Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32342d3234203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          EADW1/B7TIuC1Iingb6BZTfM4JDeY6nFdmNa/eQumWE=
Subject key identifier:   3B:54:29:4D:D1:B2:2F:C7:AA:F4:24:1F:5F:78:D9:11:DB:B9:00:36
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       53C75097A63EF88843EAA14C6FAC962017A014A9
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:49 +0000
ROA not before:           Wed 03 Apr 2024 23:48:49 +0000
ROA not after:            Wed 02 Apr 2025 23:53:49 +0000
asID:                     61784
IP address blocks:        138.186.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c7:50:97:a6:3e:f8:88:43:ea:a1:4c:6f:ac:96:20:17:a0:14:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:49 2024 GMT
            Not After : Apr  2 23:53:49 2025 GMT
        Subject: CN=3B54294DD1B22FC7AAF4241F5F78D911DBB90036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:bf:77:97:43:42:db:b3:9a:b2:ec:9a:e5:
                    b3:29:6f:2e:de:68:7e:a9:e9:cd:93:8e:95:4a:fe:
                    d0:f9:c1:df:99:25:b9:00:a7:e9:8c:a5:75:c2:85:
                    6a:fc:ad:93:ff:25:4f:99:15:8b:eb:47:0a:e1:ae:
                    29:06:bc:a5:53:32:50:9c:78:85:03:b3:b6:d3:2d:
                    3d:d9:be:c3:dd:66:b6:e7:aa:2f:e4:31:f7:47:30:
                    fd:e9:ba:aa:21:3b:69:86:e1:41:b4:39:39:0d:a4:
                    1a:3f:5c:51:24:ed:1b:9c:2d:c7:f4:2a:d1:83:3e:
                    3d:94:2d:6d:67:a6:a9:d6:6d:1e:ff:e3:e5:37:20:
                    ba:e0:24:1a:c6:ea:93:f7:cb:07:c4:ec:73:f2:9c:
                    dd:47:de:61:94:8f:59:55:5d:b4:0b:85:f1:c0:ac:
                    8a:ed:92:bb:fa:02:a4:6b:3a:a3:af:81:c7:8f:17:
                    b1:08:fe:f8:f2:bb:b5:ad:b5:93:cd:4a:40:56:e4:
                    52:bd:8d:15:a8:c2:35:c3:fe:cb:40:ca:df:b5:45:
                    fa:91:69:63:ca:37:7f:ba:2c:86:5d:32:87:d0:37:
                    a9:9f:44:90:28:88:af:16:3e:73:d7:6e:5f:1b:e6:
                    5b:cf:9d:a1:45:b2:7c:2a:2b:1e:3a:68:b6:79:24:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:29:4D:D1:B2:2F:C7:AA:F4:24:1F:5F:78:D9:11:DB:B9:00:36
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138342e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:5b:3f:da:c5:ad:5a:6b:b8:af:37:57:45:1e:8e:c1:14:
         0d:aa:ba:e1:86:76:65:9a:83:b4:6c:59:ba:24:2a:74:3c:16:
         5d:ab:fb:22:d2:41:57:45:db:c0:67:3b:40:77:01:c3:d9:e0:
         cd:f3:84:8c:16:e1:9e:de:ec:fc:af:4b:13:a4:5d:f2:11:f2:
         91:e2:fc:06:74:d5:e0:81:e4:67:44:0d:82:44:7b:38:e4:b0:
         05:7c:4d:c8:1a:f0:d8:49:05:a5:2a:40:1a:9d:97:44:6b:4c:
         a0:2a:08:6b:45:01:da:7a:ba:e8:28:89:d9:7f:b1:e9:38:ac:
         41:14:c2:42:ad:d5:8f:1f:84:d6:b5:2c:7a:1c:72:d6:fe:3e:
         f5:c4:3a:e6:aa:75:da:8e:3a:ed:47:1d:81:26:2c:73:8f:39:
         05:26:c9:7f:ca:1d:d9:b5:8e:d6:60:12:dc:ec:09:5c:e8:22:
         0a:59:94:1f:86:9c:78:f5:71:cb:c2:46:5a:ca:7b:df:d8:b7:
         cd:7d:eb:ae:c7:b9:eb:0c:75:51:c0:a1:54:77:1c:6c:a8:8e:
         f1:9c:bc:19:78:c5:31:c1:bd:de:6b:36:80:2e:b4:5b:85:09:
         09:5e:d0:8c:90:5e:54:0f:1a:96:ae:95:76:f6:81:25:2f:df:
         bd:70:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org