Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
File:                     3133382e33362e33362e302f32322d3234203d3e20323634353638.roa (raw, json)
Hash identifier:          JIZGUnym+106/HZgRRTy9PAKnMFIyV6vBYMGUkfEHQ0=
Subject key identifier:   4C:2F:0D:B7:1D:CB:8B:F9:AF:39:75:97:73:11:81:2D:2D:14:CF:0B
Certificate issuer:       /CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
Certificate serial:       3FF9628E8300441593DD986EC2558294942BFBC8
Authority key identifier: DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
Signing time:             Tue 13 Feb 2024 19:28:48 +0000
ROA not before:           Tue 13 Feb 2024 19:23:48 +0000
ROA not after:            Tue 11 Feb 2025 19:28:48 +0000
asID:                     264568
IP address blocks:        138.36.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f9:62:8e:83:00:44:15:93:dd:98:6e:c2:55:82:94:94:2b:fb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE07C11A82DA02165ECBCEE4DE1C444375895E4
        Validity
            Not Before: Feb 13 19:23:48 2024 GMT
            Not After : Feb 11 19:28:48 2025 GMT
        Subject: CN=4C2F0DB71DCB8BF9AF3975977311812D2D14CF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:94:fe:57:e1:c6:a0:73:c9:58:73:cc:46:
                    ba:34:f9:95:a1:5c:98:0d:3a:e7:d9:1e:4d:98:36:
                    e7:3c:fb:91:53:f5:c5:94:13:00:6b:4a:ea:3f:e0:
                    bf:20:49:9d:73:0e:32:0b:9f:7d:8d:5d:2a:ae:86:
                    c9:65:7b:07:0e:2c:24:9c:42:21:4b:73:c9:2c:53:
                    b1:c6:13:6c:04:0b:94:52:a5:55:09:72:e6:95:eb:
                    6e:8e:46:c4:05:2c:ce:84:71:bb:5c:79:16:50:99:
                    d3:87:4e:53:15:88:66:17:d1:9c:f7:b3:c1:fa:f0:
                    7d:c8:30:20:5f:87:53:42:c3:43:65:d2:16:bb:f6:
                    81:a5:5f:08:a6:80:0d:01:ca:13:a9:1f:40:b1:d3:
                    0d:80:ae:93:bd:20:33:95:64:41:ad:6a:7c:f5:1f:
                    88:ff:54:84:6b:17:a2:44:26:14:68:22:21:eb:f1:
                    de:6b:1c:4b:72:70:38:38:dc:85:a8:bb:6c:d0:24:
                    3b:d2:87:f7:41:e6:ff:b4:b4:b5:8e:1f:16:1b:03:
                    52:ac:33:ac:d6:fe:a2:9c:23:9f:70:a3:c5:bc:bf:
                    b1:89:f3:7b:35:5d:01:65:9c:29:c3:b6:de:c3:ab:
                    93:69:fc:9b:2e:e8:f4:8f:1a:7a:8d:4c:93:e4:28:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:0D:B7:1D:CB:8B:F9:AF:39:75:97:73:11:81:2D:2D:14:CF:0B
            X509v3 Authority Key Identifier:
                keyid:DD:E0:7C:11:A8:2D:A0:21:65:EC:BC:EE:4D:E1:C4:44:37:58:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE07C11A82DA02165ECBCEE4DE1C444375895E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:2d:79:49:82:e1:ec:c5:e2:64:0c:89:ca:19:92:85:b3:
         ed:af:2c:21:37:a2:6a:d3:09:0c:a0:a2:f6:0d:c1:7d:4d:7d:
         88:6f:37:9b:03:45:80:60:23:83:f8:f3:db:a1:82:5f:86:1c:
         2d:79:4f:03:b2:5c:0a:0b:db:44:bc:d0:2a:6d:53:e2:c2:73:
         24:35:2e:1f:c8:3b:89:3c:40:ba:eb:98:4e:5d:a9:b4:72:bd:
         d0:03:e3:3d:48:aa:a9:25:14:bc:7a:e8:15:23:d6:e9:a0:d8:
         5a:3c:9f:74:3e:22:3e:17:e3:0c:44:48:b2:b9:8a:5f:2d:26:
         a6:a6:68:8a:6b:53:8c:84:ca:04:03:37:5e:b1:2e:47:75:51:
         8f:4d:ab:a2:73:27:95:24:8f:86:c4:18:1d:de:15:fc:89:3e:
         60:75:91:ad:7d:ea:a3:2e:8a:a1:df:5d:f1:c6:94:be:4c:f2:
         f9:79:4c:c2:5d:05:9c:83:78:cf:29:7c:2b:1f:54:1d:5d:47:
         d1:6e:c8:b1:76:7d:59:69:27:ad:2a:1e:95:d3:40:1d:40:66:
         89:66:c3:c7:ac:f1:51:fe:a0:1d:94:f0:74:74:22:0b:3f:48:
         1b:89:eb:f9:33:cf:56:d8:73:3f:55:bc:dc:80:cf:9c:31:e6:
         a3:20:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org