Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa
File:                     3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          7sMH1fImd5c1bOWdHmtx0hbNq58XPX3RGdogWT+QcIc=
Subject key identifier:   6A:C0:D1:06:A2:AC:55:BE:30:F9:AB:3C:BC:1A:3E:FA:79:4D:F8:0F
Certificate issuer:       /CN=B4F8B40A7D93D2E3EC44FC401D6023071EEA6303
Certificate serial:       7761E43B454B4E50804F4727A06B7432C8C177F2
Authority key identifier: B4:F8:B4:0A:7D:93:D2:E3:EC:44:FC:40:1D:60:23:07:1E:EA:63:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa
Signing time:             Thu 26 Oct 2023 17:03:44 +0000
ROA not before:           Thu 26 Oct 2023 16:58:44 +0000
ROA not after:            Thu 24 Oct 2024 17:03:44 +0000
asID:                     52783
IP address blocks:        138.122.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:e4:3b:45:4b:4e:50:80:4f:47:27:a0:6b:74:32:c8:c1:77:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F8B40A7D93D2E3EC44FC401D6023071EEA6303
        Validity
            Not Before: Oct 26 16:58:44 2023 GMT
            Not After : Oct 24 17:03:44 2024 GMT
        Subject: CN=6AC0D106A2AC55BE30F9AB3CBC1A3EFA794DF80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:86:ce:89:04:9f:8a:4b:7f:3f:2b:86:01:
                    70:d0:0d:63:48:a3:83:d2:65:f8:dd:78:3d:c4:a7:
                    7a:d9:01:fe:f8:e9:39:88:2a:12:f6:87:38:85:7e:
                    75:d2:79:91:9c:11:4d:1c:ed:f2:e2:10:91:98:a6:
                    7f:af:ae:76:a7:68:5b:2b:a9:d2:52:df:98:52:d7:
                    46:a6:5a:12:04:5c:87:20:6a:52:b5:ac:bf:8d:96:
                    ab:3f:8e:11:ea:22:90:d6:29:2d:e8:02:02:55:a9:
                    c2:bd:c6:0f:57:7b:ae:e0:b1:6b:b0:31:6a:f2:03:
                    86:5e:78:b7:de:b4:4f:ca:2f:22:bc:75:1a:78:1f:
                    f3:8f:98:72:de:2c:93:69:69:90:84:4e:3c:94:c5:
                    b8:40:6c:3b:c7:c2:21:db:e9:21:cf:5e:45:f4:af:
                    b8:c0:47:b4:e3:6f:a8:04:9b:34:4c:ea:00:50:9b:
                    b5:91:14:c0:63:fa:54:42:39:d1:08:4a:41:f0:50:
                    5e:22:72:55:eb:82:ad:94:f1:86:48:da:64:82:22:
                    0f:07:5a:4a:91:10:c3:77:01:a0:b2:31:6b:2a:ff:
                    84:1e:63:ce:7e:6f:35:13:01:5a:7b:88:3e:66:96:
                    b4:8c:e5:3c:a5:25:59:66:57:82:80:ed:b6:55:e0:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:D1:06:A2:AC:55:BE:30:F9:AB:3C:BC:1A:3E:FA:79:4D:F8:0F
            X509v3 Authority Key Identifier:
                keyid:B4:F8:B4:0A:7D:93:D2:E3:EC:44:FC:40:1D:60:23:07:1E:EA:63:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4F8B40A7D93D2E3EC44FC401D6023071EEA6303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/0/3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:f1:06:de:a9:02:32:1e:7b:16:1e:54:86:34:aa:43:81:
         ee:ce:f6:c0:d7:4a:0b:b7:7e:29:85:23:d3:21:f0:6e:41:ab:
         80:44:18:a2:ee:df:ad:73:75:f7:d0:10:02:17:a2:b1:d7:52:
         e7:03:d3:92:1f:5a:34:09:20:2e:d4:d4:34:19:3a:32:52:59:
         ff:57:3c:57:3f:bd:e2:1a:fa:bd:d0:00:35:69:9f:6b:75:80:
         05:fe:e8:4a:2f:c0:c6:79:8f:40:3e:a2:51:ba:6e:f3:3b:5f:
         bf:eb:ca:3d:56:f7:12:10:64:f1:63:b9:4f:1d:d3:01:04:cc:
         0b:25:66:81:3b:da:2b:dc:b3:16:f7:97:a9:02:f5:b9:bc:5f:
         82:a6:17:cf:0a:2a:29:7a:08:ad:54:26:f9:36:ef:93:d1:3b:
         18:ef:77:37:b4:89:92:4e:44:14:fd:f4:72:9b:ca:02:30:9b:
         8e:ba:ac:ae:e5:5c:3b:4a:1b:37:5c:1d:a2:8a:b6:3f:68:b4:
         71:f0:ae:95:2d:3b:e2:88:bf:28:ca:95:ba:fa:32:d9:48:c6:
         d0:d1:27:cd:26:99:4a:21:08:ac:fc:d9:f8:da:1a:2b:ab:67:
         17:03:40:c2:ff:c4:0b:52:d8:7d:5d:e0:7d:7e:16:22:25:2d:
         e7:06:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org