Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          GdRv5pX20IBJbsBIFxCR+Ww5X3jXUC2UeRLx/fhN5Jw=
Subject key identifier:   04:A1:E8:ED:AC:03:7D:DC:09:0E:76:8F:04:85:4E:F0:DD:32:0B:32
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       1FB0825CD80E44B18A2CBD893B3B850A60C8376F
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:48 +0000
ROA not before:           Wed 03 Apr 2024 23:48:48 +0000
ROA not after:            Wed 02 Apr 2025 23:53:48 +0000
asID:                     61784
IP address blocks:        138.186.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b0:82:5c:d8:0e:44:b1:8a:2c:bd:89:3b:3b:85:0a:60:c8:37:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:48 2024 GMT
            Not After : Apr  2 23:53:48 2025 GMT
        Subject: CN=04A1E8EDAC037DDC090E768F04854EF0DD320B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:31:be:54:5d:28:e9:12:4a:3d:63:dd:0d:
                    da:94:52:71:40:52:55:7e:20:b0:20:84:9c:22:0f:
                    98:b8:ec:95:3b:f2:25:45:3a:9e:27:35:fe:73:18:
                    e0:19:a4:06:a7:0a:81:b1:fa:51:ae:6f:56:4e:63:
                    e7:fb:01:e2:b6:c7:df:0f:b4:8d:f7:a1:7f:7b:39:
                    7c:00:2c:fd:e6:27:54:c4:26:f8:0e:10:fa:e0:74:
                    94:8f:9a:2e:fe:29:25:19:8e:10:8a:2b:db:b4:7f:
                    1d:3a:c4:0a:6d:9a:fc:86:fe:bb:f2:88:40:54:51:
                    3d:29:89:24:2e:12:1a:63:bc:11:a6:b6:53:e5:16:
                    90:3c:6b:da:66:90:26:e6:ab:85:d1:d2:9d:bb:36:
                    c3:26:10:f0:33:b2:d3:b3:c7:37:f4:63:a2:33:2c:
                    8e:75:f8:06:89:63:2d:d0:3d:b3:35:ec:92:43:4d:
                    f9:47:2e:4f:34:8f:5a:17:25:22:bc:95:ca:ec:a5:
                    ef:19:66:84:01:38:47:20:93:3c:e6:ef:67:da:1a:
                    02:0b:c4:4b:de:23:6b:b6:87:f7:8c:0b:a1:55:90:
                    14:00:38:80:ea:3f:8a:1d:8c:cc:59:bc:26:38:6d:
                    93:db:b4:71:c1:0d:55:cb:aa:68:d3:86:8a:15:6d:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:E8:ED:AC:03:7D:DC:09:0E:76:8F:04:85:4E:F0:DD:32:0B:32
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:89:90:04:a7:8c:6a:78:c2:31:4e:cf:dc:d4:4f:1e:8f:
         90:85:00:30:de:5f:b5:de:62:fb:e3:cf:80:83:71:ca:b2:36:
         a6:a7:dd:fc:0c:67:fb:60:41:56:26:fc:5f:8c:1a:fe:eb:fd:
         86:79:66:f0:3b:03:62:81:34:e5:80:ab:59:7b:d0:c4:db:b2:
         4f:c2:3b:a9:6e:e7:20:f2:70:e1:0e:cc:bc:78:c7:94:37:ad:
         1a:90:9c:bf:29:56:86:9b:c5:0e:cb:b2:2f:7c:df:af:ca:43:
         aa:49:2a:92:cc:c8:71:d4:94:85:e0:23:be:93:6c:db:3f:41:
         f9:81:ca:3a:b3:38:b8:8b:81:ce:0b:7d:af:7b:3c:9d:6f:50:
         29:08:dd:6e:c4:91:00:b0:ce:e0:33:ad:a1:40:51:e6:ab:2f:
         f4:44:fe:33:24:0a:62:b2:c1:74:ae:5a:e1:0d:7f:2d:b2:cf:
         82:3b:b2:c9:e4:1e:54:10:54:53:cf:aa:a3:10:60:b0:16:29:
         d1:e9:5d:e7:aa:53:35:17:12:3a:7b:cc:c0:25:cb:07:5f:6d:
         fa:9c:8f:ba:ed:e3:c7:2c:b0:c6:c8:3d:b0:e1:e1:de:bf:a1:
         53:de:0a:d9:e0:b3:38:32:62:eb:ec:f1:51:d5:b6:24:74:70:
         b6:3a:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org