Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32322d3234203d3e20323634353434.roa (raw, json)
Hash identifier:          iDpdGwzW9hFuS7WrsH3xHNQZT9FgBbfLO6PSP8QG/v0=
Subject key identifier:   9B:7D:5A:ED:2A:A9:70:D6:FE:BA:ED:FD:A5:C3:19:E9:57:BE:90:31
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       50296D916844BB08DAB6A29D45E176E6A4DAF43F
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa
Signing time:             Sat 22 Apr 2023 17:02:58 +0000
ROA not before:           Sat 22 Apr 2023 16:57:58 +0000
ROA not after:            Sat 20 Apr 2024 17:02:58 +0000
asID:                     264544
IP address blocks:        138.0.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:29:6d:91:68:44:bb:08:da:b6:a2:9d:45:e1:76:e6:a4:da:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 22 16:57:58 2023 GMT
            Not After : Apr 20 17:02:58 2024 GMT
        Subject: CN=9B7D5AED2AA970D6FEBAEDFDA5C319E957BE9031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:eb:b6:aa:98:19:db:58:1a:a8:22:9c:af:
                    5e:67:ac:3d:70:8f:0f:2e:5a:f2:8d:2d:7f:c2:de:
                    56:c6:b1:6e:2d:6e:ec:38:8c:4d:57:82:2e:fc:fe:
                    f8:6d:34:04:30:b7:95:df:60:d7:fb:91:fb:f8:91:
                    68:df:63:1e:c0:88:98:05:52:99:f1:8e:3e:c6:4c:
                    6f:fe:06:a2:64:cb:8a:8c:0c:d7:3f:95:4f:d1:9c:
                    53:cb:fe:ef:d2:c3:9b:4b:4a:3a:d0:1e:8d:ac:90:
                    b2:58:2a:55:68:36:92:98:6c:f8:93:8f:52:b7:20:
                    0a:50:a7:f2:83:47:40:83:dc:f0:7b:d9:1f:27:fa:
                    a7:c6:2f:69:c4:9e:11:d5:92:33:90:a9:6e:62:e6:
                    d0:55:fd:21:fe:68:16:eb:d6:97:db:19:0f:0e:96:
                    4a:01:61:9d:36:60:24:ff:c7:91:82:c8:6f:22:87:
                    0c:91:7f:da:bb:41:94:65:f8:03:17:1d:8c:17:52:
                    53:29:3a:c4:97:b4:fb:fe:19:49:30:46:43:10:fe:
                    4e:b5:af:c1:18:60:c8:df:92:df:80:4f:64:d6:9d:
                    18:c6:3e:60:45:6f:35:54:67:78:6f:47:46:e9:e9:
                    a4:87:87:ea:ba:71:14:87:6b:a4:21:ab:26:21:7a:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:5A:ED:2A:A9:70:D6:FE:BA:ED:FD:A5:C3:19:E9:57:BE:90:31
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3234203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:12:95:02:ac:48:38:77:f8:0e:aa:64:57:c1:dd:7e:f6:
         fe:58:d6:2d:ed:f6:7b:d9:52:da:22:57:4c:bf:33:ba:ce:5c:
         ac:92:df:0d:39:9e:a1:72:8b:fa:da:00:d4:66:92:2e:75:17:
         dc:a0:d3:44:98:a1:0b:3d:af:f7:64:30:d0:cf:b6:5f:c9:da:
         3a:f8:db:d3:7e:98:ed:ff:4e:94:7f:2a:ff:5d:19:6c:1e:a6:
         f1:8d:54:19:3c:98:3f:ac:c1:72:ac:9f:c4:9f:6f:6a:04:f5:
         fb:6e:db:b5:23:78:b7:44:c8:80:48:9b:60:d0:c4:b6:42:7c:
         22:10:55:1a:b6:69:3b:6c:df:1c:01:37:51:13:10:99:21:db:
         f3:51:69:95:49:69:9e:84:e3:06:2b:f9:76:36:ec:d5:a4:02:
         78:e9:0a:88:aa:dc:77:d6:7f:02:f0:dc:e4:7b:dc:a6:71:ee:
         b7:3f:d8:99:ba:30:6c:06:89:a1:01:6a:8e:00:82:13:24:5a:
         43:46:2a:46:b9:7d:7d:16:7f:ba:4e:fd:46:1d:c6:b0:be:85:
         e9:ad:43:ed:73:3f:96:d8:3e:65:6a:17:a5:0c:ba:91:2a:71:
         4b:db:62:0a:73:e9:98:f2:32:c5:34:cf:2b:7b:ac:e2:6f:4a:
         4a:dd:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org