Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32332d3233203d3e20323634333030.roa
File:                     3133382e3132312e3133322e302f32332d3233203d3e20323634333030.roa (raw, json)
Hash identifier:          AYgZsU2OgX7PsyL2PhgX5XtfiMd9UtN9PbHT5ZKhBzw=
Subject key identifier:   70:AC:9A:02:D5:EA:13:40:A6:F9:EC:E1:1D:B9:83:0C:77:ED:C0:5E
Certificate issuer:       /CN=895610FCEC55587ED75C0DE6D234563F371B0004
Certificate serial:       6740016AA96263A38D0E597AA803D2227D17DAB0
Authority key identifier: 89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32332d3233203d3e20323634333030.roa
Signing time:             Tue 17 Jan 2023 04:13:08 +0000
ROA not before:           Tue 17 Jan 2023 04:08:08 +0000
ROA not after:            Tue 16 Jan 2024 04:13:08 +0000
asID:                     264300
IP address blocks:        138.121.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:01:6a:a9:62:63:a3:8d:0e:59:7a:a8:03:d2:22:7d:17:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895610FCEC55587ED75C0DE6D234563F371B0004
        Validity
            Not Before: Jan 17 04:08:08 2023 GMT
            Not After : Jan 16 04:13:08 2024 GMT
        Subject: CN=70AC9A02D5EA1340A6F9ECE11DB9830C77EDC05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:7a:ef:a8:9a:a7:44:af:40:2d:63:39:48:
                    10:19:52:29:a0:7e:43:4c:61:4f:bb:f5:9e:50:4d:
                    63:55:1b:10:58:a5:c8:75:41:6e:df:91:98:98:8c:
                    ad:76:99:75:64:87:a8:9b:50:a6:49:07:dd:b0:cc:
                    70:d8:76:64:07:e1:06:06:d6:8e:bd:8d:a2:fe:0d:
                    8f:53:fa:5e:b3:e7:36:d7:3f:c0:e1:c7:c3:0d:32:
                    8e:0c:03:02:da:b7:10:8d:bc:76:8f:82:b9:37:79:
                    29:11:50:8e:ee:3f:35:3f:db:52:e9:ea:d8:59:51:
                    43:d0:f8:9a:29:23:7d:e8:2e:3b:cb:f7:8d:cd:0b:
                    1b:8e:3a:fb:0d:66:09:5b:24:33:fa:42:6a:e2:d3:
                    37:9f:bc:86:98:5d:6a:b0:7c:72:bd:cd:fb:b5:f2:
                    82:8d:34:f6:88:44:68:44:35:99:4f:50:21:b7:67:
                    ba:1c:ee:9f:12:04:51:fb:7e:51:7e:ad:e3:0b:f5:
                    29:e6:d2:44:ff:3d:6b:f3:6c:bd:6e:dd:cc:ee:68:
                    18:35:7c:52:79:e8:46:c1:44:f9:01:90:c1:88:95:
                    db:73:88:15:d5:be:eb:dd:c6:b7:87:bb:2d:ae:ae:
                    28:1e:fe:1e:d6:8a:93:eb:47:8e:e2:62:00:94:ac:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AC:9A:02:D5:EA:13:40:A6:F9:EC:E1:1D:B9:83:0C:77:ED:C0:5E
            X509v3 Authority Key Identifier:
                keyid:89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/895610FCEC55587ED75C0DE6D234563F371B0004.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3133382e3132312e3133322e302f32332d3233203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:20:be:b7:2d:20:c6:32:5a:9f:15:58:3d:26:de:81:eb:d4:
         ca:2e:de:32:87:ce:24:d2:29:d1:51:94:75:ba:a2:9e:e5:2e:
         7d:25:09:fb:29:e8:2d:a2:b0:09:51:0e:9f:40:d3:44:6a:dd:
         ea:82:c3:e0:9a:04:b1:21:45:bf:07:7f:b5:c1:c4:46:0a:0b:
         d0:44:f9:51:ca:b6:c5:10:22:cd:9a:0f:d3:a0:f8:86:fc:fc:
         5c:1e:5a:ea:79:14:61:12:77:67:e9:33:71:c8:1c:df:11:4a:
         a2:8d:6a:b3:b4:5a:d6:9f:76:f7:e7:61:e7:48:8e:6c:af:77:
         bc:82:1c:75:1e:68:20:f5:6b:33:b9:18:22:32:b5:35:9b:d0:
         ee:b1:e5:82:12:b8:29:9d:3e:06:64:9d:52:84:1e:b2:23:d2:
         7d:d1:29:50:04:1e:ce:b1:1f:b9:a6:bc:b8:d6:89:56:f1:45:
         72:6d:0a:d3:63:d3:7e:d7:21:ed:1f:ec:46:f0:2f:cf:c7:5d:
         c6:e1:48:05:3f:bd:80:7c:54:cb:65:72:0f:74:46:25:72:11:
         38:dd:a1:7a:74:00:11:15:00:b2:d0:06:61:d7:cc:6f:7f:9c:
         c0:66:8b:79:90:8e:2f:db:18:e0:89:8b:65:5f:d6:35:b8:00:
         43:8c:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org