Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3234203d3e203631363332.roa
File:                     3133382e3132312e3233362e302f32322d3234203d3e203631363332.roa (raw, json)
Hash identifier:          3ZPUwYjxtDW6mNX935Y9Y3MvmK13qPEbybX3rgg9H+s=
Subject key identifier:   F9:F2:84:46:A6:AF:64:D8:4D:B8:CC:D2:16:ED:F7:82:4F:96:7C:84
Certificate issuer:       /CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
Certificate serial:       49036E6C75A2CE2D4E8760E06D050129B7EA4C72
Authority key identifier: A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3234203d3e203631363332.roa
Signing time:             Mon 21 Feb 2022 14:20:00 +0000
ROA not before:           Mon 21 Feb 2022 14:15:00 +0000
ROA not after:            Mon 20 Feb 2023 14:20:00 +0000
asID:                     61632
IP address blocks:        138.121.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:03:6e:6c:75:a2:ce:2d:4e:87:60:e0:6d:05:01:29:b7:ea:4c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4
        Validity
            Not Before: Feb 21 14:15:00 2022 GMT
            Not After : Feb 20 14:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:db:90:0c:86:8f:e8:67:20:37:73:35:3b:2b:
                    f6:1d:1a:55:c9:52:fd:a0:ba:57:10:9c:41:ac:a9:
                    03:c9:9c:3b:a2:3e:f5:a7:cb:ac:e1:cb:8b:e8:f1:
                    d7:8b:c7:eb:f0:4b:48:b9:84:28:80:2e:87:a1:65:
                    da:9a:68:8e:78:3b:75:b5:1b:d3:b2:aa:8e:18:f6:
                    4d:b2:1d:b9:da:1c:b6:fd:e1:0b:37:fe:52:96:8c:
                    fd:b0:0b:b4:86:6e:6f:f6:09:f7:94:4f:b4:85:ad:
                    86:83:b4:15:03:5b:fb:31:fb:ab:e4:fb:9c:76:81:
                    62:e9:1a:68:27:c0:6a:e7:ac:8c:04:2d:86:77:16:
                    b1:99:d4:a4:9c:24:60:59:dc:f0:61:1b:cc:96:8b:
                    07:23:f1:da:72:5b:90:d7:2b:cd:5c:90:bb:80:c1:
                    80:db:4d:ea:6b:3e:12:d0:fe:8e:b4:08:7c:ad:32:
                    ef:67:7f:93:23:1a:d5:aa:f9:6a:46:c2:a6:ce:f2:
                    35:a1:33:9f:22:3e:53:7a:dd:a4:9e:e8:30:28:10:
                    2b:8f:2f:f3:71:54:09:9f:ab:ed:a0:d3:ac:55:18:
                    d2:86:e9:04:cf:77:f2:69:05:6f:4f:09:6e:d9:c2:
                    39:4d:f3:3a:3f:aa:3c:da:59:66:99:4b:08:20:f5:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:84:46:A6:AF:64:D8:4D:B8:CC:D2:16:ED:F7:82:4F:96:7C:84
            X509v3 Authority Key Identifier:
                keyid:A7:A9:4F:13:9E:AB:DF:3D:B9:FC:5F:1C:56:6F:4C:7A:64:D5:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7A94F139EABDF3DB9FC5F1C566F4C7A64D587D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3234203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:61:9c:6d:af:0b:6b:73:f6:6c:97:14:cd:a1:52:d0:e0:
         a1:e9:b8:ce:e0:b2:b0:39:41:45:3b:3f:5c:58:dc:64:6e:30:
         6e:30:01:e3:57:12:19:d1:cd:04:ef:a6:07:02:c7:b4:18:a5:
         9a:f9:92:60:bd:9d:b1:88:12:58:11:94:0b:15:c8:de:e0:d5:
         30:8d:b9:1e:ff:ee:09:6c:f5:e6:bb:20:bc:8e:2c:59:e6:d2:
         89:62:07:7c:86:0a:0b:b7:59:7a:d0:e6:3b:e6:91:10:1d:b9:
         4c:e2:dd:66:46:f1:5d:e0:66:70:d8:ed:23:17:3f:f6:82:26:
         52:62:b8:50:9d:f0:ec:d5:f9:d0:d6:fb:c3:9e:96:3d:d3:55:
         d9:60:10:d1:9c:2e:1f:5b:47:41:3e:ec:d6:5f:3e:42:31:ee:
         f8:ac:5f:ac:52:63:66:50:3b:79:c6:87:f3:5f:90:72:5b:7f:
         f0:1e:80:aa:b2:89:e6:97:a3:35:cd:7d:52:0e:73:93:0d:45:
         90:92:a7:49:8c:3d:52:87:bb:45:4b:d7:1d:3c:59:8b:dc:f7:
         df:33:45:3b:74:0b:c6:e4:72:c2:fd:52:69:76:76:cc:10:7b:
         b6:07:6d:fc:8d:3e:71:8a:23:7c:95:38:f2:1f:b6:e5:21:b0:
         1e:59:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:33 2023 by rpki-client on console-fra.rpki-client.org