Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa
File:                     3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa (raw, json)
Hash identifier:          yMCt3m1FSUXlYT9CBT2W5MDp9i3n50ltwFH46irhXik=
Subject key identifier:   52:66:E5:49:9E:35:77:8E:38:1A:01:C1:A7:9F:6A:C2:34:34:94:8C
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       67B55BEB183CCB884E8F2B269DB21C461FDAFB55
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa
Signing time:             Fri 20 Jan 2023 15:32:37 +0000
ROA not before:           Fri 20 Jan 2023 15:27:37 +0000
ROA not after:            Fri 19 Jan 2024 15:32:37 +0000
asID:                     263855
IP address blocks:        138.186.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b5:5b:eb:18:3c:cb:88:4e:8f:2b:26:9d:b2:1c:46:1f:da:fb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: Jan 20 15:27:37 2023 GMT
            Not After : Jan 19 15:32:37 2024 GMT
        Subject: CN=5266E5499E35778E381A01C1A79F6AC23434948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:88:cf:99:33:e4:35:c1:03:68:41:4c:6a:
                    1d:02:e3:5e:54:55:6e:81:5a:24:4d:95:a1:93:8e:
                    be:b8:60:4b:99:da:77:d7:96:88:18:83:e1:4e:f8:
                    19:79:f3:46:67:a4:16:9c:b1:73:c7:ab:a7:bc:ac:
                    20:53:bc:5c:5d:11:91:8f:e1:a6:25:ea:20:87:fd:
                    71:c4:45:be:74:ff:af:1c:ed:3a:cb:b7:b2:d4:ab:
                    ef:3c:ef:2c:a3:b5:02:fe:ba:1a:5e:00:ea:14:b5:
                    37:ad:29:1d:d1:ba:3f:d6:db:c3:8e:64:d7:ef:ad:
                    f7:9b:dd:5d:81:08:81:6b:3a:37:e9:fb:88:23:06:
                    fe:1c:c6:6f:ab:a9:b7:de:d6:22:71:df:43:21:d3:
                    b7:21:1d:e3:68:3e:57:d8:b7:9f:e6:ac:e5:70:2e:
                    fe:0c:bc:f3:ac:08:b5:fc:ed:ea:b2:20:39:d8:f5:
                    1c:10:91:63:8a:b3:a3:11:14:91:ea:79:e7:56:fe:
                    11:52:81:a7:fb:a3:16:10:20:8b:c5:25:87:32:b5:
                    13:d7:f9:22:6b:e6:79:73:0f:97:82:aa:e7:85:16:
                    14:67:1b:ec:52:ed:63:96:2b:62:53:00:96:1c:32:
                    cd:24:d2:53:ca:7f:c0:47:ff:14:1f:8f:83:cc:a9:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:E5:49:9E:35:77:8E:38:1A:01:C1:A7:9F:6A:C2:34:34:94:8C
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32332d3233203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:af:55:fa:7e:e7:a5:6f:2d:79:4c:30:bf:73:f5:75:e7:
         da:6e:12:c2:a5:90:35:e5:c5:a8:ca:7d:85:14:98:da:2b:de:
         15:e5:9e:12:3f:4f:5d:79:8a:3f:16:70:c0:33:fa:c1:57:13:
         dc:85:22:c5:cf:75:1e:5e:53:f7:93:51:46:ac:6f:61:8e:d9:
         b0:a1:34:af:bc:c6:11:9d:58:1a:07:73:c4:1a:9b:72:35:db:
         0f:bc:c1:46:73:3f:f1:6e:35:28:3f:43:f9:17:b1:b2:a3:0c:
         70:86:71:aa:b0:cd:4b:98:ef:8b:5b:cc:da:ec:ce:55:de:2c:
         78:0a:f7:dc:39:ff:5c:d5:d4:8e:4f:80:d0:34:4d:ef:f2:33:
         ea:cf:2c:55:cf:12:5b:62:bf:8a:58:8d:83:c5:ac:7a:5e:22:
         3c:a9:ea:1b:2c:d1:83:45:5a:31:68:31:7b:ca:03:38:f7:84:
         6f:d3:b0:4e:16:af:2e:d8:5b:f8:9f:f8:c3:f5:aa:4b:31:89:
         08:44:08:9f:4f:8b:64:ff:3a:26:97:68:a7:0d:dd:57:ac:ec:
         7b:d1:66:c2:6e:f8:4b:8f:d5:c1:28:a6:46:66:d1:ff:df:fa:
         8b:77:ce:bf:b2:bf:2d:62:d3:a2:bd:da:c2:96:b4:3a:9a:96:
         8f:95:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org