Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
File:                     3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          KtCfcpCgkhw7iLzlAG8BFacF+RurbLHqT6F2xWiuTUg=
Subject key identifier:   61:6F:27:43:C7:A6:64:51:21:91:0E:38:31:5B:18:15:C8:AB:BA:C6
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       31B4CF77373ED149E50C16C67E752D59C1F0A09B
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa
Signing time:             Thu 31 Aug 2023 19:07:55 +0000
ROA not before:           Thu 31 Aug 2023 19:02:55 +0000
ROA not after:            Thu 29 Aug 2024 19:07:55 +0000
asID:                     264297
IP address blocks:        138.121.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:cf:77:37:3e:d1:49:e5:0c:16:c6:7e:75:2d:59:c1:f0:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Aug 31 19:02:55 2023 GMT
            Not After : Aug 29 19:07:55 2024 GMT
        Subject: CN=616F2743C7A6645121910E38315B1815C8ABBAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:76:19:71:cf:86:9f:32:17:d1:ae:8c:a7:
                    79:ce:54:b2:14:37:9a:ec:11:87:33:29:59:eb:76:
                    33:70:b8:b0:3c:09:bb:7f:9a:cc:c4:cf:97:f6:37:
                    79:1b:9d:93:88:6a:54:c6:e6:ae:4e:cc:46:90:9a:
                    da:a8:2d:0a:d8:57:a9:55:9f:0d:b5:3b:7e:21:ab:
                    86:df:2d:74:2a:5f:9e:fd:55:a1:37:82:00:34:1d:
                    08:3b:cb:7a:4d:79:96:45:06:d2:7b:cb:f9:e5:43:
                    ef:02:30:77:a9:cb:d7:58:ce:f7:9a:eb:3a:0d:77:
                    fc:ad:14:29:4b:21:02:77:12:96:c7:0d:38:ae:0a:
                    9e:16:3f:00:0a:b7:8c:d2:93:c7:04:b1:9d:b6:93:
                    6a:3a:9f:08:7c:72:29:ab:08:89:7a:fc:5d:6c:58:
                    6a:1a:61:1e:bb:a0:64:d1:c8:c5:be:87:81:5f:2e:
                    3f:fc:6b:d0:d0:b6:da:ef:34:97:b6:ac:09:86:6d:
                    b4:a3:e4:80:03:85:b2:8f:b7:cb:a4:55:6f:09:87:
                    da:67:f2:c7:40:54:26:7e:ca:8e:ef:62:a0:8a:f1:
                    f4:ac:8f:bd:32:3d:c1:8e:06:86:02:4d:4e:db:91:
                    36:2d:75:5b:56:54:68:61:3f:c8:a6:74:40:28:6d:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6F:27:43:C7:A6:64:51:21:91:0E:38:31:5B:18:15:C8:AB:BA:C6
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133382e3132312e3133362e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:67:bf:6f:b8:2c:be:ef:e3:ae:e3:98:3e:ed:a8:3c:56:58:
         67:89:68:4a:8e:e5:c3:02:8b:3a:e2:13:dc:4b:90:4c:8c:58:
         6d:7c:be:10:e8:ba:41:98:c0:80:56:83:f7:cb:e3:ec:6a:a5:
         b1:15:b1:06:be:29:20:a0:d0:2e:fc:d5:6b:22:b7:dd:a0:7b:
         e9:ed:fb:05:0d:f2:a6:d4:33:8e:79:8b:e4:fc:7f:53:1c:06:
         a6:f4:0f:08:7b:04:f6:40:61:f5:6a:0e:cd:ae:f4:a6:66:1b:
         e4:f1:5d:75:f8:5a:d0:3f:3f:9b:6d:30:20:d2:d3:d2:8d:91:
         f0:40:ae:ea:a5:66:c1:ba:f6:8a:ec:e5:33:9c:fe:0b:6b:22:
         42:69:6f:be:05:95:83:ab:f0:2f:1e:d1:13:17:a1:82:57:78:
         b3:c1:33:77:c3:8e:9b:15:4c:2c:2a:4b:fa:ae:b6:de:1e:0e:
         48:54:d4:89:28:f3:55:be:7b:c5:29:1b:82:63:67:b1:49:95:
         43:74:18:86:56:2f:55:b2:8b:5d:70:cc:9a:e7:25:0f:d7:e7:
         c4:11:80:d5:31:31:e6:8e:59:96:37:11:c7:72:d1:12:df:8e:
         c5:84:f9:31:cf:7e:60:68:5a:cd:07:6c:68:71:9d:7c:b9:e1:
         58:f9:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org