Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3234203d3e203533323138.roa
File:                     3133382e3138362e3230342e302f32322d3234203d3e203533323138.roa (raw, json)
Hash identifier:          YeNaieFjejWNerzbKjl1cXPhvVzeY6IuOlFxcWu7rqk=
Subject key identifier:   EE:10:DF:62:42:B3:43:10:4D:E5:65:E7:D5:F5:DA:1F:52:21:D1:B7
Certificate issuer:       /CN=2F9412103006FB102F94DFE166EAB3530381A078
Certificate serial:       13C330559A86B8F9188F8518FB6F92211FF6597C
Authority key identifier: 2F:94:12:10:30:06:FB:10:2F:94:DF:E1:66:EA:B3:53:03:81:A0:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9412103006FB102F94DFE166EAB3530381A078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3234203d3e203533323138.roa
Signing time:             Mon 13 Jun 2022 22:24:46 +0000
ROA not before:           Mon 13 Jun 2022 22:19:46 +0000
ROA not after:            Mon 12 Jun 2023 22:24:46 +0000
asID:                     53218
IP address blocks:        138.186.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c3:30:55:9a:86:b8:f9:18:8f:85:18:fb:6f:92:21:1f:f6:59:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9412103006FB102F94DFE166EAB3530381A078
        Validity
            Not Before: Jun 13 22:19:46 2022 GMT
            Not After : Jun 12 22:24:46 2023 GMT
        Subject: CN=EE10DF6242B343104DE565E7D5F5DA1F5221D1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:76:94:2a:46:6d:bd:59:d7:49:7a:7b:7d:
                    1d:c9:71:14:a0:2f:f4:98:71:5c:88:90:13:d4:d9:
                    51:ed:f5:22:f1:f0:b9:94:a8:e0:4b:9a:7b:23:05:
                    03:22:0c:c9:b6:40:bc:d4:79:3d:d2:0c:e3:c7:7b:
                    df:06:d9:0d:1e:10:0a:18:3a:20:2a:cb:6d:b1:09:
                    0e:58:2a:bd:a0:ca:a1:04:42:63:3c:0e:f1:81:4a:
                    c3:89:6f:77:b0:6a:89:cf:a7:71:c2:98:79:bf:b8:
                    24:86:a8:21:0d:df:ce:63:d6:e6:f6:59:00:96:77:
                    79:42:8e:00:6d:50:82:e8:2f:d5:e1:8f:fa:5e:d0:
                    6c:cc:62:7a:63:68:e0:eb:c4:8b:31:08:0d:31:37:
                    29:86:c0:96:2d:8d:d4:31:99:31:01:e0:6a:26:25:
                    ce:57:7c:d9:7c:54:0c:81:e6:d9:30:0e:18:89:e9:
                    c4:42:2e:46:4d:59:8f:19:4d:ba:b0:81:54:03:53:
                    b0:61:66:3d:30:34:39:a5:18:cc:3d:6b:97:01:5b:
                    69:b8:93:84:a1:69:e9:9d:b1:1c:d4:35:90:c2:01:
                    f9:94:c4:e7:74:18:07:12:84:24:e1:32:47:97:ae:
                    3e:db:ee:af:14:ee:d0:26:82:00:87:2b:7f:17:da:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:DF:62:42:B3:43:10:4D:E5:65:E7:D5:F5:DA:1F:52:21:D1:B7
            X509v3 Authority Key Identifier:
                keyid:2F:94:12:10:30:06:FB:10:2F:94:DF:E1:66:EA:B3:53:03:81:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2F9412103006FB102F94DFE166EAB3530381A078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F9412103006FB102F94DFE166EAB3530381A078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3234203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:5d:2d:f1:5d:0e:39:ff:d1:a6:b1:09:10:ac:62:ba:07:
         50:a2:78:80:70:bd:67:8a:81:b6:60:6f:53:06:6c:01:45:6c:
         54:83:af:3f:e3:73:39:47:0c:02:07:8b:d8:3e:79:17:1a:15:
         f4:11:66:cf:37:f2:53:af:d6:85:9b:07:11:07:11:17:38:06:
         97:9f:2d:a7:15:16:85:99:18:1b:bd:7a:3f:3f:d7:db:44:b5:
         18:c3:9b:50:d3:48:54:bd:68:8d:ef:41:e1:b3:d9:5d:6c:43:
         8d:1b:46:8f:6e:f1:a5:e9:c2:37:7e:64:06:58:e1:f6:63:d6:
         ff:22:0d:04:3c:e4:73:27:4b:f2:c6:30:21:84:49:2a:e7:d0:
         8d:41:62:10:84:71:d6:65:37:9b:07:b9:d4:ed:a5:8c:12:c8:
         86:25:28:dd:9c:c4:43:19:36:1f:0f:25:8f:53:ee:58:20:46:
         4e:fd:4b:6f:9b:24:57:47:f0:db:47:59:7a:1d:d3:ff:36:27:
         38:df:c2:72:5a:2f:4c:10:e5:ae:f3:33:64:58:91:7d:4d:a5:
         fa:20:03:ac:81:39:7a:92:60:f6:0d:f5:6f:33:cb:d0:f0:6b:
         8a:ff:ea:4a:4a:22:cc:e0:03:0e:1d:48:5e:c8:94:3f:45:aa:
         f8:2b:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org