Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139362e302f32342d3234203d3e203631383133.roa
File:                     3133382e3132322e3139362e302f32342d3234203d3e203631383133.roa (raw, json)
Hash identifier:          tTErwyGTJzSk+s78HRH17C2MTOhYxDdcnFyYNJ9R0rk=
Subject key identifier:   88:42:51:75:50:FC:11:29:7E:5A:7E:58:B0:92:F7:55:D1:21:58:2C
Certificate issuer:       /CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
Certificate serial:       0825EEC4076143D02D714846544EFE1CCD74C4CF
Authority key identifier: F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139362e302f32342d3234203d3e203631383133.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     61813
IP address blocks:        138.122.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:ee:c4:07:61:43:d0:2d:71:48:46:54:4e:fe:1c:cd:74:c4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=8842517550FC11297E5A7E58B092F755D121582C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:90:90:a7:07:cc:67:a0:0b:7c:4c:d3:18:
                    4e:7b:1e:50:b6:60:23:c6:af:f7:a0:90:bf:bc:b4:
                    3f:67:56:49:99:c2:ec:e0:b8:91:0d:b0:f5:47:e9:
                    a8:ab:50:5f:25:c3:8a:29:00:04:48:7e:1a:87:a7:
                    9c:af:d2:b3:b2:ed:e1:a2:9b:5f:68:57:08:eb:44:
                    cd:fa:8d:6a:8e:33:1b:7b:b7:2d:e3:63:70:4f:a1:
                    f0:35:93:25:67:7e:7b:6e:db:d0:10:a9:30:68:cb:
                    51:3b:b7:28:1c:c2:87:ae:e5:79:4e:7a:40:a5:d9:
                    b9:a9:98:f8:3c:7c:18:c1:98:ea:9a:a6:12:33:75:
                    61:08:6b:c9:62:07:14:a9:22:6a:65:80:21:ce:7d:
                    17:2c:65:69:7d:a9:75:10:14:e5:83:40:1d:23:68:
                    04:4c:3e:9a:98:7e:3b:8a:af:17:69:3e:a6:66:ee:
                    e6:e1:51:55:ce:6b:4e:6e:7f:c2:6c:48:09:5c:8f:
                    4c:c0:29:36:a9:1a:3a:1d:fe:3b:c6:e3:27:64:b0:
                    c3:0d:0b:43:8b:89:e9:14:53:14:7d:66:55:1a:52:
                    47:dc:74:80:2a:57:45:a5:81:b5:23:f2:37:dc:95:
                    d5:70:41:51:92:aa:fb:29:88:7e:38:33:e6:4f:bd:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:42:51:75:50:FC:11:29:7E:5A:7E:58:B0:92:F7:55:D1:21:58:2C
            X509v3 Authority Key Identifier:
                keyid:F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139362e302f32342d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:da:d7:ad:f6:bd:a4:25:db:83:f0:1b:e8:2a:64:2d:c7:
         63:f6:2a:a0:b6:24:30:4b:82:5e:6a:60:ca:28:51:be:7a:54:
         bb:92:f1:bb:7b:e8:d1:39:dc:c8:c1:49:06:13:3b:4e:82:78:
         f5:34:a6:06:84:7e:46:6c:80:c4:2a:01:70:3a:67:86:bd:64:
         b9:5f:e7:8d:0d:e3:40:17:96:54:7e:33:ab:7e:bb:8b:79:e2:
         bb:31:67:f9:0e:81:81:43:01:1f:86:0d:70:74:83:4a:e5:e2:
         2d:f7:f7:45:fd:19:a8:79:0c:d3:e9:8a:70:95:06:f3:67:7f:
         84:3d:1f:4c:d7:39:a9:00:2f:54:93:da:01:5a:d1:51:d4:d8:
         3a:e8:11:80:e2:b9:fe:1c:88:3e:26:bc:65:68:44:e7:2c:88:
         17:e2:b1:34:59:e0:80:1b:4a:67:6a:fa:3e:82:65:f6:9b:9d:
         ba:98:0c:79:ed:38:0a:c4:a8:0d:52:cd:a5:fb:94:f3:b0:93:
         cc:44:5b:10:cd:47:6b:49:63:7a:34:65:8b:06:fa:04:ff:e1:
         6b:c5:56:ae:0e:db:15:ea:94:ab:af:76:ff:89:8b:8b:32:26:
         80:68:77:6a:41:fc:e4:b2:b9:9f:e8:c9:90:f6:c1:a5:06:d0:
         7a:c5:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org