Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32342d3234203d3e20323634353636.roa
File:                     3133382e302e3134342e302f32342d3234203d3e20323634353636.roa (raw, json)
Hash identifier:          ToOcscFguGAlaDGXCSihOCfJEXYS/V44mL1lhTXe2fg=
Subject key identifier:   CF:DF:33:FD:A0:50:70:B8:25:AA:53:84:D7:25:0C:1A:4B:88:4C:13
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       605E895AA78F2BB6D93FB29159CBEBC1C7EB4F1B
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32342d3234203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:11:06 +0000
ROA not before:           Wed 23 Feb 2022 19:06:06 +0000
ROA not after:            Wed 22 Feb 2023 19:11:06 +0000
asID:                     264566
IP address blocks:        138.0.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5e:89:5a:a7:8f:2b:b6:d9:3f:b2:91:59:cb:eb:c1:c7:eb:4f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:06:06 2022 GMT
            Not After : Feb 22 19:11:06 2023 GMT
        Subject: CN=CFDF33FDA05070B825AA5384D7250C1A4B884C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:02:87:cc:d4:65:6d:33:71:59:9b:40:7e:
                    b2:54:a9:5b:86:e5:4f:db:75:e8:5f:23:c6:2d:05:
                    7e:e8:61:4e:7b:f9:0d:58:5c:0c:26:a1:1c:35:b7:
                    7b:50:fa:df:d9:f1:ff:6d:a9:b6:ee:84:81:51:74:
                    b7:64:71:b3:c3:41:f2:25:4f:5f:56:6e:cc:64:d8:
                    09:e9:ec:e8:6b:1e:4e:f2:05:c3:2c:a2:f5:a7:d0:
                    76:3a:ad:9a:1b:8e:10:20:fc:a2:46:af:09:6e:37:
                    28:a1:7e:78:b8:2c:f9:6b:1f:0c:66:38:4f:78:61:
                    34:b5:3c:cf:e0:2a:32:50:f0:67:66:33:fc:b4:b5:
                    e0:e5:96:81:0e:aa:05:07:4a:c2:25:a7:17:63:c8:
                    88:d0:da:8d:58:cf:a7:f6:8a:cb:a1:b9:49:d9:7b:
                    41:a7:1e:51:0d:45:a2:ff:e4:ab:7c:f8:19:5b:f0:
                    c8:15:83:fc:53:5b:75:5f:fc:6e:9b:d2:7e:fd:dc:
                    14:f9:af:52:01:4e:d7:dc:da:71:14:ab:fb:1b:89:
                    5b:01:9f:85:6a:e0:f2:5e:4d:cd:f6:98:4e:72:92:
                    74:a5:82:be:0d:81:74:22:4c:1a:5d:4e:34:36:aa:
                    21:f8:31:be:0f:c6:69:34:e1:83:9e:db:e8:96:93:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:33:FD:A0:50:70:B8:25:AA:53:84:D7:25:0C:1A:4B:88:4C:13
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32342d3234203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:cb:a9:20:ed:ae:c2:57:6c:77:17:14:6b:65:f6:f5:4e:
         ad:79:ad:fb:a4:f1:2e:58:83:55:10:b0:9f:ef:9b:e6:9a:a8:
         ef:e8:de:ac:7c:26:c1:83:4d:cb:bb:41:2b:89:13:7e:c9:38:
         26:b4:e7:cc:44:6f:44:46:81:58:c8:54:a3:a2:28:ea:3a:a4:
         36:73:1b:ce:da:a6:4d:45:94:ac:42:9e:0a:b1:1f:12:c6:ad:
         5a:11:cc:bf:a3:25:be:71:4a:68:7d:29:25:f4:7a:78:ea:f6:
         c4:a1:24:fd:e1:1d:6a:bd:40:1f:95:d1:9d:ba:0a:d2:92:a7:
         31:fd:58:39:1f:11:26:73:0b:0f:56:c9:a6:b1:38:ac:74:5a:
         14:2d:fb:91:6f:e8:4e:6b:a2:10:aa:a2:49:95:b5:16:5e:0c:
         85:b6:1f:6d:eb:08:d4:ee:c0:e5:1f:b7:be:46:c7:ba:f0:55:
         25:9c:1d:a6:4e:f0:0a:8b:80:0a:1d:ce:99:84:3e:4c:46:f2:
         45:18:60:28:ac:8a:2b:0c:6d:0f:e1:de:97:b0:69:6a:f0:77:
         d5:ed:63:88:4e:7c:ec:3e:9f:d0:8b:f6:19:5a:73:c1:3e:75:
         f9:91:48:7b:5f:86:2c:59:8d:9a:ca:36:19:3e:ec:87:1a:c4:
         ea:7b:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org