Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32342d3234203d3e20323634323839.roa
File:                     3133382e3132312e32382e302f32342d3234203d3e20323634323839.roa (raw, json)
Hash identifier:          m4JFSA6FtaRlsdGmoKDB49ef0yjYFrA4Hi/o76dTSk8=
Subject key identifier:   B2:D7:F4:07:5C:69:62:74:12:A6:6A:8C:C8:46:9D:32:6F:92:94:CB
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       3B8B6C93551D1C5CB6B1CAEBD8533474C2B49590
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32342d3234203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:26:25 +0000
ROA not before:           Wed 12 Jul 2023 09:21:25 +0000
ROA not after:            Wed 10 Jul 2024 09:26:25 +0000
asID:                     264289
IP address blocks:        138.121.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:6c:93:55:1d:1c:5c:b6:b1:ca:eb:d8:53:34:74:c2:b4:95:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:21:25 2023 GMT
            Not After : Jul 10 09:26:25 2024 GMT
        Subject: CN=B2D7F4075C69627412A66A8CC8469D326F9294CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:b6:2f:46:d1:d6:90:64:3f:3d:f0:8a:86:
                    58:7c:0e:eb:1f:32:34:d7:59:17:79:c8:e2:2b:7b:
                    72:a7:5d:b2:77:a4:9f:b4:fc:f1:8f:99:66:bf:34:
                    52:b8:59:cc:a1:78:f8:a3:ea:61:96:ec:80:48:ee:
                    3c:ca:5d:1c:02:9d:06:90:14:38:86:fc:cf:ad:c4:
                    99:7d:b0:de:c5:e2:bd:73:f8:7d:9a:c2:7f:d6:8c:
                    13:5e:e3:b4:3f:ce:f2:94:d0:d6:9e:b7:e4:32:d4:
                    ec:f2:ad:7a:bc:21:7f:8b:4f:2d:85:91:37:15:6d:
                    7a:dc:6f:34:a3:bb:9a:15:f1:49:87:6c:28:fd:7f:
                    dc:a3:28:eb:5c:99:38:81:9e:0a:05:02:6f:cb:d9:
                    44:35:1b:65:04:e8:93:44:f9:1f:c5:8c:e3:11:5a:
                    75:50:e1:71:7d:97:29:06:76:53:7c:83:52:11:eb:
                    76:07:51:dd:b4:7f:44:53:11:aa:9a:b0:1c:7d:4e:
                    07:f5:f4:9c:0f:77:0e:0f:68:2a:f7:1e:3d:2d:f6:
                    02:83:0e:58:bc:99:9a:fd:f6:16:a0:95:97:94:bd:
                    e5:87:74:83:a0:39:c1:cf:8b:0c:3b:23:c7:4b:dd:
                    09:4e:0d:4f:db:32:c3:81:ff:95:8c:c4:fc:63:57:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:F4:07:5C:69:62:74:12:A6:6A:8C:C8:46:9D:32:6F:92:94:CB
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32382e302f32342d3234203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:84:85:01:7c:97:f6:8c:bc:13:51:b8:c8:e5:da:30:e7:29:
         8e:57:6d:13:5e:6e:3d:40:21:05:f9:7a:92:25:80:b1:dc:57:
         91:6b:04:04:a7:0c:63:d9:27:db:f9:7d:a6:f3:67:93:b0:c9:
         79:38:3e:3f:a9:69:8f:0d:3b:e1:e4:a3:6c:30:84:58:49:c4:
         f4:e3:10:3c:9f:f0:6d:ee:f1:b0:eb:9c:50:8c:32:89:68:27:
         e0:c7:9b:9e:42:9c:9a:38:c5:ed:2a:25:99:7f:c5:15:73:18:
         c7:db:53:b2:69:a4:c7:75:d7:c7:02:e8:ee:ba:bc:22:b9:71:
         da:4a:e5:e0:f7:fc:e7:de:29:59:49:4d:c2:52:f9:25:7f:30:
         0a:7d:e1:ad:8f:1f:f9:c4:3d:1a:05:cf:77:36:28:45:ab:22:
         57:83:a5:42:3a:c4:0b:4e:cb:db:12:c7:43:2c:01:82:45:94:
         dd:10:fb:c4:be:f9:91:b4:a5:68:0f:23:3b:23:07:51:fe:8d:
         60:ce:66:d6:d2:7e:bb:35:6a:3a:ff:e7:d1:92:5e:b2:76:68:
         57:de:58:88:e8:78:10:66:5b:b2:b7:a9:ca:49:32:9e:d7:10:
         71:c0:fa:9a:ae:97:31:fc:e6:69:42:da:7a:3a:de:8b:0b:80:
         5d:af:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org