Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa (raw, json)
Hash identifier:          wOdl3pwSsRVcMt0zYP+uo4eNwgSt0V1Bp/2yqHG6Za4=
Subject key identifier:   77:E5:EE:7F:12:6A:98:33:F8:4F:D9:A6:32:74:02:D7:32:D2:69:2A
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       30DA2BA5F0BEFC7338B6632C06360A11B70FC7AA
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:47 +0000
ROA not before:           Wed 03 Apr 2024 23:48:47 +0000
ROA not after:            Wed 02 Apr 2025 23:53:47 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:2b:a5:f0:be:fc:73:38:b6:63:2c:06:36:0a:11:b7:0f:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:47 2024 GMT
            Not After : Apr  2 23:53:47 2025 GMT
        Subject: CN=77E5EE7F126A9833F84FD9A6327402D732D2692A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:5b:b4:c4:1d:e4:7f:01:13:ed:7b:e7:e7:
                    c3:62:84:b3:6e:32:05:e1:0b:ea:e8:cb:25:9f:51:
                    c6:e5:1b:f3:29:11:ab:4c:48:bc:43:23:15:21:69:
                    53:68:86:8e:1d:e1:88:a4:b8:b3:60:f9:a6:c7:23:
                    af:fc:97:78:94:66:7a:07:63:f9:17:75:06:12:bb:
                    72:ff:44:56:46:00:26:48:2c:ba:52:08:dc:5b:8b:
                    0a:fb:9b:d8:74:3f:cd:02:d6:dc:77:db:cf:32:6f:
                    7a:30:e8:08:47:88:f7:ff:50:8c:d3:ed:aa:20:3b:
                    12:81:20:72:a0:26:b1:8b:52:61:6d:4c:35:1c:8b:
                    ad:e1:28:66:88:9f:a2:4b:e2:73:19:91:95:59:1f:
                    cf:df:a1:b4:60:ad:3f:f7:21:08:1a:08:0e:7f:f8:
                    cc:c4:25:e1:82:e1:4b:6e:ba:12:c2:7b:ee:f6:91:
                    57:26:58:56:a0:71:9b:e6:de:7c:85:ce:6c:22:17:
                    d8:93:c9:f4:ce:57:bb:07:03:c8:ad:23:c5:ec:00:
                    0b:3d:89:1f:68:e2:5e:ba:ba:c0:bf:b3:55:1c:b4:
                    17:21:ac:b9:d0:b8:c4:87:03:1a:e4:5b:6b:46:10:
                    1a:49:0c:0c:2d:69:d3:80:b7:0f:5e:3a:25:6e:29:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:EE:7F:12:6A:98:33:F8:4F:D9:A6:32:74:02:D7:32:D2:69:2A
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32322d3232203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:14:35:6e:ec:d0:e6:a2:6a:00:c5:49:c6:1e:69:e8:05:61:
         86:34:14:30:99:cf:bf:0b:89:29:61:32:38:49:cf:75:32:31:
         66:5d:08:6c:c3:4c:86:83:69:d7:d2:c0:f8:72:5d:2a:3f:33:
         b2:92:95:06:8d:8b:5b:d8:6b:cf:7c:76:e9:9d:71:3d:2b:d2:
         eb:39:03:1c:3f:5d:23:52:ad:0d:ca:e9:bf:f0:bb:27:b2:ab:
         39:a5:f2:5f:4b:a9:93:90:13:62:6b:81:fc:b2:4e:c1:df:ad:
         f4:be:2e:f3:55:1f:aa:2c:13:2f:65:f1:5f:85:c5:af:15:07:
         ca:0e:d3:b4:cc:54:f1:b7:a7:e9:7d:12:b5:36:dc:38:56:88:
         69:4a:55:f8:81:d1:86:5c:1d:0f:a4:49:3b:f5:47:6a:03:46:
         76:f3:98:99:4b:ec:d8:f3:f4:3b:30:87:0f:04:75:73:7a:66:
         2c:7e:01:01:88:33:b6:22:11:da:c5:94:0e:c5:fa:f9:09:72:
         64:00:7f:01:3f:a2:3f:d2:09:4e:50:e6:ca:c8:b7:51:06:4f:
         a2:33:61:8a:79:32:24:38:b6:d0:55:ee:48:7a:7e:38:6b:76:
         a5:54:5f:93:ed:d0:dc:4f:66:60:6c:6e:5d:e0:a9:c0:59:8a:
         10:12:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org