Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa
File:                     3133382e302e32302e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier:          SoFsOUIk3ygg+CdYRlOOz2JQVJTGG/YBOrURP9Z2awo=
Subject key identifier:   ED:30:62:FD:30:46:AD:CB:D7:3F:6B:7D:BB:47:AE:3A:C7:5A:AE:D7
Certificate issuer:       /CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Certificate serial:       654560AC6983C892BF2D7FC861CD6577F31B38E2
Authority key identifier: 8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa
Signing time:             Mon 12 Feb 2024 18:36:42 +0000
ROA not before:           Mon 12 Feb 2024 18:31:42 +0000
ROA not after:            Mon 10 Feb 2025 18:36:42 +0000
asID:                     264528
IP address blocks:        138.0.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:45:60:ac:69:83:c8:92:bf:2d:7f:c8:61:cd:65:77:f3:1b:38:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
        Validity
            Not Before: Feb 12 18:31:42 2024 GMT
            Not After : Feb 10 18:36:42 2025 GMT
        Subject: CN=ED3062FD3046ADCBD73F6B7DBB47AE3AC75AAED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:a9:63:8b:5c:bd:40:b8:4f:92:1b:68:e9:
                    d9:c4:12:de:ab:33:49:55:47:de:2d:e2:05:28:39:
                    fd:6b:6d:4f:93:8a:a9:02:b6:2a:da:52:e6:f8:b1:
                    5a:73:9c:fb:c1:48:f1:2d:e4:23:45:9e:19:39:23:
                    4e:ec:d4:c7:bd:c2:b2:17:09:ec:dc:8c:0c:71:9d:
                    34:0b:b3:5e:db:73:cc:65:d9:e4:f9:6d:97:3e:02:
                    6a:26:cd:18:29:6d:df:52:ed:91:52:dc:8c:be:d7:
                    a2:a0:fc:44:0d:30:fe:e9:40:ed:fe:03:05:ab:4f:
                    a9:a2:be:16:e1:35:35:eb:9f:b7:a7:32:de:d4:99:
                    3e:2c:72:f4:dc:d4:0e:e0:58:a0:87:9d:d7:8b:11:
                    01:29:95:ae:2d:40:76:0b:4a:fc:c5:48:21:ca:f6:
                    1d:05:4b:a6:a0:d2:09:22:9e:ed:d7:06:d4:b9:ee:
                    30:e5:58:51:04:d2:ef:c1:59:e9:63:20:b5:57:c0:
                    36:3f:5c:1d:24:69:8f:aa:66:28:5a:63:80:3e:06:
                    68:26:91:f5:22:3c:e7:8d:0f:46:a6:d3:37:ea:99:
                    3e:0c:98:8a:60:84:71:f7:76:d0:b5:97:ce:0f:96:
                    4c:da:b3:9b:04:47:c8:cd:98:9d:fb:13:0a:78:bd:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:30:62:FD:30:46:AD:CB:D7:3F:6B:7D:BB:47:AE:3A:C7:5A:AE:D7
            X509v3 Authority Key Identifier:
                keyid:8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/3133382e302e32302e302f32322d3332203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b1:c0:82:52:aa:2b:2f:7f:41:08:99:6b:5c:de:4c:1c:18:
         64:a8:18:83:82:c5:5e:51:c2:d8:fc:75:4e:d1:2d:f1:e2:3e:
         9a:2c:97:da:e9:73:9c:e8:f4:a3:7c:f1:85:fb:c5:e3:c1:c1:
         6d:5d:4a:ee:ba:21:7c:ed:ca:1b:9e:1b:a8:7b:56:bd:9b:50:
         a8:44:91:2b:94:42:b9:b1:ba:bd:82:5d:25:57:49:f7:09:23:
         54:95:bd:bb:49:a6:8b:54:6c:95:93:75:c7:c4:2f:d1:e3:9c:
         b9:5e:ec:ce:ca:b7:bf:22:a1:5f:04:fb:64:c0:a0:c0:22:57:
         7b:db:e7:02:62:c5:a8:01:41:04:4b:21:8a:37:0e:47:0f:a1:
         47:7a:d2:b0:1a:a0:53:ae:46:81:11:86:06:62:60:b1:dd:7c:
         0c:b0:31:4d:96:b1:d3:75:84:f2:be:ec:d2:18:f5:59:3e:c2:
         ca:c5:12:bc:a5:36:bc:f9:ed:3c:47:14:74:18:42:75:66:82:
         9e:ff:a2:14:7c:c9:01:e6:b5:52:53:fa:8e:b3:94:3b:98:70:
         99:7f:af:9d:a2:7e:4f:3e:8a:12:e9:97:53:b6:c1:82:f6:9b:
         16:c5:df:58:6c:5b:c5:ab:37:7b:a8:b1:9e:6e:ba:e6:20:ec:
         47:64:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org