Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323230.roa
File:                     3133382e3132312e3232302e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          NYLRO//rNcJViYgSy4EyYIMmuxCX8WyMgoF0MluvNYM=
Subject key identifier:   0C:A4:61:C4:E7:AD:F7:24:F5:D4:37:F1:E1:D5:48:0F:80:1F:9D:71
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       2CB43CC41CF4A45140CA3E5010A071C0928CACC1
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323230.roa
Signing time:             Sun 30 Jul 2023 19:16:44 +0000
ROA not before:           Sun 30 Jul 2023 19:11:44 +0000
ROA not after:            Sun 28 Jul 2024 19:16:44 +0000
asID:                     28220
IP address blocks:        138.121.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b4:3c:c4:1c:f4:a4:51:40:ca:3e:50:10:a0:71:c0:92:8c:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jul 30 19:11:44 2023 GMT
            Not After : Jul 28 19:16:44 2024 GMT
        Subject: CN=0CA461C4E7ADF724F5D437F1E1D5480F801F9D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:29:f8:91:b2:9d:94:2f:f5:60:50:db:f8:
                    fa:89:1a:f5:0f:7a:50:ac:23:12:45:65:66:28:09:
                    14:99:0a:83:42:79:7f:27:e5:27:71:64:44:31:fb:
                    d2:ea:93:c5:f7:a0:62:a0:dc:12:2e:4b:64:de:00:
                    5c:b4:7e:f7:c8:7c:de:42:35:03:65:20:08:46:cf:
                    79:6f:35:ce:e9:e8:02:66:db:d0:71:19:2f:44:f7:
                    1c:66:5b:89:57:f2:d0:42:ae:f2:e0:12:6a:8a:cd:
                    61:0b:12:a6:84:8d:1b:91:5b:9f:0d:9f:2e:39:fd:
                    22:82:0c:f1:d7:7b:bd:0f:e7:bf:c3:78:d5:a5:a6:
                    68:ec:2f:c5:eb:61:46:9c:c8:c5:a8:c0:f9:c8:f8:
                    c9:d7:7e:e3:68:be:cc:3e:c2:cc:c9:82:b4:70:63:
                    07:07:fd:81:3f:dc:2d:d5:c9:b4:16:36:ab:eb:81:
                    4b:b8:df:6b:5d:86:b0:32:d0:0c:be:97:6d:b6:42:
                    7f:c7:7f:87:67:a6:8c:85:af:22:31:78:72:44:27:
                    f3:36:38:3c:1c:06:4a:8e:7b:09:c8:14:06:1e:6c:
                    e6:12:cc:92:b0:8f:fe:d0:b9:55:27:e0:98:aa:e9:
                    e9:6c:60:94:9a:6c:53:fe:dd:5b:3d:ff:41:8e:9d:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:61:C4:E7:AD:F7:24:F5:D4:37:F1:E1:D5:48:0F:80:1F:9D:71
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132312e3232302e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:a9:01:68:30:f2:4f:fb:d8:ca:f7:10:85:2e:05:60:8c:
         17:cb:fd:12:4e:ee:aa:2a:56:de:53:c9:c9:51:f6:e7:0a:80:
         04:82:be:de:2e:60:06:0f:04:d4:d0:b1:f6:4d:44:7a:02:3c:
         53:31:64:cd:d2:92:fe:ae:7e:13:97:83:b4:5d:87:f3:d1:43:
         bb:32:5d:6c:5c:de:f8:a8:bf:62:00:b1:3e:0a:74:2d:b4:96:
         45:db:46:8f:fe:ab:8e:37:37:04:7b:40:d5:28:e4:95:ab:43:
         e0:a4:f8:8a:68:15:dd:98:23:05:f8:43:f8:41:38:e2:8e:9d:
         fe:a8:45:db:c2:ac:8d:37:e9:0f:19:b3:ea:34:ac:e0:9a:ba:
         e9:f2:cc:bc:b8:38:fb:6b:0e:73:07:45:4e:3e:8f:13:87:4f:
         b6:c9:f2:da:3e:7a:17:50:69:43:e0:85:b9:0e:c6:30:13:06:
         ce:99:37:4f:27:81:27:7c:62:cc:21:9a:30:78:62:44:4e:e9:
         6d:3e:51:ca:08:95:d3:7a:04:fa:26:c2:e9:10:04:74:f9:06:
         4a:59:aa:33:28:13:9a:1d:7c:dc:c5:dc:48:8f:7b:4d:d4:be:
         d5:c2:16:48:35:a8:c9:a0:2f:58:78:98:97:e3:e7:d4:1e:1e:
         cf:45:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org