Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
File:                     3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          fDQ8t8fclWeSw18W89jgNOkdJk2Ld2/4w8VEubz/ZHA=
Subject key identifier:   FD:6C:30:AA:D9:74:E4:98:09:4A:30:6C:FB:E5:B7:B1:50:62:27:57
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       112F18D45DD2639CDBF49A96D35A7BB27C891290
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:47 +0000
ROA not before:           Wed 21 Dec 2022 17:11:47 +0000
ROA not after:            Wed 20 Dec 2023 17:16:47 +0000
asID:                     28146
IP address blocks:        138.186.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2f:18:d4:5d:d2:63:9c:db:f4:9a:96:d3:5a:7b:b2:7c:89:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:47 2022 GMT
            Not After : Dec 20 17:16:47 2023 GMT
        Subject: CN=FD6C30AAD974E498094A306CFBE5B7B150622757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:a0:b1:a9:6f:5f:15:63:69:75:67:76:26:
                    7d:da:5f:80:c4:9d:c9:f4:e0:88:00:cb:4f:f0:e5:
                    8a:a6:15:f8:31:17:d9:a1:f6:47:3f:c7:fa:6e:4e:
                    9e:57:c8:e9:61:1f:89:8a:a8:1d:76:41:15:c5:99:
                    48:90:f3:3d:33:89:d4:53:23:58:0e:1b:06:7c:82:
                    85:d6:be:29:82:c7:b3:6f:b3:70:70:d2:3d:7b:4d:
                    44:aa:83:7a:1f:0d:90:ff:fc:2a:7c:60:84:4b:0f:
                    f2:92:66:11:3f:b9:aa:78:c7:2a:58:01:0e:4e:76:
                    5e:15:4e:6e:26:3e:1c:a5:fa:3f:7b:09:fa:df:be:
                    ac:6d:b4:55:e6:aa:0f:05:0e:27:c5:21:10:08:d3:
                    d7:dd:af:a2:5b:c6:23:7d:4f:05:c5:a7:31:ae:3e:
                    bf:66:9f:4a:14:0c:86:ab:e1:3b:49:30:42:a9:3b:
                    93:69:2a:13:ef:ae:5b:0b:58:b7:73:42:12:ac:f5:
                    67:c1:10:58:c4:65:a7:b1:90:9c:90:b3:60:25:c1:
                    3e:31:d9:6a:ce:e6:1d:5c:5d:06:35:f2:c6:6a:f0:
                    fc:36:c0:04:c7:cc:04:80:94:25:fb:55:98:87:12:
                    a9:41:8e:aa:0d:6d:c7:4d:52:6c:20:19:69:a2:25:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:30:AA:D9:74:E4:98:09:4A:30:6C:FB:E5:B7:B1:50:62:27:57
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3138362e3131362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:f4:6b:ac:a7:cc:7e:df:a8:ef:85:21:ae:a7:fc:8b:43:33:
         83:04:a2:37:92:bc:e8:61:41:00:8b:df:13:66:4f:64:c4:f1:
         af:ea:ff:b8:86:89:22:ba:69:b7:7b:f0:9d:18:44:cd:c9:57:
         51:03:82:4c:4e:ef:0e:74:fd:3b:c1:e5:a1:4f:11:37:53:5a:
         0b:5d:52:e7:60:ca:2c:07:7a:10:22:f7:00:8d:4c:5d:7a:50:
         b9:52:6b:42:96:16:9b:f8:5e:7e:ba:e6:c8:1e:6b:29:eb:7a:
         10:bb:f2:a9:53:17:fe:58:57:95:b1:82:49:d9:b0:86:1c:94:
         06:75:6c:15:2a:f7:ac:4a:17:e4:82:48:20:b4:38:33:7f:9e:
         cb:50:70:ff:3a:48:8f:90:14:a4:0d:ac:90:d3:87:ea:36:20:
         84:bf:65:79:13:55:60:6f:1f:8a:cb:31:26:a8:62:be:47:4c:
         e5:17:7c:f5:77:43:cb:cf:6a:11:d9:8b:1c:ae:b0:41:3e:43:
         77:af:07:f6:f4:87:53:fc:8b:b8:d4:5e:1b:a3:19:32:58:c5:
         74:fd:53:7c:1f:b0:f0:c2:2a:fb:8c:d8:b4:50:37:ef:28:b5:
         e5:1c:04:d5:63:0b:50:fd:e6:fc:60:70:cb:3f:63:14:fb:5b:
         2f:02:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org