Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3133382e3132322e38342e302f32322d3234203d3e20323638303138.roa
File:                     3133382e3132322e38342e302f32322d3234203d3e20323638303138.roa (raw, json)
Hash identifier:          HmSIYFi30YjC0lwttpT5i1wOqHZTpo0Ibnkn6VX78I0=
Subject key identifier:   C1:FE:92:1F:B1:03:FB:59:EB:8A:7D:EF:D3:29:47:5B:31:D0:22:26
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       4495596E10BE57EE501B7CE8260273F8FBB4AE02
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3133382e3132322e38342e302f32322d3234203d3e20323638303138.roa
Signing time:             Fri 04 Aug 2023 14:01:20 +0000
ROA not before:           Fri 04 Aug 2023 13:56:20 +0000
ROA not after:            Fri 02 Aug 2024 14:01:20 +0000
asID:                     268018
IP address blocks:        138.122.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:95:59:6e:10:be:57:ee:50:1b:7c:e8:26:02:73:f8:fb:b4:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Aug  4 13:56:20 2023 GMT
            Not After : Aug  2 14:01:20 2024 GMT
        Subject: CN=C1FE921FB103FB59EB8A7DEFD329475B31D02226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e1:b9:e0:14:c8:f7:1d:d2:da:f0:fe:90:06:
                    5a:3f:c0:b9:58:77:cd:d3:22:ae:1f:b4:d6:0d:12:
                    7a:bf:1d:ea:7b:cb:ea:29:ad:14:f1:a4:5e:64:5e:
                    e2:a6:46:11:f5:d7:03:9b:e9:59:d6:9e:42:33:b6:
                    f5:01:eb:a6:6e:11:59:46:9c:30:09:9c:75:47:8f:
                    a4:2d:b4:83:06:a0:36:7b:62:61:ca:02:b5:b7:6d:
                    76:08:35:65:f4:e8:9f:18:ce:73:15:87:6f:93:93:
                    31:96:05:97:e4:6b:36:b1:67:05:03:fb:21:53:9c:
                    e7:d5:57:bc:55:4e:3a:02:87:e4:cf:e6:b1:7d:11:
                    05:93:3d:e0:97:3f:90:48:6e:55:f4:28:9d:24:d3:
                    1d:e1:dc:29:57:01:08:81:a3:0e:50:5c:b8:b4:c0:
                    71:48:9a:2c:d7:ad:8a:29:8d:1a:22:24:d3:11:fb:
                    89:db:73:55:e0:00:93:5a:75:c4:d9:af:fd:89:c0:
                    c3:87:02:1b:28:a6:d9:04:25:76:07:43:d3:47:e8:
                    68:34:14:9a:a8:c4:e0:7a:51:e0:e6:18:8a:47:fa:
                    e7:3a:8e:a2:25:31:67:db:92:3a:cc:af:2b:93:e5:
                    e9:8a:44:68:15:b0:24:af:9c:56:bb:e3:b5:06:fd:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FE:92:1F:B1:03:FB:59:EB:8A:7D:EF:D3:29:47:5B:31:D0:22:26
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3133382e3132322e38342e302f32322d3234203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:8e:c9:0b:1b:e3:2a:79:c8:df:65:1e:95:c9:a3:8e:bb:
         9d:f7:71:f0:8e:8a:20:ce:27:fd:0d:58:5d:0d:bc:e3:4e:32:
         1d:ea:3d:6d:3b:11:7d:33:c2:d6:6d:ba:8c:e3:b7:58:3a:fb:
         d7:fa:64:e0:42:fe:ae:45:ed:a5:b9:97:ca:11:e7:ef:79:57:
         bb:13:44:0a:7b:ec:d0:d6:f4:2f:aa:b7:ba:13:89:91:4c:fc:
         c7:d6:c7:c5:cc:93:0b:ad:36:18:34:a3:df:87:29:09:f8:fa:
         22:83:ca:81:db:47:00:4c:e3:18:bf:e9:f3:c7:97:b6:e5:8f:
         e9:b8:79:37:b5:01:cf:ab:41:1a:47:39:bb:dd:20:5f:9e:e6:
         76:78:34:01:47:7b:22:10:5b:a4:5f:1c:51:07:2c:fb:c1:18:
         c3:e4:3f:83:c5:2f:1b:2e:cc:93:69:51:69:4c:0a:2c:15:77:
         cb:1a:59:5c:fc:23:a1:a7:06:1c:29:54:13:ef:c5:0d:ad:67:
         f6:99:e1:d2:91:bd:e2:3f:39:8a:fa:74:9f:97:d3:42:9c:03:
         ea:f0:c3:e8:35:f1:0b:bc:c2:c1:70:d0:f8:08:e8:d4:1a:fd:
         e2:70:4e:17:b1:53:44:60:55:16:01:8e:41:45:42:fe:95:7c:
         55:b1:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org