Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3233203d3e20323632353138.roa
File:                     3133382e3132322e3137322e302f32332d3233203d3e20323632353138.roa (raw, json)
Hash identifier:          ILcN2OiK/fltQWrzjdaZf9JRQWWRnFNzR7bqRkIJdJQ=
Subject key identifier:   8A:15:A6:EB:C1:3B:06:9D:36:CE:43:FF:1F:62:65:77:35:45:C8:05
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       4C363D0E89D146886A2FCE7E0C27266CF465E974
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3233203d3e20323632353138.roa
Signing time:             Wed 27 Sep 2023 16:42:46 +0000
ROA not before:           Wed 27 Sep 2023 16:37:46 +0000
ROA not after:            Wed 25 Sep 2024 16:42:46 +0000
asID:                     262518
IP address blocks:        138.122.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:36:3d:0e:89:d1:46:88:6a:2f:ce:7e:0c:27:26:6c:f4:65:e9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Sep 27 16:37:46 2023 GMT
            Not After : Sep 25 16:42:46 2024 GMT
        Subject: CN=8A15A6EBC13B069D36CE43FF1F6265773545C805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:9f:82:a8:87:a2:cb:4c:81:a6:32:b9:07:
                    0c:40:f7:3d:a5:86:b1:5e:ae:ff:56:0e:75:88:f4:
                    8f:4f:a1:e6:b8:42:2e:a8:34:11:d9:4a:23:65:83:
                    bb:88:0e:fc:34:8e:0d:2d:92:d4:7b:41:c7:40:d5:
                    92:4a:88:8e:e8:78:71:06:b3:75:ac:5a:67:af:a4:
                    40:76:58:93:e2:55:2d:55:43:d1:ab:e3:69:01:29:
                    25:4b:ff:03:fb:97:14:31:ac:ef:41:30:71:22:f4:
                    c6:fd:6d:5f:89:06:98:41:85:6a:21:21:91:1d:df:
                    52:ad:90:00:ea:69:ba:87:f2:0d:54:26:20:ce:d0:
                    c2:a4:75:bd:26:ba:d8:6e:6e:f0:93:a5:b1:91:e9:
                    da:30:ac:16:8c:65:38:ef:d4:f6:91:0a:9b:09:2d:
                    ce:ec:d4:86:da:fd:7e:8a:d8:38:34:7d:ab:85:c3:
                    96:66:f4:84:aa:13:5b:c8:24:b1:31:92:81:7b:eb:
                    90:3b:c8:54:7d:57:2f:3a:43:a7:b2:4b:f4:c3:a5:
                    df:f8:4c:a0:60:ba:c2:ed:a5:23:a2:d0:a9:47:91:
                    ab:2f:4a:a3:0c:6e:cf:d5:28:97:2a:27:0a:32:5f:
                    c0:cd:50:36:f2:40:6c:6e:b2:ae:93:d8:e7:e9:d3:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:A6:EB:C1:3B:06:9D:36:CE:43:FF:1F:62:65:77:35:45:C8:05
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3233203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:14:55:18:cd:5b:a5:f4:73:06:90:10:c3:63:8a:88:45:
         e4:6e:b6:c6:e0:e9:8d:da:57:55:0e:c2:f9:53:89:cb:55:99:
         f4:07:86:99:46:c8:87:60:16:d3:cf:22:25:51:37:bc:f1:54:
         9b:35:be:61:ff:82:fb:c7:b2:8d:d6:8f:33:f7:3d:0a:0d:42:
         96:c3:fd:39:eb:ca:f6:03:25:b9:ef:d0:c5:eb:9b:c0:d4:8b:
         f5:ad:2d:ad:00:47:77:cd:9e:29:62:9f:7a:44:72:38:e5:79:
         3a:01:e1:40:58:d8:e8:f4:f3:b7:2b:ff:cf:0a:68:90:6f:cb:
         e6:af:39:10:23:f3:16:44:91:2a:52:85:e4:9c:c9:a0:6d:38:
         a1:25:ad:01:f3:cb:88:e8:4a:0c:a5:af:33:78:96:e6:e6:72:
         69:6a:93:8e:7c:9f:f8:61:ec:03:13:5e:f9:7e:64:55:75:05:
         35:05:73:9b:e8:87:37:51:09:e7:61:16:60:38:b8:ef:06:b7:
         3d:81:7c:7e:05:f8:07:c3:e4:5d:38:e9:e2:02:6c:70:f5:cf:
         21:b9:6e:33:d3:2f:4f:c9:c2:cc:f7:cf:95:0a:2f:2b:16:87:
         9b:4a:b0:1c:13:71:85:ab:81:eb:a2:6e:01:f3:dc:5e:2a:03:
         fd:0f:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org