Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa
File:                     3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa (raw, json)
Hash identifier:          PS+OaCEKWXpeV+4hIXdJ3bamytvyQXfU/F4SzZsXJZ4=
Subject key identifier:   1D:73:05:20:F8:4B:F9:FC:D8:F6:70:34:FC:18:60:B4:64:1A:98:8B
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       4709178EA25385CEF74BEF2A1542BC42273C45E9
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     264590
IP address blocks:        138.36.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:09:17:8e:a2:53:85:ce:f7:4b:ef:2a:15:42:bc:42:27:3c:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=1D730520F84BF9FCD8F67034FC1860B4641A988B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:ac:1c:22:b3:4e:53:96:9c:da:cc:c0:92:
                    87:2c:f1:11:ca:d4:98:3e:04:08:fd:f2:a5:e2:dd:
                    a6:b2:7d:16:18:d5:51:ff:6f:22:3d:b4:ab:85:a9:
                    dd:b4:32:6f:5b:94:fa:a1:0e:ae:32:6d:50:46:5a:
                    3c:d7:ff:da:76:c6:23:68:aa:93:81:b2:0b:63:d7:
                    a1:d9:d9:51:17:48:59:48:a3:e7:60:5b:f0:68:6f:
                    d3:18:fa:c9:ce:c4:f2:32:cf:bd:f4:0c:e4:4b:8a:
                    56:65:87:f8:83:03:1f:07:8b:83:99:3d:e8:4a:c2:
                    7a:b7:82:18:77:f4:82:4c:fb:94:af:ad:77:c0:3c:
                    12:65:50:0f:11:57:88:0f:04:d0:07:3b:d6:01:b7:
                    b1:04:d2:b8:10:19:94:a0:d1:7d:e9:f6:57:5f:99:
                    92:cb:a3:89:02:a8:20:68:47:59:6c:11:d8:8a:3d:
                    31:ce:e6:58:9f:2e:55:4f:da:46:35:50:39:3d:73:
                    9f:7b:33:9f:90:3b:ba:27:bc:c7:c3:d2:84:9d:6b:
                    a3:5f:22:59:cf:84:dd:8c:90:ab:34:a1:11:0a:44:
                    f3:55:2a:d4:47:24:9f:92:44:96:c9:d4:b0:7a:f5:
                    e2:f5:40:8d:d6:de:c9:00:d4:54:76:e5:0a:a2:f4:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:73:05:20:F8:4B:F9:FC:D8:F6:70:34:FC:18:60:B4:64:1A:98:8B
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:de:ae:32:0f:ee:11:ac:bd:3a:d5:83:7b:8c:8c:9b:06:
         4f:8d:a3:b1:08:d7:ef:c7:d1:a3:7c:2b:f1:ad:80:51:92:ba:
         6c:1b:06:c1:b3:e7:8e:09:21:a0:f3:db:71:c6:55:77:98:a7:
         eb:15:fb:fe:2b:07:ad:a9:65:e4:cf:f5:0d:26:16:6f:d6:cb:
         14:cd:0a:12:54:db:ef:67:56:ba:25:70:3f:e0:de:bc:de:93:
         56:13:2e:f2:ae:96:ec:c3:e4:be:1a:e3:0d:a9:26:5d:10:be:
         74:02:f4:4f:22:e3:f5:38:19:a6:c5:6d:fe:85:73:12:d7:a9:
         93:7d:95:71:e9:e6:77:5e:13:25:6a:82:1a:2d:d3:1e:f6:55:
         9e:8f:5a:35:cb:a8:f4:eb:06:0b:91:d9:59:38:4d:61:4f:ab:
         6b:5d:48:3b:cb:3b:cd:64:7f:3f:b2:9d:41:eb:17:1d:01:e5:
         15:54:7a:dd:0f:14:db:bd:81:ad:7a:79:bf:66:2a:4b:9b:cd:
         d5:d0:75:8f:6c:25:d8:3b:1b:a2:a8:21:bc:b3:9f:ac:03:da:
         7b:b8:58:ef:42:57:50:13:22:d2:97:2a:f5:55:ba:9d:37:64:
         0f:26:01:0e:a7:8f:62:52:ad:5d:50:a8:f9:64:d6:a8:7a:1c:
         3d:6e:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org