Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3232203d3e20323730363632.roa
File:                     3133382e3131372e3234382e302f32322d3232203d3e20323730363632.roa (raw, json)
Hash identifier:          bPWsTnW0ZdDIpykbTXMJot3AR2pprqwOAzs2VPhefnM=
Subject key identifier:   C5:85:C0:EC:EC:BC:C8:52:7D:40:40:F7:DF:6F:63:1D:81:FF:3A:EB
Certificate issuer:       /CN=0C381C56BB847DA0E4874CE783921BF1D350DE14
Certificate serial:       338D280668FFD0D2257ACC7F8ECF984B77D8061F
Authority key identifier: 0C:38:1C:56:BB:84:7D:A0:E4:87:4C:E7:83:92:1B:F1:D3:50:DE:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3232203d3e20323730363632.roa
Signing time:             Mon 18 Jul 2022 16:52:42 +0000
ROA not before:           Mon 18 Jul 2022 16:47:42 +0000
ROA not after:            Mon 17 Jul 2023 16:52:42 +0000
asID:                     270662
IP address blocks:        138.117.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:28:06:68:ff:d0:d2:25:7a:cc:7f:8e:cf:98:4b:77:d8:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C381C56BB847DA0E4874CE783921BF1D350DE14
        Validity
            Not Before: Jul 18 16:47:42 2022 GMT
            Not After : Jul 17 16:52:42 2023 GMT
        Subject: CN=C585C0ECECBCC8527D4040F7DF6F631D81FF3AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1c:7a:6d:ed:b8:ee:f1:26:8d:70:2f:15:e5:
                    35:8b:bb:03:8d:ad:77:55:d7:ef:a9:b2:ce:ae:c6:
                    08:d3:7e:81:93:16:f9:6f:69:f6:db:0b:ee:d3:31:
                    58:6c:97:11:b1:16:9c:bf:ed:80:47:7e:b7:85:7d:
                    3b:53:00:f4:9b:d1:ec:5f:6f:93:1c:fb:b3:3c:c3:
                    a3:07:43:e5:9b:dd:22:88:90:6b:f8:8d:51:77:8b:
                    79:62:0c:23:fa:c0:b2:9a:92:68:46:a3:9b:67:98:
                    da:a9:26:8b:b8:a5:4c:70:9a:7e:fe:af:d3:1f:67:
                    26:a3:a8:a3:36:24:d1:63:e3:2c:ad:08:d2:95:e0:
                    c4:c0:42:4b:29:4e:7d:12:30:1d:3f:61:62:8f:2a:
                    bb:d3:15:54:21:ea:f1:bd:e2:87:f9:fa:29:e5:f5:
                    b0:11:d6:38:5e:e1:f9:bc:e8:4c:0b:1c:2d:02:1a:
                    90:57:c5:19:60:fd:28:0e:8b:f6:5a:97:78:96:b8:
                    41:4c:ee:da:06:80:a8:da:12:cd:3c:2d:4e:2a:7f:
                    9c:38:f5:89:7f:10:42:c5:21:00:82:d1:48:64:57:
                    9b:87:f7:7d:4f:a7:d5:68:1c:aa:94:78:02:ac:54:
                    6f:cf:63:d0:0f:82:e5:8e:8b:8d:8c:b6:12:67:0c:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:85:C0:EC:EC:BC:C8:52:7D:40:40:F7:DF:6F:63:1D:81:FF:3A:EB
            X509v3 Authority Key Identifier:
                keyid:0C:38:1C:56:BB:84:7D:A0:E4:87:4C:E7:83:92:1B:F1:D3:50:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C381C56BB847DA0E4874CE783921BF1D350DE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234382e302f32322d3232203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:92:26:1a:8b:84:cd:f1:88:94:a4:59:91:4e:ce:c5:fc:7e:
         16:da:90:fc:2a:f3:8b:37:fc:26:29:36:7d:2e:93:ec:c8:57:
         08:6b:8a:fa:15:6e:5c:c9:47:88:de:9e:78:67:b3:ab:3f:36:
         d1:97:d2:c3:d3:3b:f1:51:d6:1b:6d:99:2a:59:09:2b:43:f1:
         ae:59:2f:f6:01:07:e0:c6:91:13:a7:a8:55:76:c4:b9:9c:52:
         f9:a3:b6:89:97:c2:25:d9:70:de:cd:9a:fc:4a:2f:f9:7c:92:
         a7:25:47:71:e5:0a:f5:77:98:46:49:a4:2e:d3:bf:ba:62:71:
         25:10:de:11:2a:7a:dc:bd:27:22:53:4a:1c:9c:07:45:70:a0:
         34:2a:b2:7d:80:ec:dd:24:d3:a5:e4:fb:c8:73:a1:75:ae:8e:
         38:0b:75:cd:a7:4d:f5:83:89:b6:07:6e:91:2c:39:3b:74:8f:
         4a:df:76:a9:30:73:c8:54:42:41:2a:13:58:e7:3b:d0:10:8a:
         f4:77:86:34:98:d5:ce:a9:03:27:b3:e3:de:87:fd:fb:a2:14:
         0c:c2:ee:5d:99:de:d9:9c:2a:89:6a:c6:fb:4c:20:fb:3b:b2:
         e7:6b:8f:e8:c4:4b:79:8c:d9:81:30:84:61:94:1a:27:4d:be:
         35:5d:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org