Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/3133382e3132322e3133322e302f32322d3234203d3e20323634343738.roa
File:                     3133382e3132322e3133322e302f32322d3234203d3e20323634343738.roa (raw, json)
Hash identifier:          KcmGhURzoDWA5XTNSOKcyPDhrcku5NOMOZ5+klvmr8E=
Subject key identifier:   DA:A2:F5:A4:CF:C6:B2:EC:64:04:BF:DF:87:15:19:1B:8C:AF:64:D8
Certificate issuer:       /CN=9211441D4A6074CCC6CBFD24CD889FE4265AA8D0
Certificate serial:       4957CD7DDDFAC7C76DBC034A2692624C1D973CFA
Authority key identifier: 92:11:44:1D:4A:60:74:CC:C6:CB:FD:24:CD:88:9F:E4:26:5A:A8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9211441D4A6074CCC6CBFD24CD889FE4265AA8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/3133382e3132322e3133322e302f32322d3234203d3e20323634343738.roa
Signing time:             Fri 22 Sep 2023 08:16:37 +0000
ROA not before:           Fri 22 Sep 2023 08:11:37 +0000
ROA not after:            Fri 20 Sep 2024 08:16:37 +0000
asID:                     264478
IP address blocks:        138.122.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:57:cd:7d:dd:fa:c7:c7:6d:bc:03:4a:26:92:62:4c:1d:97:3c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9211441D4A6074CCC6CBFD24CD889FE4265AA8D0
        Validity
            Not Before: Sep 22 08:11:37 2023 GMT
            Not After : Sep 20 08:16:37 2024 GMT
        Subject: CN=DAA2F5A4CFC6B2EC6404BFDF8715191B8CAF64D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:be:7c:d4:fe:06:ea:e4:04:8c:39:08:54:
                    56:1a:27:31:6c:5f:69:7c:9c:bb:41:49:79:95:46:
                    8f:df:70:88:8f:6d:6c:3a:5e:bb:53:fd:ef:f7:d5:
                    f2:4a:9d:44:e5:a0:ec:d1:27:96:72:96:fe:49:15:
                    00:bb:ab:cf:08:41:2e:50:ab:84:60:af:80:56:0b:
                    11:0b:c6:4b:84:37:8b:1a:1e:7f:ee:78:31:3c:5d:
                    34:5c:35:7f:f2:03:09:dd:95:03:be:fb:12:b6:aa:
                    e6:49:01:6c:44:fe:3e:ab:ea:bc:c6:a8:02:59:b7:
                    2a:00:3a:33:19:cb:19:54:1a:fe:fe:01:f6:3a:3f:
                    2d:a0:c0:88:d8:d3:f5:3c:d8:20:da:ad:f6:39:40:
                    db:87:e5:b5:22:fd:ed:a3:41:f1:f1:5f:74:f9:e0:
                    0f:32:fc:34:a3:d5:a8:78:8b:3a:db:c5:2f:8b:12:
                    b6:4a:9e:10:7c:85:b3:50:27:0b:fc:32:c0:39:bd:
                    3a:28:c9:ba:f8:00:f2:33:fb:0c:6a:d6:d7:cf:73:
                    68:a4:ca:4a:6a:e4:ed:3d:48:0d:58:8a:72:2e:f4:
                    e3:39:46:cf:5f:b3:5e:5c:aa:6f:8e:30:da:3c:09:
                    f5:88:9d:66:61:cd:89:2a:97:40:8d:75:20:05:76:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A2:F5:A4:CF:C6:B2:EC:64:04:BF:DF:87:15:19:1B:8C:AF:64:D8
            X509v3 Authority Key Identifier:
                keyid:92:11:44:1D:4A:60:74:CC:C6:CB:FD:24:CD:88:9F:E4:26:5A:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/9211441D4A6074CCC6CBFD24CD889FE4265AA8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9211441D4A6074CCC6CBFD24CD889FE4265AA8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYvBi3KdTkMSj8ReBz5D2GWDqNXFL9Z4DV4suDpr6yeP/0/3133382e3132322e3133322e302f32322d3234203d3e20323634343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:df:e5:f0:a3:f5:d6:06:e4:72:61:eb:8c:eb:1e:e7:e3:
         73:21:9b:b6:36:0b:00:08:c3:6b:77:ed:f6:71:b5:e4:ca:9b:
         a2:77:e8:f8:86:c5:86:89:8d:47:d0:29:ee:e2:46:08:30:f9:
         06:7e:11:e4:a5:c3:58:dc:65:88:45:a8:b3:07:0f:18:1d:36:
         aa:8b:7f:68:5a:28:1a:32:d1:a8:41:41:e1:d4:72:0b:6b:62:
         53:2f:d6:e1:8c:66:b6:52:52:34:4a:a2:5a:dd:ce:44:c5:fd:
         b7:f1:9a:3c:cf:db:e0:96:62:8e:35:87:02:26:b6:32:08:52:
         5d:e7:17:8b:15:a6:4a:42:24:04:9c:6b:83:54:58:fd:17:15:
         11:06:04:43:0f:59:94:27:2d:1f:e6:4f:64:32:2e:ba:1f:39:
         89:da:86:79:31:05:9c:92:c4:b0:aa:4f:05:dc:58:0c:f2:e9:
         eb:42:f9:2a:ce:b0:6a:b8:81:5f:9f:36:ba:99:1b:90:80:c3:
         4b:b8:42:94:99:d8:a0:39:cb:12:e0:44:31:92:1e:5b:4a:ed:
         8a:e3:f7:02:15:49:fd:31:18:19:21:aa:c5:31:2a:5b:ce:bb:
         f8:97:4f:a8:d3:73:62:85:96:d2:8a:80:a6:dd:9f:c6:2f:e0:
         34:ee:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org