Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
File:                     3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          coUfhd/BMtqRsTA3TtC7r8OgemO5w0c8ry2TDoK0ync=
Subject key identifier:   36:3D:2B:87:EE:86:BE:F0:A4:35:FE:1F:3E:C4:7B:C0:92:E6:EB:E2
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       0DDFF22DCF44ADEA4FDBBCA4EEDB65B59923FAC9
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
Signing time:             Tue 23 Jul 2024 12:02:31 +0000
ROA not before:           Tue 23 Jul 2024 11:57:31 +0000
ROA not after:            Tue 22 Jul 2025 12:02:31 +0000
asID:                     61844
IP address blocks:        138.255.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:f2:2d:cf:44:ad:ea:4f:db:bc:a4:ee:db:65:b5:99:23:fa:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:31 2024 GMT
            Not After : Jul 22 12:02:31 2025 GMT
        Subject: CN=363D2B87EE86BEF0A435FE1F3EC47BC092E6EBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:51:d0:5c:78:94:20:85:fe:99:f7:02:34:
                    3e:e5:20:de:ce:2d:af:10:b7:b0:15:d7:e4:33:4f:
                    0e:7a:54:8e:34:13:fe:73:1b:7b:ff:43:72:73:73:
                    fc:f8:94:35:b4:36:0e:e8:51:30:82:78:4f:d5:b5:
                    c7:3b:31:c1:22:d1:eb:5d:01:81:65:fd:3a:ec:82:
                    f3:a1:a5:61:d1:dc:bc:27:45:1e:a0:6f:1a:0b:3e:
                    6a:12:49:c9:d8:af:3e:25:96:09:b8:5e:3c:66:2e:
                    4f:8c:80:5a:3c:a4:b0:8a:2c:1f:93:b3:eb:23:2c:
                    11:f6:95:1d:c6:d8:18:90:5e:06:22:a2:95:92:b5:
                    99:b6:b8:f7:25:d5:e0:94:c1:f0:55:82:9a:ec:ff:
                    ce:c8:ad:f5:5c:f9:fb:98:38:8e:c7:b7:66:00:d0:
                    90:85:f5:f7:c8:38:5d:03:07:d9:da:1a:79:c8:87:
                    67:5c:b9:ca:bc:99:33:43:1e:68:2f:95:cd:bf:e8:
                    33:bf:c7:bf:49:d1:23:bd:17:01:dd:31:0a:aa:67:
                    6b:80:c9:cc:bf:66:7e:64:22:8b:15:c0:57:b5:23:
                    a0:3f:02:00:d7:68:98:6a:4d:b2:17:ce:5e:c4:23:
                    88:74:77:46:99:83:e5:fd:2a:ae:b7:3a:f3:f5:d2:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:2B:87:EE:86:BE:F0:A4:35:FE:1F:3E:C4:7B:C0:92:E6:EB:E2
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:0b:f0:9d:e2:6c:39:d2:dc:e4:66:88:a0:0a:9b:92:14:
         05:29:14:04:cc:29:26:82:c4:59:eb:51:7a:31:ca:20:17:8c:
         fc:e6:b0:91:e5:fc:16:a6:49:15:30:7c:ac:4c:f6:a3:f1:08:
         98:1a:7d:88:f1:7b:ab:53:b2:c2:53:7c:a5:d6:2c:0f:10:58:
         f5:d6:5c:86:d2:7d:89:56:ad:f4:8d:0e:18:c7:10:8a:c4:5a:
         fb:c5:f5:55:a8:90:d9:c0:bf:38:3e:9f:77:9f:8b:86:cc:14:
         7a:0e:5c:6f:8c:24:45:b0:be:9f:16:a3:2c:e9:ec:8c:53:a7:
         0d:b7:fc:62:00:54:bd:da:c0:f2:e0:af:84:20:da:58:b9:83:
         c9:ef:9e:fd:db:25:7d:86:9a:d2:68:ca:ec:6e:8f:3a:07:72:
         5d:88:37:b4:7d:de:d8:76:58:a0:96:a8:d9:06:84:8f:39:02:
         af:bf:b5:36:79:81:13:1c:73:47:6a:bb:ea:5b:28:e0:08:86:
         a6:a7:ec:e3:51:3f:e8:80:c6:bc:ad:3b:fb:ab:42:60:cc:9d:
         d4:4d:f1:2c:62:10:5e:11:6a:77:ef:d3:e8:79:4e:6f:4a:64:
         ce:62:a9:92:24:b7:03:54:19:83:ef:9d:0c:e5:8c:3f:10:a1:
         dd:2c:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org