Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa
File:                     3133382e302e3136382e302f32322d3234203d3e20323633353932.roa (raw, json)
Hash identifier:          bEhkGwWavaf8E8AMd8jsjFakhcYwQLkDWxRVRKGNeCs=
Subject key identifier:   B3:A6:40:5B:86:08:F7:66:AF:A3:54:9D:14:A0:F6:76:78:77:C3:63
Certificate issuer:       /CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
Certificate serial:       52BFAC43C7E13E8AE8714CBEDD7812F70FD71CF6
Authority key identifier: C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa
Signing time:             Tue 15 Aug 2023 20:00:27 +0000
ROA not before:           Tue 15 Aug 2023 19:55:27 +0000
ROA not after:            Tue 13 Aug 2024 20:00:27 +0000
asID:                     263592
IP address blocks:        138.0.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bf:ac:43:c7:e1:3e:8a:e8:71:4c:be:dd:78:12:f7:0f:d7:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8336EEDF024BF7C85698838BBD22B1A5E1136B8
        Validity
            Not Before: Aug 15 19:55:27 2023 GMT
            Not After : Aug 13 20:00:27 2024 GMT
        Subject: CN=B3A6405B8608F766AFA3549D14A0F6767877C363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:c1:e7:22:bd:d3:81:01:28:dc:c2:6f:10:
                    d6:1a:a2:0a:f2:3f:73:75:84:73:e5:d0:d4:1d:6a:
                    9e:0d:b6:8a:00:d3:d9:ce:91:4e:f3:ae:32:d9:d8:
                    23:ab:c4:a3:a6:c8:48:41:5c:68:19:5b:ab:65:62:
                    af:37:3f:e2:56:b3:f0:56:35:ee:de:5c:4c:f7:1d:
                    b4:e2:84:5d:29:04:fd:5c:a8:a0:16:ad:1e:5c:26:
                    dc:3c:0f:00:5f:ce:98:32:5b:3b:47:f3:6c:cf:97:
                    21:eb:01:b2:4b:35:44:d1:a3:a0:16:78:f4:7c:7e:
                    0f:74:f8:b5:3b:bf:e1:4c:af:3e:f1:94:32:a3:1d:
                    05:26:63:2d:98:12:12:31:ac:1f:c9:3e:91:5e:3b:
                    92:a3:11:1f:35:cd:f0:b2:a0:02:cc:bf:ec:72:5d:
                    b4:ae:cd:21:66:54:47:57:04:a5:e6:35:81:15:f6:
                    6a:36:91:e8:0b:b2:19:96:8e:ac:1e:58:e8:c2:4c:
                    b7:ba:ea:90:fc:42:f4:ab:83:4f:e5:e8:4e:9f:b6:
                    64:e0:4b:eb:43:25:e6:fa:a7:3a:99:87:c2:e1:02:
                    73:06:46:cb:f1:0d:de:7a:93:b6:4d:bc:67:f1:11:
                    18:8b:e3:3c:f5:10:64:42:83:4f:95:dd:97:d9:92:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:40:5B:86:08:F7:66:AF:A3:54:9D:14:A0:F6:76:78:77:C3:63
            X509v3 Authority Key Identifier:
                keyid:C8:33:6E:ED:F0:24:BF:7C:85:69:88:38:BB:D2:2B:1A:5E:11:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8336EEDF024BF7C85698838BBD22B1A5E1136B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/0/3133382e302e3136382e302f32322d3234203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:90:31:9b:10:40:f8:5a:6e:f2:e3:7d:df:79:df:fe:8c:9a:
         9f:97:83:e2:a0:a4:62:7d:a4:25:3a:9e:3d:55:5c:56:79:39:
         54:a5:a5:62:0a:84:7c:28:23:71:53:41:a4:54:51:b7:91:1c:
         0a:46:93:07:39:4c:7d:48:28:0f:c2:8a:48:fd:dd:32:7f:3e:
         a4:6b:d9:a5:fa:f3:7f:06:84:f5:90:35:52:d4:23:60:6f:54:
         83:56:71:60:98:49:cf:1f:5c:f9:ba:bc:88:44:2b:22:6a:94:
         0d:ce:c5:f6:03:c2:a8:aa:05:73:e6:7d:c7:b8:5d:75:7a:54:
         ec:6d:e9:3a:64:44:2c:84:0e:8c:8f:a0:5e:d1:05:8a:d2:43:
         2c:17:43:0e:c3:4b:f9:14:4e:c6:62:91:48:96:39:73:c9:fd:
         b5:23:d0:ef:67:f7:2e:d3:d1:f1:3a:15:aa:e5:64:7a:7c:5e:
         10:6e:3f:c5:10:33:62:ea:3e:bc:58:50:cb:2b:7f:a4:b4:67:
         d7:ad:12:b4:91:6f:36:37:fd:d1:4b:3a:74:29:80:51:84:7f:
         34:38:68:e7:66:a4:94:57:f3:4b:4e:86:5b:8d:4f:81:2d:7d:
         40:d2:8d:bd:20:2e:52:c4:20:34:c0:56:72:ef:1a:53:f2:0f:
         c8:7e:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org