Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32322d3232203d3e203532383037.roa
File:                     3133382e33362e32382e302f32322d3232203d3e203532383037.roa (raw, json)
Hash identifier:          S3JQREkAbZ3U4/4TNVnZsnHSWQeRX8pq57K7nO1J/Z4=
Subject key identifier:   BF:B6:EE:04:FC:05:40:D6:E4:8A:AE:43:B5:49:78:D5:80:1C:51:33
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       2FA82D2859A0FA2BCCCFB8C65B32EA06DEF381CD
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32322d3232203d3e203532383037.roa
Signing time:             Thu 15 Feb 2024 13:43:47 +0000
ROA not before:           Thu 15 Feb 2024 13:38:47 +0000
ROA not after:            Thu 13 Feb 2025 13:43:47 +0000
asID:                     52807
IP address blocks:        138.36.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:2d:28:59:a0:fa:2b:cc:cf:b8:c6:5b:32:ea:06:de:f3:81:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Feb 15 13:38:47 2024 GMT
            Not After : Feb 13 13:43:47 2025 GMT
        Subject: CN=BFB6EE04FC0540D6E48AAE43B54978D5801C5133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:38:84:6e:8b:f3:f3:f4:ee:c1:12:ab:42:
                    8a:fa:48:e2:b0:93:5a:0e:9f:f2:fa:34:2b:03:59:
                    f8:5f:be:25:8c:73:7e:b6:fb:16:90:60:37:54:b9:
                    a9:94:43:00:89:6c:9a:4c:b7:7c:9e:ae:6b:c3:1f:
                    83:4d:2d:56:7d:92:41:53:1d:cb:41:e2:91:62:b6:
                    c9:ad:08:d6:42:3e:ed:64:63:14:b5:0f:ea:c4:95:
                    bc:21:cc:de:27:40:f3:5d:1d:d6:53:54:83:70:16:
                    71:b6:fa:2e:f8:b8:0f:93:5c:0d:12:a9:21:cd:bc:
                    81:6d:52:84:2d:00:62:08:25:87:38:30:ec:94:18:
                    5c:5e:03:5f:68:7a:3a:d5:e2:55:57:92:52:d4:3e:
                    5e:b2:0f:15:5b:63:c8:5b:39:9d:bf:71:60:a5:b6:
                    4b:bf:00:9f:43:da:61:c1:2f:8c:8a:3e:d4:56:ba:
                    dc:26:6c:78:5f:f1:e1:f2:db:48:9f:32:8c:fc:e1:
                    db:5d:6f:99:a4:4b:41:e2:ee:b9:6f:fc:14:63:58:
                    b7:58:18:9f:eb:82:97:f8:f7:54:50:67:66:64:ce:
                    e9:54:07:6f:19:57:38:cd:7b:a6:e3:df:e2:cc:f4:
                    11:8b:eb:5f:cc:1f:38:29:2d:e0:29:c0:a8:50:1f:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:EE:04:FC:05:40:D6:E4:8A:AE:43:B5:49:78:D5:80:1C:51:33
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3133382e33362e32382e302f32322d3232203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:6f:98:29:36:67:5f:17:2e:16:c5:38:0b:eb:75:63:e1:
         b0:1c:01:f9:d1:12:b1:57:0a:d8:8b:f8:4e:f9:36:ae:a9:28:
         82:83:5c:c5:71:e3:9d:2c:cc:a2:16:18:e2:f0:ff:60:e2:be:
         38:d4:9b:2d:5a:8b:7a:69:1d:9f:ee:f5:d6:26:10:3b:6e:ac:
         d9:87:06:25:90:45:ee:fa:4e:5c:d8:37:32:8d:42:a4:06:33:
         ff:57:4b:b0:cb:90:45:30:86:c3:dc:86:d2:1c:96:8b:b5:2b:
         e9:03:fb:8d:ba:c1:e2:41:e5:7e:21:f4:01:c2:e2:d4:55:aa:
         15:11:b7:fd:f4:fb:77:e7:51:6c:c8:ce:32:3b:b5:62:10:d9:
         a5:57:ce:bc:1e:2c:bb:0a:cc:19:bf:21:36:9b:37:d9:c2:98:
         6a:56:7e:39:34:a0:e5:72:4e:35:76:59:9e:18:99:93:bb:fc:
         ae:d5:95:82:06:03:37:f4:67:7f:1c:bb:7a:0f:89:63:af:02:
         ab:79:d7:75:c4:34:5c:c3:10:95:ca:89:69:e5:36:21:a2:a9:
         f9:e9:27:dc:7b:41:75:3d:52:28:5c:ce:c8:d9:03:b6:52:18:
         52:da:23:d8:30:64:5e:8d:c1:d7:76:30:df:53:1c:f3:02:6d:
         03:b4:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org