Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33312e302f32342d3234203d3e20323634323839.roa
File:                     3133382e3132312e33312e302f32342d3234203d3e20323634323839.roa (raw, json)
Hash identifier:          EwlL+0Z5uctda+kJHF3g9Kx/SI/ayRnbXJ38AwDGZys=
Subject key identifier:   41:B4:6A:1A:8D:63:BA:4A:C1:00:F5:20:08:21:E3:57:1B:4A:82:4D
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       40969C91CE88401BD78E998E4A10CFA89EB16267
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33312e302f32342d3234203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:27:14 +0000
ROA not before:           Wed 12 Jul 2023 09:22:14 +0000
ROA not after:            Wed 10 Jul 2024 09:27:14 +0000
asID:                     264289
IP address blocks:        138.121.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:9c:91:ce:88:40:1b:d7:8e:99:8e:4a:10:cf:a8:9e:b1:62:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:22:14 2023 GMT
            Not After : Jul 10 09:27:14 2024 GMT
        Subject: CN=41B46A1A8D63BA4AC100F5200821E3571B4A824D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:31:ec:42:0d:f9:a7:cc:2f:36:89:c2:b4:
                    d3:5a:23:0d:33:ce:4b:e3:1c:b2:5d:1e:57:24:1b:
                    89:ae:91:af:ea:79:3d:a7:b3:1b:40:ee:d4:c3:65:
                    38:c4:22:a8:60:95:a4:94:ee:df:74:23:92:54:b1:
                    fc:a2:62:d9:dd:83:d7:01:81:58:fd:74:fc:5f:5c:
                    72:cc:25:0d:e5:92:e2:7b:93:56:d3:e0:d0:1e:17:
                    55:f6:d7:75:85:a4:ca:35:c2:a8:4b:08:d4:68:54:
                    aa:b6:6b:77:3f:f7:e6:be:ea:bc:d8:b1:31:38:6e:
                    3f:1b:d4:d7:0b:5a:6c:56:cb:2b:91:bd:ef:20:46:
                    d1:cd:82:69:85:b7:42:3b:46:7f:a9:19:18:36:9e:
                    5c:f7:cd:e8:b7:d6:93:ef:65:03:bf:42:50:c6:f1:
                    c0:11:5a:4e:88:6e:23:65:61:30:4b:30:6c:78:b4:
                    48:f5:f1:d3:12:e2:a5:95:f8:a7:16:1e:4d:67:46:
                    09:0d:e0:bb:f0:a4:56:87:81:45:df:b3:5d:78:54:
                    5e:fd:98:c4:66:b9:09:9d:0f:70:b9:78:1b:43:80:
                    ad:1a:bf:78:a6:64:3f:2c:e1:f6:2c:6b:38:75:d0:
                    72:f2:a0:57:c8:4d:d9:45:fc:27:c6:0c:dc:6d:d1:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:6A:1A:8D:63:BA:4A:C1:00:F5:20:08:21:E3:57:1B:4A:82:4D
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33312e302f32342d3234203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:87:6b:56:3a:b6:00:ee:81:ac:49:e1:90:db:b1:6e:ec:ab:
         6f:7b:f9:0f:23:3a:ea:f9:39:fe:fb:6f:c2:8c:4b:a3:5f:45:
         02:78:c7:a2:bc:7d:96:1d:39:19:c6:54:e8:2e:a6:80:77:4f:
         4f:64:37:09:b2:dd:67:03:8c:82:09:f9:61:79:14:af:f9:7b:
         6c:0f:ca:fc:62:0f:62:1b:b9:24:1a:fc:ab:12:78:a3:c4:9d:
         b4:c2:c4:cc:8c:d1:62:77:a2:47:99:92:0d:3d:14:e6:57:2d:
         9a:72:be:76:c7:32:9b:75:88:ed:1f:06:43:52:59:62:39:91:
         5f:06:86:fe:2b:2d:72:64:4e:df:9f:47:06:c1:46:f2:a1:4f:
         23:92:48:eb:37:14:af:51:c5:e5:14:15:84:4d:09:7d:95:c3:
         39:bf:a2:59:c1:0b:6f:7d:90:04:5b:a9:1b:34:ab:a7:1b:1d:
         33:dd:be:6b:5c:7d:38:77:ec:0b:51:51:c6:de:b3:fb:fa:d9:
         e7:23:cc:ce:0e:70:1b:c2:f7:63:36:43:63:cf:bb:dc:31:ae:
         f5:51:8f:82:b6:60:b5:2c:81:64:80:d6:27:15:19:5b:da:7c:
         a1:24:fe:0b:8f:c2:e8:fa:ba:6d:bb:0d:86:da:24:0d:07:e9:
         a1:eb:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org