Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
File:                     3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          3+f5LaN7GgFmcLjBtrwdnenXNo8CotPutzBLmEDZrOA=
Subject key identifier:   61:05:6E:28:F7:C3:46:C6:B1:13:9F:10:72:DF:BE:7F:B7:AF:67:26
Certificate issuer:       /CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
Certificate serial:       2A9E0311417F37FA9BB3FF021C12B9191C65CE3C
Authority key identifier: 8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
Signing time:             Wed 13 Sep 2023 12:55:00 +0000
ROA not before:           Wed 13 Sep 2023 12:50:00 +0000
ROA not after:            Wed 11 Sep 2024 12:55:00 +0000
asID:                     61632
IP address blocks:        138.121.236.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:03:11:41:7f:37:fa:9b:b3:ff:02:1c:12:b9:19:1c:65:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A90DF018B161D6CEA690EF462A96991BD182AEB
        Validity
            Not Before: Sep 13 12:50:00 2023 GMT
            Not After : Sep 11 12:55:00 2024 GMT
        Subject: CN=61056E28F7C346C6B1139F1072DFBE7FB7AF6726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:32:23:7d:9a:31:af:23:e5:94:3f:76:8a:
                    89:89:11:7c:8a:a6:d7:bb:9b:90:9b:57:22:eb:91:
                    7c:dd:bc:dd:4a:9d:6b:29:da:d0:e5:48:b4:12:b4:
                    09:5f:ec:8f:81:1a:9c:1e:c5:10:78:37:6d:dd:75:
                    e1:88:e6:3d:69:cb:11:f2:6d:ec:a3:d5:5d:fb:41:
                    fc:e8:18:8f:dd:a9:86:33:1f:68:84:5e:39:7d:f5:
                    28:30:ae:a9:01:5c:ed:e0:6f:27:c3:19:9b:42:2a:
                    9b:15:69:fc:a7:b6:95:7c:5f:cc:14:97:98:c3:24:
                    6f:d0:60:09:6e:40:a4:b3:5a:21:2e:5d:1d:e1:4e:
                    0f:fe:5d:eb:37:52:c2:ea:7c:81:73:bb:3c:1f:e0:
                    e2:eb:88:84:66:10:78:3f:74:aa:a7:af:83:b8:b8:
                    fb:2c:36:90:ca:d0:2e:ae:70:f0:22:d8:ac:41:fd:
                    44:d0:da:46:b0:d5:ef:b0:a5:c8:c7:df:03:8f:4a:
                    89:61:c0:87:35:d5:52:a5:db:1e:69:c0:93:87:69:
                    82:71:04:f7:d9:1f:dd:a4:d5:ec:8c:c8:f6:94:5e:
                    ac:60:3b:c8:53:8d:c2:67:b2:14:61:36:82:79:e0:
                    a7:2d:46:ac:e5:38:78:65:cf:01:c7:56:4c:23:e4:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:6E:28:F7:C3:46:C6:B1:13:9F:10:72:DF:BE:7F:B7:AF:67:26
            X509v3 Authority Key Identifier:
                keyid:8A:90:DF:01:8B:16:1D:6C:EA:69:0E:F4:62:A9:69:91:BD:18:2A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A90DF018B161D6CEA690EF462A96991BD182AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:1b:73:31:ac:e3:8f:dd:e5:88:bb:7c:62:dc:3f:95:4f:
         60:98:fc:f0:a4:49:d2:47:1d:31:1c:60:ba:c2:f0:84:9d:55:
         3d:be:83:fc:5c:19:b3:95:3e:16:39:db:10:ab:85:0a:e7:70:
         75:3c:d3:d3:fc:fe:f1:82:01:70:27:f6:99:31:40:f8:30:e2:
         1c:a7:9c:da:d7:7c:da:ab:d0:0c:a7:4b:75:7b:1b:d3:a1:30:
         ce:f0:fa:6d:7e:52:8a:9f:a4:90:d5:75:11:3b:bb:dd:e5:aa:
         58:00:41:a7:58:3a:b5:62:84:a2:e2:82:14:53:af:ce:50:cd:
         97:aa:1e:55:0d:16:8e:43:0f:fc:ba:40:13:c9:a6:de:f0:a8:
         f0:48:cc:c5:05:b6:7e:21:62:84:e4:c1:b8:ba:ec:5b:ec:6a:
         67:f4:50:60:f6:53:93:06:f4:7c:ee:b0:89:b3:48:9c:ba:f4:
         7d:70:6c:d2:6f:b0:5e:5c:7a:b0:7f:6c:67:14:cc:6d:9d:e7:
         f1:bd:36:e5:d2:16:05:a5:c8:97:65:9f:c8:ce:3b:20:63:c5:
         cd:a6:df:46:39:cc:b5:ff:84:5c:a1:92:21:ce:95:91:55:d1:
         5d:80:b6:af:30:01:c9:f8:38:1d:21:1d:68:8f:e1:e8:ae:74:
         df:9e:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org