Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32342d3234203d3e20323633383838.roa
File:                     3133382e3230342e3133322e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          93RrFxPU49Ety/xdfepL0EI0StBoBqUZaScvCIMqtJM=
Subject key identifier:   15:61:91:0D:97:40:F9:8D:97:53:7B:58:B9:0F:60:AE:16:40:E1:08
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       536AB4D4FC117F3F9DCF951309372BD92F992841
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:02 +0000
ROA not before:           Tue 06 Sep 2022 14:55:02 +0000
ROA not after:            Tue 05 Sep 2023 15:00:02 +0000
asID:                     263888
IP address blocks:        138.204.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6a:b4:d4:fc:11:7f:3f:9d:cf:95:13:09:37:2b:d9:2f:99:28:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:02 2022 GMT
            Not After : Sep  5 15:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:97:01:b8:f7:c2:f4:20:54:6c:70:87:87:
                    79:79:e4:e4:a5:aa:0f:06:18:30:d5:87:7d:56:41:
                    8b:6e:57:dd:f1:1d:ff:45:46:70:0d:5d:d3:ca:35:
                    cb:96:c8:a0:fd:a3:a9:91:ee:4f:b2:5e:12:7a:b8:
                    44:57:75:8d:d9:3a:5d:07:b3:38:c1:e4:e5:b6:75:
                    6d:8d:ab:67:11:0e:ff:2b:ef:cf:a0:65:53:cb:c8:
                    86:c9:4a:43:a9:54:7c:83:84:7d:51:d7:6c:65:07:
                    39:78:f3:80:62:23:f7:8c:68:6b:47:68:9a:51:46:
                    6a:93:3f:fd:f8:a4:fc:fc:10:52:3a:d1:5f:cc:95:
                    28:58:92:35:02:67:84:55:84:8c:b4:96:3c:f2:42:
                    b1:69:8d:7a:01:bd:57:bf:2e:a0:5c:61:82:49:3c:
                    4b:49:82:80:c7:a5:af:e4:7f:57:1b:22:ab:6c:5b:
                    41:49:6e:75:ed:84:a7:d0:6b:c9:85:85:f0:cf:a2:
                    be:dd:39:b3:36:32:ba:c2:d5:ab:34:b5:06:dd:86:
                    d3:38:24:26:de:dc:9a:e4:2e:dc:ac:79:9c:b3:06:
                    f1:17:b2:a0:ce:48:61:31:20:5b:b5:94:34:50:7d:
                    6f:76:1f:08:1a:d0:b2:32:44:e4:d6:54:d1:77:1f:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:91:0D:97:40:F9:8D:97:53:7B:58:B9:0F:60:AE:16:40:E1:08
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133322e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:31:86:ae:c3:39:96:cf:02:11:1f:50:52:6e:b9:11:4c:9f:
         ef:96:e7:29:88:66:2c:1f:99:05:67:42:dc:7d:41:de:1b:bf:
         a9:91:7c:b2:bf:78:6e:88:bc:cb:0f:64:96:c5:57:cf:77:27:
         df:30:3a:d5:ec:47:a5:48:24:9b:76:d3:dc:d4:cd:e5:98:1e:
         c4:14:61:04:09:fb:86:f2:a4:8d:06:58:2a:c8:d1:32:9c:96:
         3c:7a:cc:c2:bf:25:b2:30:e3:99:cb:ed:8c:3d:08:2c:35:7b:
         af:71:f0:77:31:a6:14:0c:b7:65:83:22:bb:dd:f0:bb:b0:1f:
         9d:74:e0:ea:5c:6d:2a:65:02:97:69:b9:d2:ba:e7:f4:4f:b2:
         6d:0f:c4:72:26:45:35:12:20:e0:05:91:80:39:62:2b:a7:8c:
         99:db:bb:ce:d7:25:69:2c:3c:2c:25:71:fa:4b:bd:83:ed:6d:
         96:45:21:08:16:6e:51:be:28:31:05:2c:5a:7b:d5:a3:09:f6:
         d1:ea:97:38:ac:6d:3f:2d:d9:bd:12:6e:c4:76:1d:29:69:91:
         e1:85:9e:42:b7:7d:e3:95:68:5a:c0:0c:5c:88:67:49:a7:b8:
         3f:a3:f2:4f:bb:d7:0d:29:88:65:9b:3e:20:c3:4d:8b:07:98:
         4f:b5:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org