Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
File:                     3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          tNYhGN0U0g/hmoUX4dC7hHFMoH5nPpdsWWxUjD7e9tQ=
Subject key identifier:   17:69:D5:04:B0:70:C4:44:DF:A7:A5:A0:B2:A7:03:90:BF:DD:AD:2C
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       10281CEFA0209441CBBB50E19BEAFDEEB05A817A
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
Signing time:             Sun 14 Jan 2024 03:44:58 +0000
ROA not before:           Sun 14 Jan 2024 03:39:58 +0000
ROA not after:            Sun 12 Jan 2025 03:44:58 +0000
asID:                     262300
IP address blocks:        138.36.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:28:1c:ef:a0:20:94:41:cb:bb:50:e1:9b:ea:fd:ee:b0:5a:81:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Jan 14 03:39:58 2024 GMT
            Not After : Jan 12 03:44:58 2025 GMT
        Subject: CN=1769D504B070C444DFA7A5A0B2A70390BFDDAD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:04:9f:24:9c:99:6f:06:b0:8d:7e:99:f0:
                    29:f9:aa:d0:b0:5a:4d:0c:34:05:ee:a7:2e:47:e8:
                    b7:41:fa:f1:1c:6d:02:21:b7:28:07:ad:74:8b:e1:
                    1a:07:8f:3d:05:38:1c:a7:ac:8a:6b:5b:43:b0:01:
                    6b:74:39:6d:17:2c:df:0c:f3:f0:43:03:0b:f3:64:
                    a7:84:7b:cc:68:ce:95:d5:96:56:9e:16:ce:54:af:
                    26:db:f5:02:dd:00:ea:97:d1:d7:35:4b:56:3f:f8:
                    cb:b9:67:f1:ce:ce:eb:52:fa:81:c4:2e:a2:5a:5e:
                    97:4c:24:36:bc:12:bb:16:d3:80:a1:89:7f:65:94:
                    c3:61:1e:92:83:3e:ae:38:27:0d:3f:18:df:ea:85:
                    af:a8:c8:0f:fa:38:b1:7a:01:8d:46:4c:aa:ad:f7:
                    4b:67:1c:e1:de:e8:25:2f:a8:57:3a:98:1f:7d:48:
                    ba:98:00:58:66:f0:0a:2c:a8:f6:a0:c4:17:46:8b:
                    2b:c3:33:97:60:88:80:c0:fe:93:75:a7:ed:5a:c8:
                    b5:84:2c:c9:cc:6b:a8:83:1b:f6:19:1d:0e:7b:28:
                    6b:07:7a:8d:e6:0e:5a:9c:5e:93:9f:c5:c5:50:e4:
                    0e:9f:5b:dc:34:7c:38:9c:2f:43:fa:7b:71:6b:cd:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:D5:04:B0:70:C4:44:DF:A7:A5:A0:B2:A7:03:90:BF:DD:AD:2C
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:bc:f5:cc:e1:68:1d:c0:b6:8c:a6:f7:ef:57:35:a1:32:
         0f:32:ae:18:2c:5f:39:52:d5:10:85:31:1e:cc:b5:47:62:67:
         a5:89:8d:d8:61:0a:9f:a5:22:3a:81:0b:c6:6a:72:a6:b3:9c:
         3e:e6:4d:b3:3e:21:ed:c5:c7:f5:8f:27:fb:74:93:f7:28:2b:
         89:ca:0b:ea:18:96:20:5b:55:ab:eb:d5:56:b0:29:6e:18:df:
         b6:cf:d3:ab:d9:44:f0:54:c8:a8:c0:e0:49:00:78:91:f0:cf:
         f2:24:d1:6b:5b:d0:c8:3e:d8:20:f7:6d:c5:98:5f:52:71:5d:
         5d:eb:fa:46:dd:97:1e:79:c8:d7:8a:a5:fc:1d:25:ca:b3:ff:
         a8:47:5c:1a:3a:74:36:d2:be:eb:1b:b9:fb:1f:6c:84:03:64:
         3f:ac:4c:c8:f2:65:c9:26:58:0d:de:f5:75:3a:26:ba:27:e3:
         21:d8:3f:93:44:56:59:c6:e4:71:a6:17:90:d6:96:44:9c:4c:
         ea:56:00:fb:02:4e:ab:bb:91:fb:b0:70:01:d5:b3:e5:ad:fc:
         58:b3:81:c2:43:51:ad:f2:12:70:73:84:ef:67:f1:e9:8a:23:
         25:2e:81:b1:f7:1f:75:69:db:d9:89:c5:88:9e:32:47:50:7f:
         c4:db:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org