Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa
File:                     3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          OJOAh8b+1pdG0nuBjLIurXPswY9vQBMnQWBxdGrvCiE=
Subject key identifier:   5C:93:73:3F:A2:2F:1A:58:5E:11:71:AA:4F:87:2C:82:A2:94:78:79
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       7608EE7BA032A5F302E9EF5F77CBE3571C18DB8E
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 01 Nov 2023 13:00:00 +0000
ROA not before:           Wed 01 Nov 2023 12:55:00 +0000
ROA not after:            Wed 30 Oct 2024 13:00:00 +0000
asID:                     262952
IP address blocks:        138.122.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:ee:7b:a0:32:a5:f3:02:e9:ef:5f:77:cb:e3:57:1c:18:db:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Nov  1 12:55:00 2023 GMT
            Not After : Oct 30 13:00:00 2024 GMT
        Subject: CN=5C93733FA22F1A585E1171AA4F872C82A2947879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a0:a4:d8:2e:f2:69:92:c6:d4:b7:9d:c8:0c:
                    b5:73:67:fa:a6:80:75:38:67:f0:b4:6a:1f:32:7c:
                    0e:1e:9c:03:e6:3d:2f:db:4d:f2:ce:36:d8:3e:a9:
                    3e:3c:bd:a6:29:70:32:d5:cd:9f:41:01:9a:45:bc:
                    b6:0c:1d:09:ad:ff:d4:09:db:e1:ac:3d:93:09:62:
                    fc:3d:79:f0:1e:94:4c:6b:dc:fc:1e:3c:fc:6a:6a:
                    d1:54:ed:1d:09:2b:7a:1e:41:ad:7e:65:03:5c:83:
                    a6:8e:47:71:ff:6d:f3:b4:e9:3d:05:98:5f:1b:4d:
                    f0:96:e7:6d:de:81:9d:b0:26:5d:4a:bf:55:dc:a5:
                    ae:07:77:e9:63:14:cd:f6:44:29:28:22:75:bf:17:
                    af:95:bb:34:32:92:40:c4:be:e0:b7:8d:23:a4:f6:
                    3b:b2:a7:4d:43:06:35:0d:8f:e4:76:e0:00:97:d0:
                    be:cb:9f:c0:f5:f8:12:f2:f6:83:50:37:4c:9e:c1:
                    b7:1d:b3:82:f9:e4:b8:5b:78:0b:ec:99:02:4e:5e:
                    b0:00:cc:5c:ce:6c:38:55:83:e7:a7:6a:f9:e9:fd:
                    ef:aa:3b:e5:85:e5:aa:7e:f0:54:65:32:c8:30:90:
                    cc:ef:96:44:77:04:3a:c0:ce:d8:6f:63:f9:af:3b:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:73:3F:A2:2F:1A:58:5E:11:71:AA:4F:87:2C:82:A2:94:78:79
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3133382e3132322e3136382e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:99:e1:09:8c:71:ae:fc:8e:ca:b7:e9:e2:bc:5f:02:41:
         b1:f1:f0:6c:34:f4:87:db:6d:a6:90:4e:4c:7b:eb:5f:7b:60:
         d6:a1:8c:c6:5e:83:09:4c:36:6f:54:ba:d7:74:c6:db:01:71:
         64:27:0b:24:2e:75:e9:15:80:49:b4:43:84:0a:71:23:d2:6c:
         cf:7f:bb:10:85:07:d3:49:74:ff:d4:47:9d:43:71:c7:46:db:
         70:ab:59:45:2a:63:72:06:e3:c1:e2:fe:09:12:5e:66:6e:84:
         03:11:93:3e:12:3a:62:4b:32:5a:db:b6:49:70:99:d0:6f:71:
         f6:b0:4a:42:40:3d:92:7c:34:eb:85:cc:48:07:13:f3:ac:9e:
         df:70:2d:d5:3d:89:2d:7b:87:ef:c3:9f:43:65:ab:f3:21:d3:
         a8:c0:37:e4:77:7e:06:e3:b8:9d:a0:a3:58:f8:af:24:7c:03:
         a5:58:ef:ab:b7:f7:f7:cd:b0:5c:87:cb:ac:56:48:95:c9:ee:
         74:16:bf:20:51:73:c7:72:45:50:e4:27:6d:c3:76:00:c3:59:
         7b:ba:97:da:ad:3d:fc:67:c8:39:32:c9:de:de:a7:1d:10:13:
         dc:bc:ae:49:81:f8:1b:60:30:b0:28:f3:9c:28:5e:9a:f9:6f:
         5c:78:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org