Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa
File:                     3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa (raw, json)
Hash identifier:          uDwOI4+XUiJR9ni5zVi3EXCWNxJi7u4HoOkBcs4XN2A=
Subject key identifier:   EA:D8:A3:B0:D1:38:F2:23:7C:C4:F5:9A:4E:25:69:46:15:72:DE:9B
Certificate issuer:       /CN=0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC
Certificate serial:       742208423DAA783C53C465CC48AD0AF36C0AF4EA
Authority key identifier: 0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa
Signing time:             Tue 22 Aug 2023 15:25:38 +0000
ROA not before:           Tue 22 Aug 2023 15:20:38 +0000
ROA not after:            Tue 20 Aug 2024 15:25:38 +0000
asID:                     61660
IP address blocks:        138.185.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:22:08:42:3d:aa:78:3c:53:c4:65:cc:48:ad:0a:f3:6c:0a:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC
        Validity
            Not Before: Aug 22 15:20:38 2023 GMT
            Not After : Aug 20 15:25:38 2024 GMT
        Subject: CN=EAD8A3B0D138F2237CC4F59A4E2569461572DE9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:ff:64:99:ff:6b:ae:79:02:fa:65:5b:02:
                    a5:07:a8:ec:b7:d3:ce:3b:2f:7f:5e:13:0c:b3:c5:
                    9c:cb:a1:b2:45:f0:23:12:bd:17:ef:21:30:bc:41:
                    5c:62:e6:dd:65:34:5e:75:5b:a2:99:f7:32:b2:10:
                    a2:6b:51:2f:7d:e1:04:da:a8:86:32:00:45:36:10:
                    b0:9e:35:d0:4d:c1:63:4a:87:e6:a0:91:e8:98:39:
                    ce:02:d8:80:e3:04:5a:fd:32:39:af:99:cc:f1:86:
                    01:34:46:2f:56:86:ef:c4:7b:1a:1d:cd:da:ad:c7:
                    0f:49:37:21:c1:89:e6:fc:f8:bd:10:f6:5f:e4:c5:
                    80:09:6a:ed:f7:7f:f8:26:7b:f2:6d:84:e7:22:4d:
                    19:e9:de:42:b8:83:53:61:4c:9b:e8:0f:70:f4:24:
                    4b:7a:6e:87:31:e8:b4:56:f1:c0:b3:9c:99:89:ee:
                    43:0d:04:c6:44:fc:f2:65:44:89:48:79:0a:b0:eb:
                    56:44:28:39:61:86:48:f3:c2:70:39:2f:2a:04:24:
                    49:82:13:5b:43:1c:5f:c0:2f:7e:0b:25:95:35:d4:
                    8c:23:2c:3e:ac:f6:dd:73:af:b0:ee:8a:06:71:c0:
                    49:f9:67:97:26:c4:32:0b:51:b4:13:16:0c:60:18:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D8:A3:B0:D1:38:F2:23:7C:C4:F5:9A:4E:25:69:46:15:72:DE:9B
            X509v3 Authority Key Identifier:
                keyid:0A:D8:AD:7E:0E:AB:2B:26:A5:84:20:EA:22:0F:FC:81:3E:E6:A7:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AD8AD7E0EAB2B26A58420EA220FFC813EE6A7FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133382e3138352e3130302e302f32322d3234203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:33:86:f4:f7:4b:35:c1:b0:ae:a2:2b:ee:d9:14:6d:dc:
         e1:8e:b0:1e:00:ea:33:e4:e2:6a:be:16:52:f3:f8:43:7c:62:
         c9:e6:4c:ec:9c:52:73:c9:6d:b9:52:8f:e9:a6:15:95:71:f0:
         34:3b:f3:1c:4f:4e:e8:4d:5a:13:80:e3:32:7e:90:e5:4f:8f:
         a3:f1:ef:ce:2c:70:d0:08:eb:37:94:8e:e1:9c:4f:df:1a:b1:
         ee:71:6b:17:93:12:e2:d2:bc:c6:46:ba:59:8b:93:4d:3b:ca:
         f7:15:7e:50:b0:40:66:bd:e4:5c:60:78:b9:35:93:d6:aa:f0:
         99:72:db:90:56:18:33:4b:97:e3:a0:37:9b:96:72:37:ac:26:
         39:77:a2:32:c7:b3:b4:21:17:81:32:2b:07:25:fc:65:85:a0:
         71:6b:57:0f:db:c1:a5:5e:fd:02:57:5a:a9:98:45:55:39:d1:
         c6:1b:0c:01:cd:96:cf:b3:da:6f:0f:86:8d:59:78:96:a0:f1:
         4a:59:b6:59:f7:e1:cf:9f:6d:61:64:87:02:22:7c:af:25:64:
         34:b4:28:14:c4:42:84:b6:5b:a0:28:97:05:82:56:32:1b:cc:
         a7:7b:7a:91:4f:56:92:d3:29:9f:9b:27:e8:87:0f:2b:38:57:
         83:7c:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org