Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e203238323230.roa
File:                     3133382e3235352e3137322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          PLGZm1dFbxEu1ZAYPt2fFiDJMGS+pgZL/bAIwUYHcW4=
Subject key identifier:   6C:CE:D2:DD:2B:99:E9:F6:E7:95:0F:0A:17:C0:62:73:C3:CD:AD:48
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       4303966C3447B1580AA6782473F8E5ED92373C4B
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:01:49 +0000
ROA not before:           Fri 16 Dec 2022 19:56:49 +0000
ROA not after:            Fri 15 Dec 2023 20:01:49 +0000
asID:                     28220
IP address blocks:        138.255.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:03:96:6c:34:47:b1:58:0a:a6:78:24:73:f8:e5:ed:92:37:3c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:56:49 2022 GMT
            Not After : Dec 15 20:01:49 2023 GMT
        Subject: CN=6CCED2DD2B99E9F6E7950F0A17C06273C3CDAD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:d9:2a:b6:21:e7:35:f4:91:f2:3f:84:fc:
                    77:16:48:ba:9e:6e:3e:fc:ce:46:40:9b:35:81:42:
                    df:99:ef:54:4f:9e:76:4c:da:19:77:3b:79:ce:33:
                    c7:70:68:0b:36:0f:05:8f:db:12:e1:85:6e:44:95:
                    d0:7a:00:02:59:fe:6c:69:14:58:b7:31:9f:d4:71:
                    fa:1b:d1:1f:81:b7:c0:04:7d:f8:ef:07:18:84:e6:
                    11:98:7f:7d:59:b5:c3:b3:4f:f3:2b:9e:a6:7a:0a:
                    fb:45:a0:cc:a2:ec:00:3a:1c:1c:c5:2e:75:43:8c:
                    e1:14:b8:ab:94:45:a8:b3:6d:fe:94:79:ee:a3:28:
                    11:29:9c:2a:b0:66:4c:b5:41:39:5d:39:82:0c:8a:
                    c3:0a:77:ad:87:5e:9f:46:1b:a4:a2:04:89:f2:e2:
                    f8:ea:a7:70:fa:fc:79:2b:40:7a:fa:e4:8d:5b:fb:
                    75:e6:fc:75:66:73:04:8a:88:e8:d5:a1:54:fb:26:
                    e5:b9:f2:9f:e2:99:05:03:9e:2f:75:0e:c7:bb:db:
                    e8:f4:84:39:88:1d:82:4f:19:24:f7:a7:ab:ff:7c:
                    22:e8:9a:89:5a:80:4d:6b:15:a4:ab:0e:4d:bd:88:
                    ad:87:00:68:fe:69:a5:0c:e3:4d:64:75:ed:d0:d9:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:D2:DD:2B:99:E9:F6:E7:95:0F:0A:17:C0:62:73:C3:CD:AD:48
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:1b:e1:dd:21:21:41:44:80:fe:fc:a1:b2:8a:20:8c:1b:
         2c:1c:86:5a:a7:73:27:0f:c4:a8:37:93:c1:3a:e2:cc:77:13:
         82:54:43:fb:1e:75:9e:ab:ae:90:5d:72:7e:6b:a0:23:27:bb:
         f4:70:ab:e6:a7:71:cc:d3:ad:89:23:dc:d6:b0:33:b4:8a:3d:
         2b:52:68:25:41:1d:10:0e:99:5f:73:50:85:20:46:c0:91:87:
         d0:8d:83:57:7d:46:5b:b8:e8:fe:77:63:2e:79:a9:db:0c:8a:
         bb:63:3f:4d:0a:62:8a:51:38:4a:d3:a0:f1:d8:d2:54:1b:fc:
         01:a3:0a:42:0c:78:3b:c4:88:c6:06:b5:f8:98:52:dd:a2:00:
         c5:be:e6:b7:a1:8b:0a:64:d1:9b:84:e0:01:dd:ef:39:fd:e7:
         38:fd:a2:81:77:cb:fc:b8:87:96:57:52:ff:81:f1:0f:70:e1:
         ec:61:0e:90:f8:5d:96:41:cd:ce:7f:b4:49:7a:90:ca:ec:2f:
         b7:cf:ee:22:7c:4c:c1:3a:e2:6d:5f:1b:cb:6b:06:6d:d3:7e:
         80:fb:76:7e:e1:ef:b5:b2:13:b7:8e:46:5f:86:d8:d4:64:35:
         dc:44:b2:e6:a4:43:79:57:e0:ef:27:1e:25:fe:11:52:77:f9:
         a4:5b:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org