Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233362e302f32342d3234203d3e20323634353237.roa
File:                     3133382e3138362e3233362e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          ijdvkVp29PC/eeQC9tO8qiv6xX7QPoiMhueIsU6Ffes=
Subject key identifier:   56:56:50:EA:BB:DD:6B:D4:E1:98:82:2E:EA:C7:ED:F4:9F:0B:A3:3F
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       7068D63ED02744062C045599EBDD25245E1AF689
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233362e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:00 +0000
ROA not before:           Wed 29 Nov 2023 11:55:00 +0000
ROA not after:            Wed 27 Nov 2024 12:00:00 +0000
asID:                     264527
IP address blocks:        138.186.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:d6:3e:d0:27:44:06:2c:04:55:99:eb:dd:25:24:5e:1a:f6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:00 2023 GMT
            Not After : Nov 27 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:48:6b:6e:aa:99:d6:54:25:90:9f:f2:3c:
                    89:ec:c4:a9:34:15:b6:28:8e:08:12:13:c5:cb:68:
                    8a:05:f3:35:25:79:4b:3b:77:06:84:d4:92:04:31:
                    98:0c:7e:f0:a4:d1:8a:28:9e:ca:3a:99:14:9d:a4:
                    85:a3:f0:1b:bc:8b:ef:c1:f4:50:3a:4f:5a:de:af:
                    09:4d:8e:be:37:09:94:4d:35:8b:47:71:41:b1:0c:
                    f4:69:b9:e5:de:5f:be:e8:c8:d8:7d:83:d6:33:c6:
                    c6:93:b6:c9:9c:d4:53:30:81:47:fb:e2:19:f0:ea:
                    76:3a:9b:a2:9b:f8:51:9e:48:8c:94:d8:70:22:94:
                    14:94:f3:e1:b2:7d:ff:06:c2:89:65:84:37:bd:60:
                    ea:49:e5:4e:d8:9e:85:81:d5:fd:d4:fe:a3:c5:b0:
                    1c:97:9b:08:1e:85:b7:47:6d:51:1b:59:d8:31:64:
                    24:a7:b0:dc:66:29:64:b1:8f:1a:a1:44:ac:e0:7b:
                    bf:20:56:38:12:f8:32:6e:8f:1c:34:6d:77:06:b8:
                    15:c3:42:31:f3:f0:71:a9:21:04:85:5b:55:d8:76:
                    1e:ac:8b:e0:b1:f7:4c:ba:d8:ca:41:be:d5:63:38:
                    53:26:99:08:fe:34:23:c2:27:14:92:4c:d6:d0:59:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:50:EA:BB:DD:6B:D4:E1:98:82:2E:EA:C7:ED:F4:9F:0B:A3:3F
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233362e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:c2:55:51:ab:00:5b:da:35:77:19:f0:ec:dc:8c:52:cc:
         3f:c8:42:88:71:3e:11:79:4e:95:7c:fc:d3:d5:e2:1a:68:1c:
         51:fe:6b:09:b0:3b:96:6c:0d:6b:0c:55:20:f2:b7:40:85:9a:
         80:f9:17:48:72:ed:b7:aa:cc:a1:89:4f:c5:b7:f5:db:10:0a:
         f2:ff:b7:ba:1b:1e:89:05:a4:5f:5c:bf:1b:29:40:85:bf:ba:
         3b:97:5e:d2:ef:06:75:ac:d0:fc:fd:cd:e0:17:64:1b:9e:17:
         db:31:b8:07:3a:53:ff:2b:57:37:40:54:2a:da:23:fa:e9:75:
         5b:e6:39:2b:eb:43:ff:a6:64:02:e1:17:7d:6a:f0:c1:f5:48:
         6e:d3:03:e0:78:51:2d:59:cc:9c:37:a4:21:c2:4e:35:27:c6:
         38:ed:e0:23:4e:fe:22:54:08:08:2e:32:85:6f:ea:7a:c5:51:
         c5:4a:8e:e5:a5:e2:6b:07:d9:0b:38:4c:03:43:88:fc:1d:46:
         47:ed:b7:96:00:6a:51:c1:ff:57:3e:44:66:92:34:4f:ed:1f:
         4f:c7:16:35:29:42:86:5f:0b:7a:6f:90:21:9a:ef:fb:35:90:
         96:e0:02:7d:0b:ee:2d:b3:6f:71:c4:9d:a8:ac:95:fd:bf:1e:
         fc:fe:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org