Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa
File:                     3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa (raw, json)
Hash identifier:          74pgoWmclcguFIEcLc0fwn9imm0KLyFPG43KNfLb0XY=
Subject key identifier:   B3:CD:91:06:BB:5D:AC:7D:92:50:01:52:BB:29:FE:7A:2C:E9:4E:42
Certificate issuer:       /CN=54B288A3567A81712D7F46EFFC038D40DFCD025F
Certificate serial:       568CB857805B429D053B376DF2D26CCC6EDE3831
Authority key identifier: 54:B2:88:A3:56:7A:81:71:2D:7F:46:EF:FC:03:8D:40:DF:CD:02:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa
Signing time:             Sat 26 Aug 2023 15:04:06 +0000
ROA not before:           Sat 26 Aug 2023 14:59:06 +0000
ROA not after:            Sat 24 Aug 2024 15:04:06 +0000
asID:                     264127
IP address blocks:        138.59.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8c:b8:57:80:5b:42:9d:05:3b:37:6d:f2:d2:6c:cc:6e:de:38:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54B288A3567A81712D7F46EFFC038D40DFCD025F
        Validity
            Not Before: Aug 26 14:59:06 2023 GMT
            Not After : Aug 24 15:04:06 2024 GMT
        Subject: CN=B3CD9106BB5DAC7D92500152BB29FE7A2CE94E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:28:14:6b:c2:2c:cf:7b:5e:5e:84:cb:33:
                    1d:ea:de:ff:04:c6:5a:6a:c4:aa:b5:89:ca:0c:a7:
                    af:b5:2a:ec:47:87:d5:93:f0:8e:41:af:6c:12:42:
                    3d:e4:6a:22:40:0f:6d:ae:03:a8:ee:cc:6d:06:54:
                    b4:13:3a:fd:5e:ee:22:3b:3d:0d:60:f1:11:44:1b:
                    ea:0a:ef:f3:04:f9:40:d5:0a:73:b4:5c:02:f6:17:
                    1e:57:5e:5d:af:4b:7e:4e:ab:88:c4:f0:41:16:70:
                    00:04:fc:c7:c4:28:c1:80:b7:25:ba:bc:77:ad:bc:
                    f6:bb:fc:1f:5e:d4:d0:b6:f0:04:0c:60:4d:a7:4e:
                    ae:44:9d:96:7a:0c:59:56:da:06:db:cb:3a:8e:4a:
                    3a:fa:f1:0f:36:33:60:e6:fb:40:8b:cd:10:46:0b:
                    0f:53:f6:d6:fe:96:db:b2:f8:db:4e:9c:7a:60:4a:
                    5c:a7:4f:9e:99:13:18:ac:c4:87:50:c5:bf:76:4c:
                    af:72:d0:e9:5f:2c:79:5d:e9:83:9d:60:a4:89:06:
                    af:2a:d4:a5:3a:57:2e:e9:b1:db:94:b0:f0:27:d0:
                    ee:81:8f:68:83:46:8c:52:9e:56:f6:30:ae:37:88:
                    47:d3:57:17:ed:e9:fa:ea:cb:8b:d6:dd:0b:13:bb:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CD:91:06:BB:5D:AC:7D:92:50:01:52:BB:29:FE:7A:2C:E9:4E:42
            X509v3 Authority Key Identifier:
                keyid:54:B2:88:A3:56:7A:81:71:2D:7F:46:EF:FC:03:8D:40:DF:CD:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54B288A3567A81712D7F46EFFC038D40DFCD025F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/3133382e35392e3232302e302f32322d3234203d3e20323634313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:97:fb:c2:d0:ad:f0:f7:0f:a4:b8:bf:26:e5:b6:e3:15:49:
         3e:bb:b2:d5:84:22:dc:34:77:1f:3d:91:1f:49:61:a0:94:a0:
         e4:a2:c7:9b:d5:0c:22:b6:66:ab:bc:d0:59:a7:47:bb:49:72:
         b9:cb:1b:2b:21:66:e6:40:e4:ea:48:d0:88:8d:13:6f:85:4d:
         b9:40:81:2c:66:46:31:b0:57:e6:2a:e4:b2:fd:b3:bc:b3:7a:
         a3:92:4c:e7:a0:09:62:34:50:10:53:31:1f:34:1f:5b:29:a3:
         e4:af:b2:ff:d4:6c:33:b7:cf:ff:77:3c:2e:7d:1b:01:d1:12:
         80:dc:c1:dc:ff:9d:21:74:e9:18:ac:ed:54:41:c7:08:c7:4f:
         32:5f:f0:cd:3c:8d:17:42:c3:ed:d0:3c:07:b7:f9:56:f5:a4:
         1b:84:be:02:01:ca:5d:0c:01:6d:1a:c4:34:47:7c:59:9f:8c:
         ff:d6:34:7e:40:34:ea:f1:63:8a:07:2f:1a:4e:8b:72:bb:2e:
         9c:58:ba:39:60:df:b8:ca:c9:a7:53:09:9a:5e:26:be:15:ef:
         b6:64:f0:ee:9d:6c:81:1f:2c:6a:ef:c1:08:6f:41:64:80:62:
         6f:65:94:b5:c7:c2:21:da:53:cb:70:ec:6d:9a:71:25:ee:5c:
         97:cb:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org