Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32332d3233203d3e20323634323839.roa
File:                     3133382e3132312e32382e302f32332d3233203d3e20323634323839.roa (raw, json)
Hash identifier:          x6EFQfcGYrp9+AWNEnPydJ1iq2t1Yh83xarM/mhT8eo=
Subject key identifier:   3F:F0:0A:EA:68:08:EB:65:B7:DF:B9:53:65:83:3C:95:14:90:D8:3C
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       3CA65C565ECF90460ED72B4F93AAC45939561D80
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32332d3233203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:25:46 +0000
ROA not before:           Wed 12 Jul 2023 09:20:46 +0000
ROA not after:            Wed 10 Jul 2024 09:25:46 +0000
asID:                     264289
IP address blocks:        138.121.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a6:5c:56:5e:cf:90:46:0e:d7:2b:4f:93:aa:c4:59:39:56:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:20:46 2023 GMT
            Not After : Jul 10 09:25:46 2024 GMT
        Subject: CN=3FF00AEA6808EB65B7DFB95365833C951490D83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:a5:c8:e4:3d:84:0a:41:81:fa:88:76:c5:
                    6f:af:21:df:1f:db:6a:ae:f0:93:6b:b4:3a:54:72:
                    72:35:af:9d:6b:a2:8f:75:92:b4:47:82:f3:84:31:
                    f8:02:e5:a9:21:af:c7:53:01:32:fa:2b:bb:0d:53:
                    50:77:65:35:c4:01:95:3e:a6:42:19:ee:23:50:df:
                    89:e2:4b:1a:4c:5c:e1:80:21:15:12:ac:ad:88:02:
                    5f:02:9b:04:79:97:0a:f9:8c:30:34:96:2a:31:90:
                    e1:8a:67:92:a9:f7:e5:d7:ce:c6:67:1b:2a:16:24:
                    ce:33:72:37:c0:50:9d:c3:dc:6c:fa:4d:33:c3:45:
                    7c:d1:6f:fc:87:8d:84:a6:f3:b6:a6:59:53:c5:02:
                    e8:87:26:0e:05:e9:03:43:44:44:09:6a:9b:d1:4d:
                    88:39:b9:72:45:7f:6b:53:4b:59:7b:25:9a:ed:51:
                    3a:55:be:61:8d:ee:26:4b:12:12:ed:b3:cc:76:9c:
                    f7:9e:0a:03:62:31:63:ad:33:f1:e6:7f:0a:15:f3:
                    5b:a9:2d:02:6e:2e:46:00:f6:8d:9d:bc:0e:a5:08:
                    e9:03:ac:7c:38:eb:e7:45:51:dc:f7:33:71:0f:3b:
                    2d:3d:87:91:da:84:a3:61:fb:9d:97:91:57:a1:4a:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:0A:EA:68:08:EB:65:B7:DF:B9:53:65:83:3C:95:14:90:D8:3C
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32332d3233203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:60:3d:d3:ae:11:33:3e:36:2f:ba:3d:bf:b1:f2:e3:cd:ce:
         15:d0:d6:ba:bc:90:7b:09:83:25:3e:ea:e5:c9:82:8f:34:72:
         50:b7:51:3e:71:59:dc:f4:0b:fc:6a:ca:02:32:59:6f:e0:31:
         6a:22:f5:82:16:3d:d8:0f:21:79:01:32:12:e7:de:38:d7:df:
         1a:a2:36:e1:2d:13:ef:25:a1:ab:71:e5:ed:a4:70:0f:30:5b:
         3f:aa:36:37:e5:78:e6:b8:84:74:78:55:0f:73:af:2a:ec:f6:
         e3:9c:ed:17:ff:80:28:b0:21:65:df:69:30:7a:22:3b:38:67:
         3c:6b:ee:35:01:03:30:18:c2:5f:61:28:1c:2a:a8:94:93:37:
         ba:93:12:a2:91:41:1f:71:50:0c:f9:49:e0:64:e3:39:c1:bd:
         3d:65:5d:b1:1b:80:f8:62:ee:f4:1a:b0:1f:7c:8c:72:6b:68:
         90:82:0a:35:50:5a:6d:d6:e0:6d:ae:9b:6b:f7:01:4f:2c:7e:
         a8:5a:00:c0:63:9d:1d:f1:52:37:b7:c5:8d:bc:16:77:46:56:
         44:c4:68:4b:66:02:c4:4f:ce:e7:95:4c:cb:04:8c:73:6a:c8:
         e8:8a:49:bd:ae:76:0f:e5:fd:8c:5b:c6:58:70:14:13:58:ce:
         9f:de:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org