Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
File:                     3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (raw, json)
Hash identifier:          NipIZCSHRbSSYzUugdfHQs1eGN0zVxiNKgOwirBGMeE=
Subject key identifier:   9D:D6:6F:1B:68:82:72:93:92:22:EF:BA:4C:D3:12:07:DF:71:2C:49
Certificate issuer:       /CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
Certificate serial:       36301D4DB8B5D4899ED0F6EB3A73548E4733D9AE
Authority key identifier: 37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
Signing time:             Tue 03 Oct 2023 15:37:06 +0000
ROA not before:           Tue 03 Oct 2023 15:32:06 +0000
ROA not after:            Tue 01 Oct 2024 15:37:06 +0000
asID:                     28187
IP address blocks:        138.185.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:30:1d:4d:b8:b5:d4:89:9e:d0:f6:eb:3a:73:54:8e:47:33:d9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0
        Validity
            Not Before: Oct  3 15:32:06 2023 GMT
            Not After : Oct  1 15:37:06 2024 GMT
        Subject: CN=9DD66F1B688272939222EFBA4CD31207DF712C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:82:d0:e1:af:d8:98:5f:17:2e:d4:22:01:
                    fb:08:96:99:39:fd:ce:b5:d1:5f:1b:43:0b:99:c1:
                    1e:f8:2b:38:99:a9:c0:ac:77:01:07:0d:72:2a:73:
                    06:ec:e3:99:72:b2:df:65:c2:5c:30:51:49:f4:ea:
                    ca:68:a9:29:33:33:0b:2e:38:4e:10:e0:62:78:6a:
                    2a:51:52:72:0d:6a:37:b5:e4:65:6a:81:41:71:cf:
                    cc:f5:4a:4e:38:30:f0:68:e0:e2:69:f4:e1:21:8c:
                    3f:4d:39:b2:bb:55:f4:0d:44:8b:7a:6f:ce:0d:f7:
                    20:ec:bf:fb:27:f8:40:25:3a:1b:87:04:04:f2:27:
                    45:79:6f:b6:b7:65:19:76:62:7a:65:e8:80:08:04:
                    58:51:9e:32:e7:8a:5f:e2:8b:84:27:a8:75:2a:56:
                    b2:b6:c4:4d:54:d9:e7:6b:7c:b6:9f:3a:cb:66:72:
                    2e:69:af:89:a2:65:8b:e6:5a:05:7e:c3:f1:f4:41:
                    02:b6:be:ce:98:6d:95:97:83:59:fa:91:fd:8e:e6:
                    9c:8b:24:48:8b:d2:35:f5:a6:64:f2:64:36:5e:5e:
                    24:55:d0:e5:39:1b:4b:eb:cc:c4:81:40:95:7a:77:
                    dd:07:9b:34:6a:d7:85:08:54:b7:5c:58:a9:cd:e1:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:6F:1B:68:82:72:93:92:22:EF:BA:4C:D3:12:07:DF:71:2C:49
            X509v3 Authority Key Identifier:
                keyid:37:76:1C:1F:1A:6C:B7:9B:A8:AA:12:FC:BF:F4:F0:7B:FB:CF:A7:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37761C1F1A6CB79BA8AA12FCBFF4F07BFBCFA7B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:2d:ad:0f:bb:f1:1d:87:9b:3f:5d:41:0d:80:0b:41:66:
         e5:ca:e1:a9:65:f7:b2:f9:70:24:d0:90:0c:56:e0:e5:58:59:
         4c:0e:03:2f:47:bb:5f:7e:14:04:a4:54:54:1c:0b:a2:d5:69:
         a9:fb:3d:79:99:d8:fb:f3:3c:a4:42:30:d8:9c:23:eb:18:9d:
         35:3b:bd:68:40:08:4c:df:ff:02:21:8c:b3:bc:5a:fe:18:30:
         fb:52:65:dc:08:6b:ac:aa:0a:d0:9a:28:2d:8c:17:8a:54:7c:
         59:92:5b:91:06:07:2f:19:d3:4b:8e:26:2a:0a:1c:f3:16:75:
         36:ff:e0:b4:f5:79:92:4c:ea:4a:01:1e:6e:0c:79:ca:40:f5:
         ef:4b:1e:78:b3:83:28:ac:61:70:41:20:86:91:d6:5e:26:1a:
         73:43:a3:3a:1f:10:52:74:5d:88:09:73:eb:f7:e3:cf:66:15:
         ac:61:d9:da:a7:95:e0:ab:e1:27:a7:27:d6:2c:de:09:91:af:
         02:41:bd:11:77:4f:df:35:93:1c:88:de:f3:17:ee:e0:04:a3:
         a7:84:6e:7b:7b:de:51:67:8d:13:cc:30:6a:52:92:69:66:39:
         93:a5:25:25:7d:c8:59:44:21:78:54:b4:d7:b9:3c:bd:4e:e7:
         fe:f9:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org