Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138352e302f32342d3234203d3e203631373834.roa
File:                     3133382e3138362e3138352e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          ImoAGn/MpPiIxgKXpqzGrIOnTassbFOCxZUSG0bPQO8=
Subject key identifier:   AB:75:CC:43:34:79:94:85:3C:B9:40:D8:10:40:1A:5F:5A:34:FB:F6
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       7673BC72E735F595F93CA6B6E4DCC87499CBED60
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138352e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:50 +0000
ROA not before:           Wed 03 Apr 2024 23:48:50 +0000
ROA not after:            Wed 02 Apr 2025 23:53:50 +0000
asID:                     61784
IP address blocks:        138.186.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:bc:72:e7:35:f5:95:f9:3c:a6:b6:e4:dc:c8:74:99:cb:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:50 2024 GMT
            Not After : Apr  2 23:53:50 2025 GMT
        Subject: CN=AB75CC43347994853CB940D810401A5F5A34FBF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:ee:c9:8e:c3:4c:34:c9:4d:26:0b:6c:10:
                    5f:a7:7a:d7:35:e6:b9:51:23:89:2b:0a:4d:5f:fd:
                    35:12:62:21:50:17:0b:ee:e8:86:41:b3:f0:8e:5f:
                    a2:ad:b6:72:4d:ab:b4:66:da:ca:d5:0c:44:4a:32:
                    74:13:f4:c2:67:76:4f:22:8c:fb:bc:46:eb:6a:ae:
                    9c:74:f0:96:79:2c:59:2c:9c:f1:f2:a3:d2:03:cd:
                    80:c7:ba:11:e9:21:53:19:43:df:27:cb:12:c3:0e:
                    20:99:b7:29:1b:12:45:a6:80:cf:2a:04:05:ec:84:
                    5f:2f:2d:e4:dd:bc:62:1b:c8:b2:71:9e:84:db:0e:
                    a7:3a:26:71:89:c4:2c:52:45:2c:ba:a6:f5:f2:00:
                    76:1a:87:06:e0:66:09:44:45:e7:b6:04:c4:38:d3:
                    55:8f:83:be:e9:0c:ff:cc:1f:ea:6c:ef:89:73:de:
                    29:1b:3d:10:3e:c8:a7:ba:21:34:de:c3:39:3b:3c:
                    cc:a9:c0:dd:9a:0e:5f:58:54:65:2e:50:b9:45:cf:
                    39:69:2c:b4:1f:f4:65:df:23:84:84:14:f0:af:54:
                    46:bc:66:e4:00:f8:70:b3:41:7b:06:6f:dc:a2:9a:
                    1e:2c:7e:a3:95:72:67:3d:38:f6:df:ea:09:c3:45:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:CC:43:34:79:94:85:3C:B9:40:D8:10:40:1A:5F:5A:34:FB:F6
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138352e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:79:b7:3e:70:1e:61:69:09:84:a3:2f:19:22:c0:7f:46:
         97:2e:55:35:48:c6:d0:ba:f0:9d:f5:61:b2:9a:d7:34:28:70:
         9d:0e:1e:ca:50:e6:15:4b:8e:c5:f9:6e:b2:a9:d8:7f:a5:9f:
         a6:ca:6a:8f:15:2d:37:17:b7:48:6c:76:0a:e4:21:00:28:42:
         79:21:58:2c:53:4d:31:85:84:ec:dd:ee:90:f8:55:39:40:d2:
         7d:ad:c7:26:b1:af:cb:b5:93:4f:01:4a:be:37:2f:07:15:14:
         11:86:38:8b:d9:35:aa:b2:9c:d7:36:e1:0a:c4:6e:d9:4a:73:
         51:1d:bc:70:e8:bf:13:72:8b:3d:c4:02:ca:2b:fd:00:c7:a0:
         83:36:3e:ea:7b:04:db:0b:81:e4:58:92:43:50:4a:4f:38:45:
         59:ca:9b:2d:79:6c:84:53:5a:1d:c3:25:93:89:92:d9:fe:09:
         90:52:e4:16:ac:b7:f2:f0:b3:74:f7:f4:cc:ab:3d:48:64:9e:
         00:1d:03:8a:9f:df:6f:ff:a7:5e:2d:e3:7c:c6:96:13:a6:a1:
         e3:bb:20:82:a2:78:16:0a:f6:ef:59:58:2d:a1:03:61:b1:b5:
         46:9e:b3:f0:b0:7f:dc:7b:da:73:73:00:f1:1e:1c:38:1d:70:
         27:47:96:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org