Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa
File:                     3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          j10olDNeUZMnThtunK6Iz2qBPn+4Py563E6Bh9PEgcE=
Subject key identifier:   16:3D:0E:18:62:04:8C:DF:C9:6B:8B:7C:EB:DE:2D:EC:4E:98:C4:52
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       30989A01E0AE9D29E3DF17D01AC84BC90208ABF8
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:16 +0000
ROA not before:           Wed 31 Jan 2024 14:26:16 +0000
ROA not after:            Wed 29 Jan 2025 14:31:16 +0000
asID:                     271724
IP address blocks:        138.117.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:98:9a:01:e0:ae:9d:29:e3:df:17:d0:1a:c8:4b:c9:02:08:ab:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:16 2024 GMT
            Not After : Jan 29 14:31:16 2025 GMT
        Subject: CN=163D0E1862048CDFC96B8B7CEBDE2DEC4E98C452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1a:d6:99:67:94:43:7c:60:6d:24:f3:a3:51:
                    04:11:4c:d5:ab:c4:ed:17:f6:96:fd:63:ce:7e:9d:
                    d8:12:16:dc:e8:48:16:09:35:ab:aa:5a:5a:07:78:
                    2b:a7:fc:56:f7:fa:57:72:61:67:3d:a3:a2:f0:c6:
                    ff:67:7d:eb:c1:3d:47:e8:02:33:c9:df:8c:b1:26:
                    fc:d0:43:6d:c0:5d:fe:e0:73:dc:e3:25:02:e8:b8:
                    b7:45:c8:49:40:be:23:7c:3f:8c:77:8a:82:bd:45:
                    5c:16:04:10:19:f1:3f:d7:7e:cb:a0:a7:0d:46:13:
                    06:5c:bd:50:27:6c:28:7e:0f:99:d4:8a:84:38:be:
                    fb:0f:1c:6c:e4:6e:28:bf:83:bf:91:ef:e4:95:1c:
                    f4:ad:65:08:b1:15:92:33:68:6c:1d:4a:84:ec:99:
                    57:1f:98:b3:4b:a1:52:91:85:4e:ad:7e:67:a6:46:
                    96:c1:9f:01:38:3e:9c:02:41:63:82:c1:7b:e3:ab:
                    51:e6:8d:20:24:67:0b:95:5a:b2:39:ee:cd:ac:86:
                    85:88:67:61:9c:c4:f0:b9:2e:22:22:34:97:91:e6:
                    4c:62:41:13:e2:7f:21:77:a8:75:8e:5a:ad:be:23:
                    93:d4:4b:76:36:66:d4:5c:e9:59:79:67:56:82:e2:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:0E:18:62:04:8C:DF:C9:6B:8B:7C:EB:DE:2D:EC:4E:98:C4:52
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:d4:ef:f9:58:98:32:aa:c4:ed:4c:89:16:4c:fc:ac:c9:c7:
         9d:a7:1f:e1:1b:d3:3d:1a:d5:df:a3:e1:8d:7c:b4:bd:0f:20:
         64:8e:f6:d2:ac:48:63:6b:b9:5e:51:d6:f1:04:c0:cc:60:a6:
         14:03:b5:e0:02:b4:63:b1:69:a1:54:7f:6f:96:94:f8:5b:27:
         0c:4f:9e:6c:d4:eb:98:d0:68:f6:87:23:35:23:61:9a:e7:94:
         ef:8b:38:72:97:7f:69:c9:59:44:66:7a:90:dd:d5:be:71:a0:
         c3:9f:8f:f0:2a:9f:23:18:4e:73:42:65:05:91:97:f9:7f:f8:
         13:04:20:90:4c:f2:04:bb:7d:32:72:cf:11:ec:bf:a8:25:ce:
         cb:c8:b7:30:15:e0:74:ef:ff:d6:20:d4:2d:46:49:5b:98:5f:
         01:73:da:bd:ad:9a:c0:df:da:35:8f:44:91:db:c5:d4:fe:8c:
         9c:e5:62:ec:5d:0b:16:9f:c4:75:ca:b4:49:3a:ae:39:51:cf:
         c7:ef:05:64:6a:5e:a1:6b:5c:c5:5c:51:1a:86:06:75:4b:73:
         f4:88:17:89:07:eb:b0:78:4c:22:ca:eb:4c:e3:86:10:5f:68:
         77:60:93:33:3c:ba:ce:94:f5:40:1d:dd:02:a6:81:82:64:10:
         54:e4:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org