Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32332d3233203d3e20323633383738.roa
File:                     3133382e3230342e32302e302f32332d3233203d3e20323633383738.roa (raw, json)
Hash identifier:          vgTFlhpVdDQuuBJ4c+pREO69DPWTflW+6C5qH/+xAkc=
Subject key identifier:   37:B9:9F:51:6E:99:CA:79:4F:E8:BB:66:60:57:0C:E2:86:0F:4B:FA
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       54C0D62ADCAD786AED34C0D3B83AB29C4989D77E
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32332d3233203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:33:21 +0000
ROA not before:           Tue 16 Jan 2024 13:28:21 +0000
ROA not after:            Tue 14 Jan 2025 13:33:21 +0000
asID:                     263878
IP address blocks:        138.204.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c0:d6:2a:dc:ad:78:6a:ed:34:c0:d3:b8:3a:b2:9c:49:89:d7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:28:21 2024 GMT
            Not After : Jan 14 13:33:21 2025 GMT
        Subject: CN=37B99F516E99CA794FE8BB6660570CE2860F4BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:b8:9d:fe:d6:4c:ad:74:e2:33:db:fe:81:
                    94:d1:0c:4b:8b:ab:b5:e0:bd:1f:66:0c:b8:52:3a:
                    03:b3:91:f2:37:f8:2b:cc:d5:de:5c:dc:8d:db:c8:
                    83:79:2a:aa:60:b8:62:9f:f6:84:cb:ce:cf:60:c2:
                    0f:73:18:4a:03:26:33:ed:12:37:6e:97:1d:b9:35:
                    a5:3d:8e:74:0a:54:27:c2:a2:2e:86:6f:58:d1:c9:
                    18:e0:36:48:8f:37:51:c1:ea:93:40:21:18:f1:af:
                    3c:30:7b:6d:7d:3c:90:ee:31:af:02:39:c8:90:59:
                    e8:10:a5:ae:d4:44:61:b1:a7:67:98:8c:55:38:4e:
                    95:25:82:aa:15:48:b6:32:67:f4:d5:8a:64:6c:db:
                    59:ca:04:06:b3:1f:73:8a:30:e3:6b:77:73:a8:09:
                    04:da:22:97:88:09:49:9f:96:b8:2f:91:44:b7:ec:
                    c8:79:6e:b4:89:f4:56:7a:bf:d3:59:50:1d:2b:f9:
                    70:8a:14:b5:28:22:43:15:bc:ee:4f:4d:b4:97:02:
                    81:06:27:bd:14:68:68:48:65:fc:49:b8:d3:e9:ec:
                    5c:3b:82:3c:6b:84:b1:ef:3b:7f:fd:4b:3c:4d:e2:
                    fb:ba:ae:30:f7:49:e5:c2:84:6a:1a:59:77:5c:f2:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B9:9F:51:6E:99:CA:79:4F:E8:BB:66:60:57:0C:E2:86:0F:4B:FA
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3133382e3230342e32302e302f32332d3233203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:57:1d:99:b9:81:5d:bc:40:46:73:21:ee:a7:b4:31:34:
         bc:13:2c:34:44:3d:b3:a2:14:36:38:be:b3:9d:70:85:94:78:
         9b:71:58:b4:0f:71:11:e7:63:43:87:06:0c:9d:bd:87:e4:98:
         e1:7d:6d:16:ed:7e:0c:5f:6f:dd:a1:6f:c2:b4:d0:a2:02:b0:
         03:b5:cb:f1:06:5b:0d:91:db:f0:07:cc:25:1b:5e:57:52:9e:
         d0:d5:cd:47:da:b1:62:db:d7:e1:cf:dd:aa:16:fe:cd:14:35:
         f3:c1:55:b9:9f:b4:86:2a:e3:21:1d:78:88:aa:d5:0c:fd:80:
         9b:eb:69:0c:f3:38:38:78:1f:62:dd:70:13:2a:c2:be:f5:f8:
         60:32:6e:92:0b:32:6e:86:8a:a5:e0:a5:7c:19:a0:8c:68:77:
         2c:5b:cc:31:67:99:57:3d:d9:46:cb:b3:3b:67:a8:01:f6:7e:
         c3:9d:1f:98:8e:2b:0d:d9:df:1a:a4:b3:90:56:25:73:7d:78:
         00:67:66:78:cf:80:b1:7a:d7:86:74:0b:d7:23:43:26:e4:f5:
         cb:df:76:13:1b:19:fb:0f:34:ed:a1:78:68:b3:c9:ee:83:72:
         c6:41:d7:ef:0f:a4:90:1c:3d:9e:1d:0f:9e:04:bd:93:84:96:
         28:0f:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org