Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
File:                     3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (raw, json)
Hash identifier:          nD31fSRBaXs2rh5uT4pZ6WDpy7SQlEPI9Nphd7NdZa8=
Subject key identifier:   4F:FE:06:6C:BB:BC:4B:B6:AB:4B:2B:E9:8D:D1:E7:FE:8A:D9:26:BA
Certificate issuer:       /CN=2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93
Certificate serial:       23CC9B649DD6F0665192FF477108A8186C473EF4
Authority key identifier: 2C:2D:CA:8B:E5:8A:A6:8A:99:8A:5F:06:42:2A:B4:CE:FE:A3:1C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa
Signing time:             Tue 09 Apr 2024 18:26:17 +0000
ROA not before:           Tue 09 Apr 2024 18:21:17 +0000
ROA not after:            Tue 08 Apr 2025 18:26:17 +0000
asID:                     264221
IP address blocks:        138.117.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cc:9b:64:9d:d6:f0:66:51:92:ff:47:71:08:a8:18:6c:47:3e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93
        Validity
            Not Before: Apr  9 18:21:17 2024 GMT
            Not After : Apr  8 18:26:17 2025 GMT
        Subject: CN=4FFE066CBBBC4BB6AB4B2BE98DD1E7FE8AD926BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:56:a4:65:6f:fa:c2:1e:f3:d9:15:e8:87:
                    2c:9a:bc:2c:9f:ac:67:4b:fa:d9:c4:ca:b4:98:b8:
                    f7:bb:c7:b0:84:9a:00:35:3e:bc:dd:ff:43:29:0c:
                    4f:8d:d8:6d:bb:c4:95:d6:85:06:18:33:11:63:7c:
                    1a:16:88:8e:f6:5d:bf:15:a2:1a:88:53:2c:45:f3:
                    ff:fb:dd:0e:94:54:33:d8:41:8c:8f:99:0b:fa:39:
                    1c:2c:78:eb:e9:54:f6:4a:b4:33:d6:a4:c3:d1:32:
                    ac:32:d8:58:86:97:96:43:15:13:39:75:72:b8:cf:
                    9d:8b:e0:a2:c6:e9:08:df:3b:5c:85:43:5e:40:3c:
                    23:52:97:d2:ee:8b:b1:2d:db:d2:95:98:fe:80:ca:
                    14:65:ca:d4:36:6b:dd:cc:94:bd:0f:a1:ee:7a:ef:
                    91:b3:83:6d:c8:f0:c5:5f:dc:4a:61:47:04:2f:bd:
                    c7:5e:60:47:e7:6e:ea:08:9c:46:46:62:fc:ab:87:
                    46:6f:47:b3:13:62:6c:e3:d2:39:cb:40:c4:22:a8:
                    b3:50:f0:01:08:f1:2a:b4:ef:9f:12:56:ac:df:3e:
                    c2:87:c5:9b:ff:a1:22:f8:d0:28:0c:ec:ba:db:17:
                    3c:6d:a4:bc:b8:5a:2a:d7:1c:3d:3f:1e:81:d9:3c:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FE:06:6C:BB:BC:4B:B6:AB:4B:2B:E9:8D:D1:E7:FE:8A:D9:26:BA
            X509v3 Authority Key Identifier:
                keyid:2C:2D:CA:8B:E5:8A:A6:8A:99:8A:5F:06:42:2A:B4:CE:FE:A3:1C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C2DCA8BE58AA68A998A5F06422AB4CEFEA31C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6c4KW8rT1K1kxEt5GUMVQXmR1mZKPg5yKhQUgtijwtr/0/3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:22:f1:13:23:f1:42:75:c3:77:10:5f:0a:08:1f:c8:20:ad:
         ff:77:69:43:e4:ec:18:51:80:9c:1c:96:0e:b8:93:fd:05:97:
         23:4b:18:44:96:50:40:ff:50:85:68:a9:7a:36:32:b4:df:61:
         c6:cb:0b:7d:07:96:9c:2e:5c:2e:df:ec:80:3f:36:c6:d3:59:
         be:f1:f5:60:fd:94:a2:7a:d2:49:e8:4b:42:d8:6b:a9:d8:48:
         67:f7:74:71:e2:83:40:39:39:d7:52:61:51:3f:e6:4b:8d:a4:
         8a:3f:80:97:86:1a:c8:41:61:25:4f:37:2b:1e:2c:6c:4b:f2:
         69:7a:69:ff:1e:8a:a4:3e:16:2f:d4:ad:9a:59:c0:70:cd:9d:
         4d:83:65:bb:8d:57:7c:f1:09:bd:81:5e:e5:cd:9c:e4:33:8b:
         ad:19:82:e7:17:aa:c1:11:97:77:fc:d5:17:7f:31:36:63:79:
         7e:09:75:50:d9:be:93:31:c1:4b:e5:87:1a:76:55:a6:c4:4d:
         3c:a5:03:b9:b1:c8:b5:60:50:51:86:84:a9:2b:a9:6f:65:b0:
         e5:e4:f4:ad:11:d9:40:a3:ed:de:5b:41:b0:1f:57:91:57:d2:
         b3:4d:9e:07:66:5b:bd:97:64:d6:47:f8:34:03:1a:da:53:4b:
         14:9c:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org