Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32392e302f32342d3234203d3e20323634323839.roa
File:                     3133382e3132312e32392e302f32342d3234203d3e20323634323839.roa (raw, json)
Hash identifier:          ENivyXeUhNUuLnBV9mrNSVf/VSpwCblo219n+yo5+DY=
Subject key identifier:   AE:D7:93:82:F0:9A:7C:C9:48:D8:0D:4A:00:12:29:92:DD:3D:E3:00
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       449FF0C3EB62281F44A63A4BF05F78FB5A6E1FA8
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32392e302f32342d3234203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:26:38 +0000
ROA not before:           Wed 12 Jul 2023 09:21:38 +0000
ROA not after:            Wed 10 Jul 2024 09:26:38 +0000
asID:                     264289
IP address blocks:        138.121.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:f0:c3:eb:62:28:1f:44:a6:3a:4b:f0:5f:78:fb:5a:6e:1f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:21:38 2023 GMT
            Not After : Jul 10 09:26:38 2024 GMT
        Subject: CN=AED79382F09A7CC948D80D4A00122992DD3DE300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:7f:cd:51:00:f8:2f:16:b0:72:11:89:d9:
                    8a:02:dc:37:6c:8e:9b:af:eb:7f:28:0e:f2:3d:ec:
                    06:8a:d4:f9:b6:d9:c3:a2:62:b2:bb:b8:ca:6c:74:
                    01:ef:3d:7b:40:51:0f:70:e5:36:32:db:3c:55:a4:
                    75:7d:70:1c:04:3c:46:2b:8d:c0:97:b7:e7:16:66:
                    53:bb:c0:58:51:ef:10:36:3c:4b:bc:ef:50:f8:4f:
                    28:32:be:3b:0c:b9:15:8b:3d:a5:b5:93:b7:5b:c0:
                    bf:ab:d9:8e:ef:63:c3:37:84:e0:e6:e0:0e:04:2a:
                    eb:6e:42:2d:12:46:db:25:41:cc:1f:40:49:7c:2f:
                    b4:41:43:ab:78:4c:c4:d1:c8:b7:d4:bf:4b:76:56:
                    d8:82:67:5b:84:7e:7f:e8:17:2e:4c:1b:a5:bc:81:
                    9b:30:00:4a:6d:46:80:4c:17:f4:fb:26:53:54:99:
                    bb:3a:e1:94:04:e7:0a:16:88:68:a6:80:b3:72:32:
                    27:b3:fa:83:6f:60:ca:01:0a:01:4d:8d:28:e5:10:
                    d5:d5:e4:e7:b2:b4:88:fe:30:97:aa:5e:f4:b6:43:
                    22:87:cc:20:34:7d:73:d3:fa:9f:f9:f5:d0:49:68:
                    dc:86:bc:1b:66:b6:21:23:ff:c4:0f:fd:d5:53:5a:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D7:93:82:F0:9A:7C:C9:48:D8:0D:4A:00:12:29:92:DD:3D:E3:00
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e32392e302f32342d3234203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:ca:7b:7b:52:3d:6f:63:30:c2:34:4f:5d:98:d2:87:b5:
         fc:ec:59:83:da:9f:eb:c3:34:31:94:26:09:23:c6:e4:d4:0a:
         b3:e9:72:7e:24:c9:e0:ca:65:bd:6c:6b:2f:a5:c6:49:11:28:
         22:89:9e:5f:e6:9d:2e:d2:99:c2:83:dd:8d:8f:41:8d:fe:01:
         46:b2:7a:50:d8:4e:e2:62:b8:df:42:ce:9d:75:8e:65:21:60:
         e8:76:68:ec:85:b8:67:aa:00:ac:3e:3d:83:06:83:23:2d:ac:
         8a:55:60:de:fd:66:1d:6b:4a:0e:fa:26:3d:8a:58:c2:b1:f2:
         36:63:80:8f:45:b3:ec:7a:30:77:df:06:76:16:ef:96:de:a9:
         5b:db:0c:d3:d0:b8:b3:ba:39:a7:4c:76:40:1e:b2:4f:b1:06:
         65:64:37:21:d4:38:eb:c5:bd:68:7b:5e:e5:1a:2d:7b:22:a5:
         e0:03:68:17:45:2c:09:7c:af:b8:27:92:e0:85:3b:4b:0c:0f:
         24:64:82:60:b3:5e:7d:e7:41:cb:e3:49:68:5f:ea:87:1e:bb:
         99:15:6f:7d:4e:ba:7b:81:35:68:92:df:95:b2:ac:7f:2c:f2:
         33:bc:5a:fe:07:b0:e0:f6:2f:41:85:5c:4e:44:6e:7f:42:d3:
         df:a4:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org