Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234342e302f32322d3234203d3e203238313938.roa
File:                     3138372e38342e3234342e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          WQKg8J8rZXGy110GD3cqwMdE79OtZyVU+I6vXMlLujs=
Subject key identifier:   D4:19:36:98:90:DE:1E:51:80:CC:B1:42:71:63:4D:96:8E:48:39:39
Certificate issuer:       /CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
Certificate serial:       10D27D030423342A438F3DE0C0C8186D0985C96A
Authority key identifier: 39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234342e302f32322d3234203d3e203238313938.roa
Signing time:             Fri 14 Oct 2022 17:49:00 +0000
ROA not before:           Fri 14 Oct 2022 17:44:00 +0000
ROA not after:            Fri 13 Oct 2023 17:49:00 +0000
asID:                     28198
IP address blocks:        187.84.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d2:7d:03:04:23:34:2a:43:8f:3d:e0:c0:c8:18:6d:09:85:c9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399EF65AE0BF7B30D754E4EB248326A7A4428C33
        Validity
            Not Before: Oct 14 17:44:00 2022 GMT
            Not After : Oct 13 17:49:00 2023 GMT
        Subject: CN=D419369890DE1E5180CCB14271634D968E483939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:42:6d:6b:8d:62:ee:67:60:70:f1:65:10:
                    2d:47:47:a4:dd:f6:37:a6:2a:cd:fd:18:c4:18:5a:
                    6a:20:d6:4d:0d:d6:96:f7:eb:25:69:a3:76:f2:8d:
                    7c:31:0f:aa:6e:e8:71:31:01:df:ae:59:42:22:f1:
                    61:a6:04:f4:74:12:6f:7a:d2:a8:54:f3:aa:1c:27:
                    c2:9c:0d:e4:d1:00:c7:e7:20:c1:74:4c:ef:2b:80:
                    45:09:41:84:81:85:3d:81:45:ee:13:01:d1:e1:c4:
                    b0:4c:f3:51:e8:88:09:b0:98:e9:14:f4:26:fc:e4:
                    a4:dd:65:6b:69:8a:f8:84:f4:09:18:f7:55:f2:ff:
                    5a:dd:bc:4c:1e:23:5d:15:bd:95:bb:3a:0d:78:24:
                    4a:4e:6e:39:81:8a:2e:ec:01:45:0d:fd:73:cb:db:
                    a2:1c:92:14:ae:bb:a1:b9:62:75:f3:62:d9:f3:8c:
                    7b:b1:33:8f:e3:60:2f:19:0e:2a:e5:53:2f:73:71:
                    13:a8:33:57:a5:58:81:02:74:91:59:6d:a3:bf:d3:
                    76:02:7a:51:22:49:fe:40:45:db:83:9c:c5:20:e2:
                    c3:bb:4c:11:2a:8f:49:16:15:21:7d:5d:1f:c7:ae:
                    e6:e9:b2:ce:4c:01:e2:a4:3c:52:7b:9d:aa:0c:15:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:36:98:90:DE:1E:51:80:CC:B1:42:71:63:4D:96:8E:48:39:39
            X509v3 Authority Key Identifier:
                keyid:39:9E:F6:5A:E0:BF:7B:30:D7:54:E4:EB:24:83:26:A7:A4:42:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/399EF65AE0BF7B30D754E4EB248326A7A4428C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234342e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:b5:dd:4b:d2:11:ca:da:78:ef:55:e8:dd:fb:00:ca:e8:
         76:c9:62:a4:34:f4:aa:80:22:a3:63:c0:fa:44:e6:51:5b:0b:
         cc:f5:8b:7a:93:ac:38:78:89:eb:ed:b6:02:ff:13:0f:d4:0d:
         1a:97:74:90:93:03:c0:ce:d8:9a:10:d6:ed:3c:bb:56:be:0c:
         41:6e:3c:04:a9:57:94:94:aa:37:99:ab:88:91:f8:03:64:7a:
         2f:77:c4:56:0f:af:f5:cf:5a:4f:9b:7f:2a:a0:fc:69:8a:c7:
         26:3d:92:e7:9f:93:46:da:a0:e2:8b:58:47:f8:06:7c:d4:8b:
         56:e2:b5:1f:40:06:7d:29:06:55:aa:0e:85:51:1d:af:3f:6f:
         41:20:be:8d:52:6d:81:77:3f:f9:c6:19:7c:2c:63:7c:7a:6c:
         6e:33:46:bd:3b:27:f6:a6:50:12:18:39:ca:bc:8a:13:eb:3d:
         f1:72:38:44:ce:df:5a:43:b8:74:fb:1a:0c:12:a3:e1:1a:00:
         71:55:cd:4f:03:fc:eb:5e:c4:2b:b9:bb:f4:cc:73:6e:e4:6c:
         7e:d2:da:0c:02:51:ba:c4:52:8f:52:81:0c:aa:76:55:b9:22:
         7b:69:f5:a9:6e:ee:45:71:90:bf:87:73:59:2c:53:76:6c:8a:
         6f:d5:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org