Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233382e302f32342d3234203d3e203238323730.roa
File:                     3133382e3132322e3233382e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          C0S2spXXkkpZnokjId+TNGMVIweUPTgSZoxg9C0NZ/Q=
Subject key identifier:   6D:5C:17:48:CA:7E:E9:75:1A:06:4B:F4:41:F3:43:2F:08:B4:45:E9
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       4CF232217A2586764A44BB126EC415C91CB6A986
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233382e302f32342d3234203d3e203238323730.roa
Signing time:             Wed 06 Sep 2023 21:10:58 +0000
ROA not before:           Wed 06 Sep 2023 21:05:58 +0000
ROA not after:            Wed 04 Sep 2024 21:10:58 +0000
asID:                     28270
IP address blocks:        138.122.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f2:32:21:7a:25:86:76:4a:44:bb:12:6e:c4:15:c9:1c:b6:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Sep  6 21:05:58 2023 GMT
            Not After : Sep  4 21:10:58 2024 GMT
        Subject: CN=6D5C1748CA7EE9751A064BF441F3432F08B445E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:cb:63:7b:a8:c6:d9:30:8c:5f:91:e5:5a:
                    78:1e:65:8a:6f:f6:71:aa:70:26:b1:6b:06:c5:31:
                    ca:0c:d3:71:21:2b:c8:0b:ed:5d:82:0b:61:be:7a:
                    e1:63:f5:3a:f2:02:a7:69:7b:41:2f:e6:6a:22:46:
                    1f:21:f8:21:75:37:e3:18:2c:dc:1c:08:94:04:2e:
                    6f:36:85:60:06:ec:08:49:e6:07:9b:8a:37:d0:07:
                    7c:60:e5:6e:3c:83:26:f0:9a:f4:40:81:fe:39:8d:
                    e1:cc:8c:ca:d9:aa:f7:13:c5:c7:6b:af:c0:2e:5b:
                    07:22:62:f0:03:46:8d:47:d3:e7:52:e9:91:e5:4f:
                    60:cf:60:86:ca:e3:52:b9:03:b7:14:be:40:35:24:
                    88:58:84:51:2c:7f:7a:fe:4b:ea:95:1b:c6:39:3e:
                    64:2d:b2:34:00:04:b9:4f:f0:a0:7f:6b:8d:30:9a:
                    31:35:95:ad:86:02:ab:a0:e9:4f:2b:5f:3c:15:b6:
                    18:bb:30:fb:6a:ca:98:0c:4d:b4:28:cc:93:a8:09:
                    a6:f2:10:6f:ae:07:8f:ec:5f:37:ac:ea:f0:8f:c7:
                    ea:c8:ff:04:36:56:90:c0:5e:20:47:b2:f4:51:c4:
                    eb:92:ec:02:2d:c5:35:d2:bd:47:b4:ae:d0:69:96:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:17:48:CA:7E:E9:75:1A:06:4B:F4:41:F3:43:2F:08:B4:45:E9
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233382e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:05:a5:49:4c:59:1c:45:7f:b9:ce:76:29:8a:f7:75:84:
         61:bc:de:ce:7a:8c:ea:74:d1:37:b1:ee:09:88:c8:4f:36:e7:
         93:ea:e7:06:29:a8:ac:86:26:7f:b8:34:3f:25:c7:2d:2a:1b:
         bc:98:77:bd:b2:19:16:b4:e5:42:3d:df:69:dc:9d:10:8d:e3:
         a8:57:1c:ac:76:38:6b:e1:d3:9d:75:68:00:9a:ce:db:a0:5d:
         72:31:62:95:24:9a:34:66:d5:eb:dd:ee:33:65:d7:61:f0:04:
         a8:8a:30:c0:fc:d0:8a:02:3e:90:ef:f7:f2:a4:47:b8:f1:5c:
         55:a3:60:9c:40:da:f5:9f:9b:8d:a6:e9:81:f2:23:7f:93:b8:
         e8:c6:b0:4d:12:6b:47:c3:46:24:13:a5:b5:ee:04:86:6d:7d:
         3f:d4:3b:69:96:72:30:6c:fc:c8:45:ff:aa:40:9a:2d:49:a3:
         23:7d:3e:a3:1d:a7:b4:8f:a1:ab:de:e3:49:a1:47:4f:d8:8d:
         52:de:77:68:3a:4d:92:51:ae:23:6e:3c:39:49:fa:1b:34:41:
         63:c0:30:3a:ee:b5:52:95:0f:0d:be:c1:55:e4:33:94:7e:91:
         21:42:e6:13:b1:56:91:df:e1:71:85:d5:5f:e7:a8:29:00:f9:
         ac:df:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org