Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133332e302f32342d3234203d3e20323633383838.roa
File:                     3133382e3230342e3133332e302f32342d3234203d3e20323633383838.roa (raw, json)
Hash identifier:          azts/02e37JXFi46Ee/ivA0aMELeXLpRZSMqO/wmSV4=
Subject key identifier:   A4:29:D4:0F:A0:A8:74:BD:28:DB:F8:F6:73:83:7C:A0:EF:23:5F:A1
Certificate issuer:       /CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
Certificate serial:       1DE56EFECE3EA6B4414897067BD4CE37158244A4
Authority key identifier: D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133332e302f32342d3234203d3e20323633383838.roa
Signing time:             Tue 06 Sep 2022 15:00:01 +0000
ROA not before:           Tue 06 Sep 2022 14:55:01 +0000
ROA not after:            Tue 05 Sep 2023 15:00:01 +0000
asID:                     263888
IP address blocks:        138.204.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e5:6e:fe:ce:3e:a6:b4:41:48:97:06:7b:d4:ce:37:15:82:44:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D345B6970533DE54D08FAACFB67E42F987FCCE37
        Validity
            Not Before: Sep  6 14:55:01 2022 GMT
            Not After : Sep  5 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:37:4d:84:3d:4d:89:f1:f8:be:7f:41:14:
                    89:7a:e8:77:cf:aa:fc:61:06:f4:d4:46:b7:93:2b:
                    91:a8:32:73:71:7f:32:89:3b:bc:aa:7f:6f:dd:07:
                    d4:c3:d5:36:e5:b7:8c:4e:e7:d5:e5:ad:b7:7f:65:
                    0b:2b:40:e2:de:c2:68:9c:20:7b:f2:fe:0d:cd:0d:
                    5d:63:a3:68:d5:15:0d:a2:41:30:49:ac:30:fd:83:
                    99:44:41:00:8c:9a:45:8e:d0:02:5a:5f:62:4f:e1:
                    17:4c:c5:56:d1:f0:2c:68:62:aa:66:28:a2:d8:30:
                    e2:4b:8d:a3:cd:f6:c0:c9:9f:86:93:e4:4b:0b:ea:
                    2b:f8:d6:91:f3:32:3f:0c:28:75:43:d8:98:93:96:
                    52:cb:e7:13:b3:a7:68:47:86:f2:67:a7:21:ed:84:
                    af:6f:3c:4d:ae:b4:bc:8d:67:f3:14:9e:30:9f:df:
                    b1:e9:ff:02:e3:27:b2:1e:31:e0:e1:33:fa:37:f5:
                    f5:a7:1b:5d:3a:37:6f:b6:39:45:9b:74:35:01:84:
                    e8:a6:69:8b:ac:ed:a9:77:ac:10:e7:56:50:39:9b:
                    8b:d9:e9:90:3f:93:4c:7d:ba:f7:09:02:64:ec:8a:
                    b6:f2:85:1f:a7:b1:6d:54:bd:96:60:dd:43:b3:5c:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:D4:0F:A0:A8:74:BD:28:DB:F8:F6:73:83:7C:A0:EF:23:5F:A1
            X509v3 Authority Key Identifier:
                keyid:D3:45:B6:97:05:33:DE:54:D0:8F:AA:CF:B6:7E:42:F9:87:FC:CE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D345B6970533DE54D08FAACFB67E42F987FCCE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81iVqZ9n9RSJSYazw3rqyycUbxJ1VwGrfabse2kwV2gT/0/3133382e3230342e3133332e302f32342d3234203d3e20323633383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:91:78:40:4c:e9:84:8d:1c:dd:72:25:ca:6b:76:c8:cf:
         6c:51:d5:41:0f:a2:66:93:36:db:74:92:41:58:8d:00:20:e9:
         a2:ea:a2:d2:86:c7:ba:40:26:8b:f3:63:ea:b8:8d:71:bc:d9:
         64:33:cb:ce:9c:63:df:5c:c5:6c:1a:76:b5:6b:d9:9a:ad:6b:
         ad:86:51:9e:41:29:c8:3e:fd:72:33:58:f5:5c:d7:a9:67:11:
         7c:d8:94:a1:44:9a:c1:be:b2:fc:c1:d7:58:56:7f:1b:63:98:
         2a:3e:ff:9b:ef:ae:65:f8:ac:e4:79:ea:e6:20:a3:5a:55:27:
         e1:1c:61:08:f8:87:fa:61:ad:c6:88:5a:03:32:59:b5:24:05:
         f9:83:d4:49:8f:28:a4:2f:44:a1:a9:be:3f:7c:ca:eb:5a:8b:
         64:9e:a6:1e:64:dd:96:29:92:08:8e:e1:60:3c:27:3e:b4:74:
         24:b8:23:ef:cf:1d:c3:35:33:c8:dd:82:1c:24:be:26:ea:e0:
         4c:ac:ed:13:00:27:e3:47:c3:75:52:67:43:e8:0b:fa:71:1f:
         a5:82:01:fe:89:a0:95:ba:e8:c0:0d:30:d2:53:a3:97:3e:58:
         e8:7b:6a:fa:2c:51:e0:b7:ce:20:2f:6f:8b:99:3a:bf:da:f0:
         b3:a9:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org