Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
File:                     3133382e3230342e382e302f32322d3234203d3e20323633393637.roa (raw, json)
Hash identifier:          CK0ccPwXzS/0fYIz+vcTUrdoQAglmTx4gVhfV93Oe0c=
Subject key identifier:   46:A6:1E:44:DE:66:09:19:DC:88:8E:89:FE:E3:D3:81:87:44:6A:EF
Certificate issuer:       /CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
Certificate serial:       28250D091B14882FDAEDFE1EF7DF1BADFE1493DA
Authority key identifier: 18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
Signing time:             Thu 07 Mar 2024 23:30:14 +0000
ROA not before:           Thu 07 Mar 2024 23:25:14 +0000
ROA not after:            Thu 06 Mar 2025 23:30:14 +0000
asID:                     263967
IP address blocks:        138.204.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:25:0d:09:1b:14:88:2f:da:ed:fe:1e:f7:df:1b:ad:fe:14:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
        Validity
            Not Before: Mar  7 23:25:14 2024 GMT
            Not After : Mar  6 23:30:14 2025 GMT
        Subject: CN=46A61E44DE660919DC888E89FEE3D38187446AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:66:8f:bb:17:3d:7b:25:37:9c:b5:19:99:
                    6c:65:93:49:08:98:5f:0d:a4:06:05:f8:8d:ad:0e:
                    01:37:a4:30:e0:95:f2:09:de:f0:14:04:0f:cb:83:
                    14:c4:20:8e:70:76:8f:26:61:61:d8:06:b2:0a:ac:
                    ca:d6:ac:01:c4:13:36:4a:98:c2:5d:6e:e5:eb:88:
                    8d:2e:bd:ca:71:5e:75:35:0d:56:28:ac:d5:af:6a:
                    37:dc:ca:ec:9a:dd:86:17:98:f7:34:3a:91:72:60:
                    da:3f:29:5d:e0:e5:27:1b:dc:3f:bd:ec:a7:e7:b6:
                    e7:1d:99:b0:2f:81:0a:73:07:9e:2f:2d:e0:f4:3a:
                    25:10:cb:f4:7f:4f:fb:cd:e7:a5:45:14:c6:fd:93:
                    87:73:2c:00:49:b5:92:a9:c5:ce:e9:2e:e4:28:c6:
                    bc:bb:59:4d:db:5f:d4:f4:31:9f:3a:e4:7b:60:1e:
                    bd:4f:b2:c7:a6:bd:f1:e7:7c:83:70:bd:75:dc:59:
                    52:f4:b0:33:89:77:88:99:eb:e1:64:7c:00:1c:64:
                    62:d5:c3:26:51:15:f8:a8:b8:cf:b2:34:36:f8:be:
                    5d:f4:6c:90:38:b3:a7:b2:dc:c2:8d:e2:ce:d2:59:
                    cb:df:28:84:18:a7:12:b3:80:e5:92:91:12:e0:b6:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A6:1E:44:DE:66:09:19:DC:88:8E:89:FE:E3:D3:81:87:44:6A:EF
            X509v3 Authority Key Identifier:
                keyid:18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f6:13:af:09:02:d4:ce:ad:3f:e5:12:1f:cb:83:b3:84:7b:b6:
         52:f0:0b:c4:df:93:39:01:bf:55:50:a5:e1:51:73:9a:35:eb:
         67:bb:fe:c5:55:f9:bb:c6:a3:59:35:04:ce:8e:d6:66:cf:f0:
         bb:f5:0d:f7:6c:d0:fe:f8:b6:5a:e8:b4:6d:13:9c:bf:e9:3f:
         8c:cc:1f:e7:0d:22:52:b4:84:11:ee:2d:69:a3:af:84:22:c4:
         85:39:18:ed:df:82:4a:0a:43:2b:96:9d:f8:0c:ee:1a:23:a8:
         09:93:43:00:ff:6e:4f:3d:0b:39:fe:be:62:bd:ae:e2:51:ab:
         81:3d:a8:24:4b:35:fa:9f:c3:e8:82:25:c9:39:10:f4:e7:a1:
         63:18:6b:5d:6e:cf:a9:13:14:43:40:41:8e:b9:4a:4a:31:ba:
         83:d7:0e:7a:3d:c2:13:cf:e4:25:07:ef:75:40:7e:9f:dd:6a:
         b7:22:60:40:a7:60:0f:2e:f2:c6:1a:98:76:7a:76:01:44:ef:
         3f:d7:fd:55:41:41:ab:e8:13:0e:c4:93:98:9a:32:a9:20:64:
         c0:90:cc:65:d7:aa:d4:09:d3:7e:30:d4:f6:34:d4:27:9a:fb:
         7d:2c:99:38:93:a2:80:b7:16:3f:c2:cd:51:5b:d5:b6:0d:bd:
         0e:91:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org