Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32332d3233203d3e20323634323839.roa
File:                     3133382e3132312e33302e302f32332d3233203d3e20323634323839.roa (raw, json)
Hash identifier:          3JZkgoyaobYxnDT5cdFn7H6LxDfaOrWpWUGAkNvHxgE=
Subject key identifier:   05:DE:AA:25:C9:96:E8:98:8E:71:11:DC:3F:A4:D4:8D:3E:CF:F3:42
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       287DFF4A9E5E9AB2DB4B602D71E3D11E148C1145
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32332d3233203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:26:08 +0000
ROA not before:           Wed 12 Jul 2023 09:21:08 +0000
ROA not after:            Wed 10 Jul 2024 09:26:08 +0000
asID:                     264289
IP address blocks:        138.121.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:ff:4a:9e:5e:9a:b2:db:4b:60:2d:71:e3:d1:1e:14:8c:11:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:21:08 2023 GMT
            Not After : Jul 10 09:26:08 2024 GMT
        Subject: CN=05DEAA25C996E8988E7111DC3FA4D48D3ECFF342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:ec:27:5d:52:ab:ea:a7:24:c9:bf:09:53:
                    00:3a:8f:0e:07:08:87:bd:b9:04:83:4e:f5:eb:54:
                    42:61:93:62:3c:35:ab:1c:cd:18:24:a5:fa:eb:2d:
                    d9:db:31:c9:98:67:5b:f2:f5:d1:9c:80:86:75:13:
                    ff:8e:f8:ea:61:77:14:83:2e:1a:e4:74:6e:23:71:
                    a2:f7:20:e2:93:24:a7:3c:05:4d:ff:c9:d2:6f:df:
                    a8:ae:86:42:f6:2f:5f:be:c0:d5:45:c8:1e:f8:76:
                    63:a5:a0:e2:06:e4:bd:ca:99:cc:ae:8b:17:39:f2:
                    5c:4c:8d:91:2e:7e:0d:a8:19:04:de:11:3c:36:16:
                    20:8d:79:07:37:85:1b:52:21:23:74:72:58:15:e0:
                    06:3e:2a:a5:fe:42:4e:87:4f:05:6a:f6:35:c8:9b:
                    40:20:66:7e:f1:d3:e7:1c:cf:7b:e0:e3:0b:a3:d4:
                    b8:91:37:ef:d0:51:e9:b7:d5:0d:49:99:24:13:f4:
                    8d:82:ce:79:07:18:4e:16:f0:8c:9d:5e:13:4d:f0:
                    19:62:39:67:14:5d:54:b7:a7:cb:67:88:49:ad:de:
                    63:c0:db:5d:ae:72:7f:27:be:94:47:e3:56:0c:60:
                    8a:56:45:7e:45:eb:5e:a0:e0:99:9f:b4:8c:5f:8e:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:AA:25:C9:96:E8:98:8E:71:11:DC:3F:A4:D4:8D:3E:CF:F3:42
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32332d3233203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:3c:a9:99:8a:1e:03:46:69:18:64:f6:a5:4a:9c:b0:03:
         11:39:60:f2:3a:40:50:6d:a0:3e:87:74:c7:83:4b:4f:4f:cf:
         c8:1d:40:e3:0a:0e:90:4a:03:fa:8e:da:3f:60:6b:95:d6:7f:
         2c:8a:cb:ac:ce:34:94:28:70:3a:be:41:19:c0:84:2d:53:1e:
         61:0f:28:e3:6a:21:c5:28:23:5b:b6:82:ce:f4:15:68:9b:22:
         0d:37:fd:f1:76:ed:18:c7:a6:aa:ff:56:4c:39:21:c0:88:fb:
         2e:51:c0:d5:7a:ca:14:92:ff:c0:35:3d:da:c8:13:44:13:d6:
         23:41:71:39:e4:11:75:78:db:27:a7:50:61:e9:b6:67:62:8b:
         a7:69:c2:1a:0e:e7:8f:3a:40:9d:92:07:d4:cd:a3:22:c4:83:
         f7:a2:f2:64:64:d7:cb:45:e3:27:b5:ca:00:5d:01:ed:9f:b8:
         b7:f1:0d:4b:f9:ef:42:a3:85:9c:4a:2f:c0:60:09:ec:da:d4:
         f3:53:7c:f7:57:26:88:77:85:e5:ef:ba:47:a1:1b:2c:31:f5:
         0b:8a:39:80:f5:93:a3:ac:7f:d4:82:f9:fc:0f:53:a1:b4:b7:
         b2:cb:15:99:39:76:a3:50:ef:7c:d2:44:e2:0f:b4:84:1b:cf:
         0e:75:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org