Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          Gupg2ugilyGqzbv9MZknzCMikVDl5EcZeum8fzgOrgQ=
Subject key identifier:   FA:18:38:3F:A2:6F:22:20:64:8F:CA:02:1B:57:58:C1:65:76:A3:4B
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       3CF1E4E941E6229EBB06B6CDDCDD7E33AC39AC3E
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:09 +0000
ROA not before:           Wed 20 Dec 2023 18:01:09 +0000
ROA not after:            Wed 18 Dec 2024 18:06:09 +0000
asID:                     61784
IP address blocks:        138.186.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f1:e4:e9:41:e6:22:9e:bb:06:b6:cd:dc:dd:7e:33:ac:39:ac:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:09 2023 GMT
            Not After : Dec 18 18:06:09 2024 GMT
        Subject: CN=FA18383FA26F2220648FCA021B5758C16576A34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:66:f7:c0:71:d7:1b:96:0c:07:85:ef:16:
                    1a:47:b6:df:59:47:48:a1:b6:b0:b4:d9:2d:14:a1:
                    f1:35:af:29:6a:b2:d2:9f:5b:94:fb:2d:01:81:0e:
                    20:22:6d:ae:cc:0f:51:e8:22:d6:11:2f:44:80:24:
                    3b:ce:cf:37:a1:98:ed:2c:56:d7:7e:93:f2:bd:a5:
                    5c:dd:7f:f9:74:92:d3:50:05:99:eb:32:93:58:8d:
                    64:db:46:64:0e:c5:92:d0:5a:12:fb:43:bc:4b:69:
                    06:87:cb:4e:40:e2:35:4f:ef:b3:65:37:74:b8:b6:
                    d5:c8:55:ee:f8:5e:14:23:08:42:71:8a:b4:07:a0:
                    a5:8c:96:54:2b:1b:5e:37:1f:e2:a6:2b:5d:92:0c:
                    82:f8:68:cc:25:32:30:17:23:d9:77:f6:32:73:1a:
                    3c:12:22:43:f0:43:04:07:db:78:ce:52:1b:9c:59:
                    33:7c:f3:46:b5:39:b8:9a:54:f4:4f:ef:12:91:7d:
                    85:16:df:33:bc:09:8e:2a:f0:81:46:17:0a:11:90:
                    3f:6f:b9:06:05:8c:ba:0c:a2:93:ba:67:5e:ba:bd:
                    64:92:3a:93:00:6c:68:13:a6:02:e3:ef:6d:0d:86:
                    8b:25:31:c4:90:88:6b:7d:52:02:36:c0:9a:6b:2f:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:38:3F:A2:6F:22:20:64:8F:CA:02:1B:57:58:C1:65:76:A3:4B
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:e2:f8:eb:1b:1a:eb:ba:3b:e0:76:0c:9e:79:0a:91:71:
         73:18:bb:41:1d:81:e7:8d:9c:36:90:53:8b:d1:6f:25:17:ca:
         7c:55:1a:2a:e0:8a:27:b1:5f:5d:68:df:9f:ca:8e:59:04:8e:
         e3:d7:78:8a:cd:29:5b:6e:3f:76:3d:25:30:e4:a7:cf:ec:f3:
         e8:d7:ca:e0:3f:58:f3:4d:13:64:d4:29:f9:b6:fb:9f:83:ba:
         44:30:2c:61:b1:15:7e:9a:3a:a0:92:1d:86:3c:9b:87:2f:03:
         d0:72:cb:49:b7:5e:6d:6a:7c:16:e6:03:13:cb:79:d1:b7:18:
         d3:32:43:b7:f6:35:1d:c5:12:ba:c0:8c:2a:6e:0b:53:33:da:
         b5:2a:65:bd:b7:f4:c5:11:2c:8a:b7:a7:b3:d2:3a:a0:f8:9e:
         1a:b3:ee:10:a8:d7:57:d3:fa:90:7f:47:1e:1f:9d:9e:1d:ab:
         43:7f:1e:12:82:4f:91:0d:c4:77:28:ef:0a:8f:c4:ae:a1:df:
         1d:ea:99:c8:8d:f0:f5:83:7a:e1:2b:6a:49:d2:9e:01:ed:f7:
         9b:f4:9a:19:2d:bf:ee:0b:3a:0f:e3:73:a2:d8:8c:1a:54:b5:
         ae:0a:a8:ae:0e:6a:21:25:af:67:96:b6:60:a2:b3:46:45:49:
         76:a0:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org