Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa
File:                     3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          dO/Cp9naBEpDXqPv6anM3YqOvlxV4cTAWC1Hsj2lniI=
Subject key identifier:   91:A2:12:CB:2C:48:46:4A:BA:89:7B:9E:E6:DE:AE:81:A8:88:88:7E
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       3B0733F7B4B621949E22098E4B4B81DC41EC9975
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        138.122.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:07:33:f7:b4:b6:21:94:9e:22:09:8e:4b:4b:81:dc:41:ec:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=91A212CB2C48464ABA897B9EE6DEAE81A888887E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:d9:5d:44:f1:26:94:15:8c:eb:92:96:8c:
                    0a:8c:7b:26:69:ed:0f:e2:1b:5d:32:32:ca:3a:43:
                    20:0d:4e:73:d1:b3:62:d7:95:c7:d9:15:db:a3:da:
                    a0:2a:15:05:dc:6a:79:00:4f:c5:61:78:42:d2:4d:
                    dc:d4:72:25:ee:1d:1d:38:60:ee:ed:0c:89:00:50:
                    54:9e:19:a2:ae:13:99:c2:5c:53:67:aa:f6:77:ca:
                    86:b0:0a:64:0b:de:ee:d2:9c:a0:c9:e4:ec:79:c4:
                    d9:5f:db:9c:2c:76:17:98:47:be:14:d4:35:b8:63:
                    58:66:18:95:b0:c8:94:a1:b3:04:e2:08:34:d9:f2:
                    fc:70:38:71:53:27:c1:56:dc:87:0e:45:5c:d8:a1:
                    b8:b2:6e:17:d0:57:8b:3b:aa:0a:a8:bc:11:69:9b:
                    6a:b6:6b:21:74:be:1a:ff:af:49:c7:91:24:99:68:
                    2d:c3:47:51:0a:29:ce:17:18:49:bb:f8:71:49:fc:
                    b7:f9:1b:ad:93:c7:b8:8e:d7:a9:27:9b:98:bc:2d:
                    bb:53:9e:fe:c3:19:3a:4c:e1:49:46:cd:c7:cd:ee:
                    96:63:30:fc:76:bf:b6:94:d9:f8:76:57:d9:3a:90:
                    24:08:d0:49:d4:b1:41:5e:b5:f4:ec:98:a4:ff:fd:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:12:CB:2C:48:46:4A:BA:89:7B:9E:E6:DE:AE:81:A8:88:88:7E
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:12:c8:9e:66:d5:bd:bd:10:32:95:a4:12:d7:72:a2:6a:
         17:68:a4:63:68:fa:1d:2f:59:f9:fd:a0:4f:ee:64:94:c8:36:
         b6:4e:ce:ba:77:2c:2f:5d:a5:d1:0e:5c:77:de:1a:fa:4c:72:
         bf:e0:a4:33:50:17:ee:d5:8c:92:1c:1f:74:03:30:3e:0e:dc:
         85:c2:88:81:63:d8:26:f5:86:68:0c:3d:ca:2d:7e:f9:00:06:
         2d:9d:e9:81:89:9e:b9:dc:46:42:1b:44:c8:b5:98:40:d2:35:
         91:cc:07:80:01:1d:76:f2:91:ee:5e:ff:db:ae:b3:b7:9e:f3:
         bb:26:45:14:03:10:46:e5:d1:36:25:c6:51:a7:24:c6:fe:40:
         97:3e:b9:62:3f:bc:d4:06:c7:e1:ff:0f:12:f3:16:ea:16:50:
         e9:7a:fd:99:ed:01:52:75:7e:cb:0f:db:98:a7:06:fa:4a:8a:
         73:98:80:46:ea:3c:66:d8:de:ec:9b:e7:ac:00:cf:5c:1b:e3:
         65:49:52:e3:94:af:e4:14:e7:35:92:ba:e0:27:dc:bb:e2:c5:
         07:72:32:ca:57:2f:a2:a5:44:67:8e:3b:05:d7:0d:b4:b6:75:
         51:bc:e9:9e:01:97:4f:9f:55:6f:ab:20:f7:aa:1b:ad:91:80:
         6f:b5:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org