Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38352e302f32342d3234203d3e20323633383535.roa
File:                     3133382e3138362e38352e302f32342d3234203d3e20323633383535.roa (raw, json)
Hash identifier:          6Kjmk1OvCwy6JOAfkSdDARER98dhLc14HyoZ7sltEL8=
Subject key identifier:   8B:12:7F:03:2E:CD:22:20:C5:6C:3E:E8:3C:2B:28:77:67:09:52:C1
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       19E88CD83AABE07106E1C8D1450D9BE02450D036
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38352e302f32342d3234203d3e20323633383535.roa
Signing time:             Fri 20 Jan 2023 15:32:46 +0000
ROA not before:           Fri 20 Jan 2023 15:27:46 +0000
ROA not after:            Fri 19 Jan 2024 15:32:46 +0000
asID:                     263855
IP address blocks:        138.186.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:8c:d8:3a:ab:e0:71:06:e1:c8:d1:45:0d:9b:e0:24:50:d0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: Jan 20 15:27:46 2023 GMT
            Not After : Jan 19 15:32:46 2024 GMT
        Subject: CN=8B127F032ECD2220C56C3EE83C2B2877670952C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:b3:86:0d:f2:9e:49:3a:3b:c9:7f:a0:1b:
                    8c:dc:5d:34:db:bd:7b:ed:c5:43:0f:1b:6d:b0:30:
                    89:ac:12:36:eb:b3:f4:1b:ef:4e:1f:95:0b:47:9e:
                    4e:9f:c0:f6:39:21:28:22:b2:a2:59:65:d8:76:b3:
                    81:78:cc:39:54:c5:e5:b3:6d:50:25:52:32:2e:43:
                    2c:4b:ca:50:65:ea:4b:6f:a7:0d:70:20:5a:98:60:
                    62:69:cc:eb:1b:fc:a8:0f:9a:32:b5:f7:c1:a6:98:
                    e9:b7:bf:34:3b:cd:6b:42:8b:03:15:d1:53:4c:d7:
                    2b:08:02:e3:8a:b5:21:32:7a:22:42:b9:45:37:2b:
                    48:ba:83:b8:ef:ce:ce:c1:24:a5:fe:85:da:02:4b:
                    56:b9:2e:1f:fa:32:26:ce:c0:35:17:49:01:6b:b8:
                    1e:1e:be:d1:e0:f0:88:67:ad:bd:75:e8:f5:5b:49:
                    6c:46:43:16:fc:5e:e9:8a:f2:2d:a3:97:1f:82:3f:
                    eb:d2:a3:1d:ee:81:a5:d2:c0:3f:44:1a:26:c3:a1:
                    af:1e:49:60:12:10:b7:9a:b5:9f:f8:a3:c3:21:f4:
                    fa:a3:7e:c6:f4:f6:7a:00:8c:b2:ee:83:e8:8e:6f:
                    c6:c3:e9:ad:1b:fc:a7:86:37:df:9d:2f:3b:da:83:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:12:7F:03:2E:CD:22:20:C5:6C:3E:E8:3C:2B:28:77:67:09:52:C1
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38352e302f32342d3234203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:87:fd:9e:eb:37:07:e3:ed:08:d5:3e:84:59:d7:c6:99:23:
         fb:a7:5f:92:20:e4:a4:e3:58:c9:af:08:41:e8:61:e9:d3:77:
         f6:40:29:4a:16:77:a5:05:89:5d:3a:d1:6c:5e:66:10:e5:54:
         73:c9:7f:ab:60:83:47:6d:f3:8d:ad:15:e9:fc:d8:d4:c5:4c:
         6b:e3:d9:41:b5:d0:1a:d4:20:42:5d:92:5e:00:5e:71:82:67:
         a9:13:c8:4b:c2:f4:f6:4c:d5:c0:e5:c9:72:ad:26:df:8b:5a:
         9d:b8:4c:33:67:44:98:15:cd:49:85:10:07:2c:18:11:7d:9b:
         53:60:56:18:58:e8:15:04:e6:1c:ec:4b:38:3c:02:e9:b5:a5:
         d0:81:6d:a7:e1:3c:1d:e8:a6:c4:cf:4d:db:d8:34:6b:59:e1:
         dc:90:be:cf:d9:28:9a:58:fd:a0:db:99:cc:b8:ce:4e:8b:35:
         53:df:14:0f:d0:a8:93:6e:d5:a3:16:db:5a:4f:62:1f:f1:eb:
         f0:a6:f8:1d:a0:6f:df:d3:c5:8f:37:56:bf:02:77:15:f9:e1:
         a0:e3:53:ba:91:c4:10:21:38:06:50:fe:1d:fa:26:4e:b0:89:
         99:f3:9e:b7:7d:90:cb:b7:a4:ad:21:15:ec:f5:34:a7:9d:52:
         3f:2b:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org