Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
File:                     3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa (raw, json)
Hash identifier:          IyUY1/YBVETXFKgfTgKp5Y/8arT5KC/rQQt1t1tFBs4=
Subject key identifier:   20:12:B4:B8:AE:EE:77:00:81:C5:C9:A4:E1:2B:51:A0:7D:11:5F:B4
Certificate issuer:       /CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
Certificate serial:       3335B6BA524350ED98695A732B16DE4A1DCEA726
Authority key identifier: 87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
Signing time:             Wed 06 Sep 2023 17:08:01 +0000
ROA not before:           Wed 06 Sep 2023 17:03:01 +0000
ROA not after:            Wed 04 Sep 2024 17:08:01 +0000
asID:                     263557
IP address blocks:        138.204.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:b6:ba:52:43:50:ed:98:69:5a:73:2b:16:de:4a:1d:ce:a7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
        Validity
            Not Before: Sep  6 17:03:01 2023 GMT
            Not After : Sep  4 17:08:01 2024 GMT
        Subject: CN=2012B4B8AEEE770081C5C9A4E12B51A07D115FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:5d:86:16:3e:a1:fb:97:58:2a:51:f2:56:
                    73:f4:93:25:ea:e8:a0:e2:0a:b4:cc:cf:f8:ed:55:
                    0a:e7:06:e4:2d:95:50:dc:fe:15:0f:6b:aa:05:5c:
                    6b:82:20:8b:2a:48:1a:33:cb:08:eb:d5:ae:6d:a4:
                    28:c9:19:b0:92:3f:cd:6c:21:27:7c:73:fe:02:0f:
                    1c:70:c0:72:00:b3:35:57:6d:f8:07:92:59:22:0d:
                    f1:6e:cb:73:67:4c:9d:cb:9e:d6:5f:14:9c:2e:ad:
                    69:c7:15:ff:6c:5f:ae:bd:0d:29:86:c5:4e:68:e6:
                    ba:e8:f1:b1:73:b8:a6:65:f2:cb:1a:d7:59:a0:2c:
                    73:ef:2c:ae:0e:c0:67:a3:a8:07:7f:2b:a7:51:aa:
                    08:6b:e5:95:d9:f0:3c:00:70:5a:7f:6a:a2:7b:ed:
                    61:36:07:c6:2d:dd:64:f3:eb:41:d1:7f:1f:35:af:
                    bb:43:d5:60:4d:76:d9:21:bb:06:09:38:6e:de:82:
                    06:4e:2d:a1:42:76:24:58:e5:ca:98:16:42:95:16:
                    4c:e0:f1:4e:88:f9:49:1b:4f:9f:34:41:4d:69:44:
                    f5:a4:aa:59:3a:63:d5:ff:b3:86:19:88:be:d2:fd:
                    07:40:9b:0c:b8:f0:34:43:6e:80:56:6e:d3:1f:f6:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:B4:B8:AE:EE:77:00:81:C5:C9:A4:E1:2B:51:A0:7D:11:5F:B4
            X509v3 Authority Key Identifier:
                keyid:87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:a3:50:8d:df:b3:e5:6d:c9:21:51:67:30:d5:95:aa:31:
         dd:b6:71:d7:dc:f6:58:58:6e:c1:b3:74:08:00:4e:b0:cf:e4:
         1b:0f:24:72:cf:51:f5:3b:61:d1:65:68:2b:3c:8c:b7:3c:58:
         ae:b6:8d:d0:9d:a7:f6:89:4f:6e:77:b4:2a:24:e2:84:44:d4:
         42:8f:8e:ba:29:2a:63:f4:96:06:e9:de:8e:66:52:66:22:39:
         80:2d:f8:b9:40:53:54:8c:48:f3:06:3e:af:bb:cc:bf:2e:69:
         be:8a:98:10:42:9e:44:75:70:9b:5f:8e:9c:47:1a:72:62:db:
         f2:3b:21:63:de:b1:14:cf:d1:bc:71:91:ed:a8:48:5f:15:77:
         8f:b3:d3:ca:c1:22:d2:8f:94:65:4e:6f:24:b1:7a:c7:b7:74:
         b9:4e:cd:9d:a1:a6:ea:46:0c:33:5f:87:eb:f7:9e:80:47:21:
         15:cf:ee:88:61:0c:b1:4d:2a:a4:55:f3:46:31:b4:cd:c6:1a:
         14:20:a4:18:a9:0c:52:85:ad:16:1c:d5:a2:8c:dd:e0:bf:c2:
         8b:1a:a3:d3:02:06:90:5a:9c:b7:51:19:63:49:eb:4c:aa:1f:
         b2:0c:e7:72:fe:af:fe:d1:bc:48:65:be:7f:b6:90:4a:b2:00:
         4f:c4:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org