Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa
File:                     3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa (raw, json)
Hash identifier:          AM2V9rzH5NpAGxvqh3Q3gWtVrg3gkeE1ewKeLGOEAvY=
Subject key identifier:   2D:86:EF:D4:03:98:0F:AA:A5:AB:D1:B0:49:C2:FD:8A:69:9B:D1:0A
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       6F10A8A5833E57B835DA075ADF52D8AEE7B58C32
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:32 +0000
ROA not before:           Wed 16 Nov 2022 22:22:32 +0000
ROA not after:            Wed 15 Nov 2023 22:27:32 +0000
asID:                     262649
IP address blocks:        138.219.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:10:a8:a5:83:3e:57:b8:35:da:07:5a:df:52:d8:ae:e7:b5:8c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:32 2022 GMT
            Not After : Nov 15 22:27:32 2023 GMT
        Subject: CN=2D86EFD403980FAAA5ABD1B049C2FD8A699BD10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:e1:8b:c9:fc:db:43:a6:3f:1e:31:27:b8:
                    66:8f:9c:4d:e1:03:01:8a:4c:9c:7f:2b:40:f5:a1:
                    0c:57:9c:55:12:7a:ca:1e:71:57:2b:6b:5e:66:3c:
                    3a:8b:cc:03:c4:d0:5f:97:d7:1a:61:44:00:92:f5:
                    7e:07:fb:de:c4:58:67:02:d8:75:a0:e0:34:64:68:
                    cd:69:76:5f:71:06:02:99:d3:c1:ef:d2:28:50:87:
                    31:1b:9a:93:c4:1a:f0:57:5d:ee:85:b5:32:76:28:
                    90:e8:66:60:47:5b:91:ee:fe:59:fa:94:2f:2f:a5:
                    a0:e3:59:41:55:42:f3:3f:d1:26:14:9f:59:ba:16:
                    45:be:a1:73:0b:8b:69:e3:ef:61:74:6b:89:e8:f3:
                    ef:1e:53:76:2c:99:f2:cb:20:ee:ac:69:24:89:e3:
                    15:95:5e:19:b8:c2:4c:0d:a7:36:67:45:08:9d:b9:
                    bb:b7:83:22:e8:a0:36:a9:2d:04:45:e7:de:87:ee:
                    ee:4a:6e:a9:fb:1d:b6:45:30:99:3b:d4:e3:34:1c:
                    74:0a:3c:e7:7b:7c:fd:03:af:1b:77:1a:67:d4:2c:
                    3b:ff:ba:3a:57:90:33:8b:d4:96:82:f0:47:77:8d:
                    b7:94:f6:b4:45:49:a1:32:b9:b2:3d:6f:c3:df:29:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:EF:D4:03:98:0F:AA:A5:AB:D1:B0:49:C2:FD:8A:69:9B:D1:0A
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32322d3232203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:27:f5:e7:06:e2:77:0e:55:ef:a4:fd:28:6f:0b:8c:11:
         f8:06:ad:b4:86:a6:8c:4d:30:1a:3d:3c:fe:43:94:5a:63:cb:
         4b:ed:21:2a:40:2f:8c:d9:91:98:e4:6b:2f:87:dc:49:3c:fc:
         7e:5f:57:ef:2f:44:24:0c:cd:71:93:22:ad:fd:0f:e5:10:f1:
         51:61:76:84:f4:97:94:89:c5:b6:02:ec:57:53:91:91:1d:67:
         38:49:d8:b8:35:5e:0e:48:80:3b:b5:b9:0a:9e:b1:50:27:7d:
         ce:40:fe:b4:3d:b7:be:56:da:58:f9:ff:f2:7f:77:6e:34:fe:
         10:a7:8e:ba:12:9e:f8:f5:ee:17:c9:15:ed:d3:fb:58:8f:47:
         ce:bf:3e:bd:13:84:e5:bd:01:00:d0:38:8f:1b:ab:47:ce:94:
         80:63:96:27:02:51:4f:53:83:f7:64:18:f9:24:c2:7b:91:da:
         f6:99:d1:cc:80:d7:4a:f2:1a:a5:bd:f8:02:21:a9:65:a5:14:
         b5:2d:4b:e9:4a:0e:a2:14:bc:cc:ca:d4:cd:82:07:b6:20:d0:
         5f:d0:66:08:cb:24:1c:32:2a:d3:97:70:4c:61:85:0b:40:07:
         d3:d0:98:63:d3:c9:c6:26:83:11:91:e2:a2:53:79:8f:16:9f:
         8b:24:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org