Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa
File:                     3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          E2Ih0ib043kLBjTW4HZnw2twtkIwKLbIIc6acPf41k8=
Subject key identifier:   88:73:56:E5:FE:E0:BB:8F:EC:EA:34:7D:ED:78:DC:96:6E:BF:57:26
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       6350CA052C0EB82E9325C01381E6909E49D8F4EA
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 20 Dec 2023 18:06:08 +0000
ROA not before:           Wed 20 Dec 2023 18:01:08 +0000
ROA not after:            Wed 18 Dec 2024 18:06:08 +0000
asID:                     61784
IP address blocks:        138.186.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:50:ca:05:2c:0e:b8:2e:93:25:c0:13:81:e6:90:9e:49:d8:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Dec 20 18:01:08 2023 GMT
            Not After : Dec 18 18:06:08 2024 GMT
        Subject: CN=887356E5FEE0BB8FECEA347DED78DC966EBF5726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:c9:6a:0b:6c:9e:91:ab:28:b3:81:94:88:
                    2d:04:ec:57:4f:fa:73:3d:72:25:90:92:3a:cc:d0:
                    96:44:41:c0:c7:27:03:ec:94:e9:2c:f7:21:52:3b:
                    8d:f3:f6:09:da:a1:50:bd:fb:00:8d:97:f2:f9:88:
                    49:e9:7e:49:96:19:b5:98:df:35:dc:71:7b:28:1b:
                    4c:71:4c:41:e5:89:b8:68:fe:61:ea:03:84:00:ce:
                    ec:17:e5:f1:95:1c:0b:49:4d:15:78:c0:cb:26:14:
                    86:ac:e6:d7:00:c7:f7:c6:28:a7:f4:c5:1f:d1:93:
                    30:91:62:53:5d:93:1b:95:84:3b:17:e3:3f:da:22:
                    1c:3b:4f:94:52:9b:99:7d:b7:0c:f4:52:35:fa:8c:
                    90:43:10:33:00:d8:2a:eb:17:57:e8:b4:49:f4:bd:
                    52:08:1a:ce:aa:b3:60:02:4a:21:1b:63:d1:97:19:
                    c2:01:b8:30:bb:39:07:fc:a1:30:6f:ed:36:6e:91:
                    4f:f1:42:97:de:a9:90:86:0b:ff:1c:d8:ad:c7:07:
                    66:1c:da:96:5c:cb:9d:03:c3:ba:91:1a:da:6a:be:
                    c8:d5:b0:fd:cc:ee:bc:ed:25:ae:71:43:c2:36:63:
                    44:96:1f:01:b2:9c:44:5d:4a:26:4e:04:b3:60:9c:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:73:56:E5:FE:E0:BB:8F:EC:EA:34:7D:ED:78:DC:96:6E:BF:57:26
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:58:2b:80:fa:48:78:0e:db:73:4c:41:a6:a7:f5:fe:4b:1e:
         5e:e9:46:20:8f:74:4d:2b:20:0a:a8:85:b5:35:18:94:b4:61:
         a1:95:09:76:cb:ec:54:9a:57:b5:fb:2d:fd:a4:b6:e5:97:ff:
         b9:16:59:1f:72:39:67:67:2c:dc:b1:11:b6:52:eb:44:6a:20:
         e4:f2:70:46:40:30:83:2f:c8:36:58:50:cf:ae:26:12:75:69:
         f4:fb:36:18:5e:74:77:f2:d7:4f:60:05:76:ce:cd:1f:ad:11:
         e3:a8:d3:65:a6:12:e6:4e:54:d7:73:3f:d8:81:c4:28:6d:d7:
         a8:8e:c8:51:83:f3:13:2d:41:eb:a0:b1:34:74:96:0a:65:3f:
         ae:3f:98:61:40:c0:b4:bf:a8:c0:b8:ff:f5:07:be:e2:d3:81:
         e7:12:68:4e:58:fe:3c:6f:67:0e:fa:82:d9:e6:39:a1:9a:9b:
         45:d3:c3:34:55:fa:4f:a4:ff:68:17:34:23:6d:39:6a:25:d0:
         cd:d5:a8:35:20:05:ef:ba:7c:c9:48:e8:8f:df:bd:80:e2:a6:
         de:5f:f3:9b:77:35:ba:44:af:54:a4:8b:5b:00:4f:d7:d8:06:
         4f:20:77:13:f2:24:75:c3:1f:c4:7e:25:07:29:f4:e1:30:70:
         e0:1d:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org