Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa (raw, json)
Hash identifier:          kssdiqUvnHb5P77EnueaV8O0zfjeIPDQVJEuBsDSpcc=
Subject key identifier:   0C:83:17:09:70:82:EB:01:D1:C0:6F:6C:8E:8F:3C:42:6E:44:9F:8F
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       3214FEEC5E001286D13A039C722940F9ECE2E38C
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:06 +0000
ROA not before:           Wed 20 Dec 2023 18:01:06 +0000
ROA not after:            Wed 18 Dec 2024 18:06:06 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:14:fe:ec:5e:00:12:86:d1:3a:03:9c:72:29:40:f9:ec:e2:e3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:06 2023 GMT
            Not After : Dec 18 18:06:06 2024 GMT
        Subject: CN=0C8317097082EB01D1C06F6C8E8F3C426E449F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:f1:1d:dc:67:71:94:ae:0c:bc:84:d9:6a:
                    37:72:ae:57:9a:f7:d1:70:b9:3e:5c:1f:94:c5:6c:
                    6d:d1:66:89:77:1b:06:29:ce:e7:12:2f:88:26:7c:
                    08:fe:9c:1b:cd:6e:3e:e7:0e:ab:5f:bc:6a:a1:79:
                    fb:90:41:6c:df:ff:da:2c:06:e3:10:81:af:9a:98:
                    a0:6c:e2:71:21:f6:3b:05:d5:c4:80:42:0d:c5:a1:
                    db:cd:8b:03:a4:2f:af:71:6d:73:19:5b:cd:ad:18:
                    33:4d:56:1b:03:ad:56:ec:36:e3:6d:92:11:3e:49:
                    ca:8a:62:93:73:b6:9c:98:65:09:a4:e8:3f:c7:5b:
                    0a:9a:c1:2e:30:ff:38:dc:4b:f9:fc:1f:90:ef:84:
                    03:cd:29:e8:bd:43:d0:86:c3:21:f6:86:c5:b1:52:
                    ad:3d:f9:61:c4:18:a9:e2:f3:f1:e0:db:c2:79:aa:
                    ac:24:0c:a5:55:9d:bc:e1:19:f0:d0:f7:b2:ad:9e:
                    1d:2d:41:71:77:cc:09:eb:9a:33:c7:0a:23:20:89:
                    d2:d0:2f:50:47:87:01:2a:51:b8:80:8f:c2:8d:76:
                    db:b4:2f:93:1c:17:60:8a:c3:76:54:31:b7:30:2a:
                    fd:e8:6e:31:74:30:cb:ab:73:68:56:f0:d0:c4:d5:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:17:09:70:82:EB:01:D1:C0:6F:6C:8E:8F:3C:42:6E:44:9F:8F
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:ab:3f:5b:dd:e2:1a:7b:40:93:ce:54:06:2c:41:f5:aa:
         95:21:3c:fd:1a:04:7b:1e:bb:61:f1:6f:dd:d7:21:fa:75:ce:
         6d:ad:9c:2c:a0:bf:ed:40:38:56:19:05:c5:5b:f5:40:d7:57:
         b6:eb:da:bf:39:8c:19:fa:0f:df:39:6e:dd:e9:7c:03:83:df:
         dc:41:d9:16:14:af:bf:70:b4:e2:37:af:e3:b4:a7:da:7f:c6:
         a7:21:ec:5e:31:80:92:ed:33:4c:43:de:f6:1c:9d:e8:08:31:
         fb:4c:54:5f:d8:bd:ac:b8:56:16:df:7b:55:0c:ae:31:fd:dd:
         db:4b:36:3d:fb:25:33:0b:b1:55:19:c1:2a:54:f1:f9:38:10:
         99:b7:41:64:ec:d8:78:bf:c8:e9:d5:56:be:b6:93:1d:7a:a1:
         f6:34:6e:b9:19:d3:05:df:8e:dc:53:79:0a:37:43:e6:0b:c2:
         49:11:1c:76:06:fc:24:2a:51:80:ac:1b:cd:7e:38:12:24:15:
         5b:62:3f:85:1f:1d:42:47:93:21:4d:43:c5:01:a5:0d:b9:7c:
         d9:ba:79:dc:4c:8f:e4:7c:a4:66:61:d5:2c:26:d1:80:1b:a0:
         17:69:5e:78:35:b7:81:e0:52:8a:86:e0:26:9f:d9:06:19:e0:
         71:f9:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org