
         c2:5a:64:a5:10:42:06:5a:cb:c5:70:fc:8e:63:6e:1d:1d:47:
         81:97:88:d4:2b:ea:c3:d9:54:9d:80:c6:16:62:e3:1b:34:48:
         ac:4c:23:58:5e:df:1f:1b:e3:f5:f0:93:98:d4:18:3a:f1:20:
         39:39:b1:02:49:bd:17:0b:05:e2:50:65:77:d9:75:9e:d7:af:
         ca:6c:fe:0e:cb:f5:2c:c4:10:a2:78:f5:66:cb:73:f8:8c:7c:
         64:09:ad:78:9f:38:c9:4b:ad:ee:43:a9:a4:8a:eb:ad:f8:40:
         5f:99:f5:88:b3:6f:02:b1:40:26:bf:87:c3:d7:24:99:60:b0:
         fa:36:23:60:fa:18:ef:22:12:c7:d0:f2:27:60:b0:2d:9c:f2:
         a5:56:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org