Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa
File:                     3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa (raw, json)
Hash identifier:          TJd94yp3zZlgX364+xHekj5+J0kI3XREfCFBfBHAsCE=
Subject key identifier:   4E:4A:53:E7:08:F2:F6:C3:42:39:7E:FC:6C:13:B9:7E:66:1C:DE:61
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       57F070249F203C527BC30589603D43CA9404571C
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:11 +0000
ROA not before:           Wed 02 Aug 2023 13:50:11 +0000
ROA not after:            Wed 31 Jul 2024 13:55:11 +0000
asID:                     61639
IP address blocks:        138.219.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f0:70:24:9f:20:3c:52:7b:c3:05:89:60:3d:43:ca:94:04:57:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:11 2023 GMT
            Not After : Jul 31 13:55:11 2024 GMT
        Subject: CN=4E4A53E708F2F6C342397EFC6C13B97E661CDE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:80:c7:2f:23:ea:cd:0e:07:71:98:18:a5:
                    c6:46:08:65:69:64:6c:54:43:63:4f:43:97:79:38:
                    ca:9a:3e:36:de:1a:92:18:38:0c:bd:6a:74:01:5a:
                    16:90:3a:ae:02:0f:21:01:4a:e7:72:d3:ad:15:0c:
                    af:5d:6e:a9:11:1c:11:8f:9b:21:3b:48:fb:94:fa:
                    a2:b3:c7:ac:d4:39:7a:9e:45:0c:da:5d:cf:4f:8b:
                    4b:8d:6c:2f:2b:eb:88:a1:21:5d:5c:cd:84:ff:2a:
                    43:83:45:91:74:78:a7:de:f4:37:ff:73:b2:8f:f7:
                    0d:54:ca:c3:5b:6b:df:48:5c:18:19:8a:59:a0:d8:
                    e7:60:ad:13:d9:b4:ec:12:0b:be:7f:60:21:9d:a2:
                    cf:a0:6a:fb:3d:24:c0:10:f5:54:36:21:f4:6b:db:
                    6d:7a:7b:0a:01:5a:71:9b:f2:97:4a:96:fe:28:18:
                    16:db:fb:29:9b:85:8c:9e:d0:da:50:20:00:cf:fd:
                    16:7a:63:5c:fa:d6:10:0e:dd:48:90:4b:fb:a8:27:
                    58:52:b5:1b:84:f3:40:ec:4a:92:01:8f:f1:ad:39:
                    7a:0d:99:86:f0:d4:35:51:68:f0:b9:10:cc:00:f7:
                    a1:a6:eb:60:78:5f:67:f9:12:66:0a:a1:9d:79:ad:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4A:53:E7:08:F2:F6:C3:42:39:7E:FC:6C:13:B9:7E:66:1C:DE:61
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:b1:5f:8a:87:52:3c:db:2a:5f:b9:8c:af:e8:53:36:b2:
         5c:a5:b3:9e:6a:12:20:6b:dd:b6:aa:0a:d9:ac:dd:c9:ff:99:
         fe:e6:cb:9b:91:f4:50:97:60:20:5d:17:42:dd:10:41:10:ed:
         e1:73:29:cd:36:ea:d5:99:4a:2e:a1:a9:66:24:41:fd:75:14:
         d7:17:48:59:91:ac:58:f2:75:ea:64:a8:b2:51:f1:6d:fb:21:
         7a:e8:f5:e4:74:e6:fe:8e:d8:70:57:4f:7a:8b:45:ba:06:66:
         c4:ac:fe:7b:9a:f2:6b:2f:cf:54:0d:d4:1d:20:49:fb:cf:d4:
         7d:41:37:aa:41:69:97:28:55:da:88:ab:5a:ab:42:6d:6b:98:
         a9:e7:f3:3a:9d:96:bf:53:a4:14:4d:6f:20:a4:2d:2a:f2:85:
         57:48:4c:87:bd:9a:20:f2:34:00:33:42:1b:83:37:be:c7:ce:
         1c:26:93:ab:8b:50:bf:ad:e3:f6:84:2c:2b:26:93:6c:35:86:
         d1:bf:7f:89:3e:3c:f1:b0:e1:8e:54:2d:e7:93:bc:90:64:b7:
         d9:0c:26:64:aa:e6:1d:94:05:00:d0:80:42:2e:c1:3b:1c:02:
         47:6d:e0:36:43:63:e8:e8:f3:f5:ff:87:33:3e:cc:f0:00:bc:
         17:67:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org