Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
File:                     3133382e3138362e33362e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          ANLIwKfQkDGuhAOcMZukIXBXDsbHRBBrbg4hwGS+3LE=
Subject key identifier:   22:29:93:11:29:BA:27:22:D4:57:A3:6C:02:FC:47:AB:36:74:04:64
Certificate issuer:       /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial:       094DB38978B9E3517D3C3F0C9F20029598AFC700
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa
Signing time:             Fri 09 Dec 2022 11:53:27 +0000
ROA not before:           Fri 09 Dec 2022 11:48:27 +0000
ROA not after:            Fri 08 Dec 2023 11:53:27 +0000
asID:                     53080
IP address blocks:        138.186.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4d:b3:89:78:b9:e3:51:7d:3c:3f:0c:9f:20:02:95:98:af:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
        Validity
            Not Before: Dec  9 11:48:27 2022 GMT
            Not After : Dec  8 11:53:27 2023 GMT
        Subject: CN=2229931129BA2722D457A36C02FC47AB36740464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:23:94:55:9e:39:9a:33:df:f1:25:2f:58:
                    6e:d4:2c:e5:d4:29:1d:1a:cb:cc:f4:b1:f6:94:19:
                    75:e6:1c:be:bd:30:72:99:36:07:67:c5:5b:66:17:
                    81:53:d4:73:5e:20:0f:4e:c9:13:ee:88:c9:36:67:
                    75:04:8b:40:7a:81:01:b0:00:8e:42:33:e4:f0:2b:
                    23:c8:dc:dd:00:c9:27:5b:45:dd:54:d4:18:7a:48:
                    54:4a:4e:46:15:55:3b:06:2c:85:4b:10:e5:51:5e:
                    90:3b:77:39:11:c9:c9:4c:4f:70:50:36:fe:9f:de:
                    60:12:85:cf:2a:13:bf:77:f2:67:a1:01:26:13:58:
                    4a:04:0e:95:3f:09:93:b5:d5:6b:38:6b:8b:9a:7f:
                    68:97:26:e1:a8:12:fd:50:4a:e3:61:50:a4:a3:42:
                    f7:cf:91:b1:14:f1:43:b2:f8:ff:cf:27:cc:4f:79:
                    0b:9b:5a:02:b9:5e:dc:e5:9f:ea:c3:1f:62:ac:ae:
                    aa:20:77:40:7e:f5:b6:f2:4f:39:ea:f2:dc:32:bf:
                    02:4e:f9:dd:4d:23:7a:ff:8e:71:be:4a:f9:f3:ba:
                    d1:8b:24:00:fb:3f:94:de:58:fd:3a:9d:13:25:d4:
                    1c:c4:3a:45:49:35:80:bd:40:09:35:fb:2d:4f:61:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:29:93:11:29:BA:27:22:D4:57:A3:6C:02:FC:47:AB:36:74:04:64
            X509v3 Authority Key Identifier:
                keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3133382e3138362e33362e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:30:77:0f:ce:66:b4:e2:fc:99:41:2c:2f:f5:dc:f8:fc:b5:
         99:0e:27:8b:c7:19:63:85:f6:ae:10:61:6a:7d:16:36:3d:08:
         38:ec:e0:cd:69:5e:f4:49:82:37:ef:d7:42:7d:d1:ad:31:b5:
         38:a6:92:d3:97:bd:0c:5d:49:9b:e7:c9:ef:09:a1:5f:2c:09:
         e3:5c:ae:b3:f6:fa:88:4b:40:0f:fe:34:e8:ab:31:1a:65:f1:
         5d:fe:64:53:96:0f:d3:70:fc:c1:65:6e:09:c4:b2:58:c2:a8:
         ad:97:64:39:92:56:92:a7:94:c9:1f:31:2b:87:f7:8c:c6:25:
         12:0f:08:ae:8f:ec:0d:82:11:2e:f2:d1:ae:60:b2:c1:43:21:
         8c:a1:b9:81:78:2e:07:03:a9:da:af:55:97:ba:4e:f1:59:59:
         e5:26:52:01:ed:19:32:51:8f:42:5b:6e:f1:37:d2:fe:ca:31:
         32:de:1a:bd:18:70:ef:c6:20:c5:50:d6:96:53:b9:d1:06:a9:
         7f:50:19:8b:6b:29:18:ed:7a:28:41:95:f1:94:3b:d0:75:2e:
         f3:3f:9e:bf:1e:e9:79:76:98:eb:58:9a:a3:c0:0e:35:33:53:
         55:ce:05:ac:cd:4c:35:64:94:4c:ad:4b:de:c5:e1:de:28:0a:
         4f:49:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org