Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32322d3234203d3e20323632343638.roa
File:                     3133382e3132322e32382e302f32322d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          hvjovQ2ok1RWAKMYk+HdNGQUrN6Tqr2Kq162B85RlZc=
Subject key identifier:   E1:F6:71:78:B0:95:50:A4:80:78:32:F8:A8:80:4F:2D:9F:D6:91:C6
Certificate issuer:       /CN=14979A02E860628CB605591B1E8686D826EF0478
Certificate serial:       71CFE2CB686EEDFDB92BDC45945C78E9DBB722CB
Authority key identifier: 14:97:9A:02:E8:60:62:8C:B6:05:59:1B:1E:86:86:D8:26:EF:04:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14979A02E860628CB605591B1E8686D826EF0478.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32322d3234203d3e20323632343638.roa
Signing time:             Tue 22 Mar 2022 15:35:29 +0000
ROA not before:           Tue 22 Mar 2022 15:30:29 +0000
ROA not after:            Tue 21 Mar 2023 15:35:29 +0000
asID:                     262468
IP address blocks:        138.122.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cf:e2:cb:68:6e:ed:fd:b9:2b:dc:45:94:5c:78:e9:db:b7:22:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14979A02E860628CB605591B1E8686D826EF0478
        Validity
            Not Before: Mar 22 15:30:29 2022 GMT
            Not After : Mar 21 15:35:29 2023 GMT
        Subject: CN=E1F67178B09550A4807832F8A8804F2D9FD691C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:22:1e:16:e7:6e:ae:c2:cb:9b:d0:55:e0:
                    69:a1:dd:ae:fc:0d:09:2c:1a:cd:5a:dd:e5:aa:09:
                    74:f5:d2:86:9c:e4:a3:2b:09:2e:8a:7d:39:9f:18:
                    bd:62:58:7b:24:7c:a4:68:e1:70:25:bb:06:56:5b:
                    e2:57:7d:3d:b1:e6:88:61:23:10:17:4a:ac:0e:9a:
                    42:8d:93:a8:62:23:49:15:32:fe:b1:da:02:b1:10:
                    33:a9:ee:cd:58:12:fa:3d:c9:2a:a1:19:a9:6c:21:
                    60:42:f6:bc:27:b0:8a:72:6e:fa:4b:c6:81:8f:0d:
                    44:22:60:94:8f:94:57:3a:bb:e0:ac:bd:60:43:79:
                    56:0a:8f:20:13:2d:89:9b:c9:ea:32:6d:be:c4:6b:
                    cf:e1:90:20:6d:c6:70:97:df:d1:39:cb:05:67:c3:
                    ac:58:98:7e:b9:50:41:f3:d9:19:20:38:e4:1a:03:
                    76:54:d9:71:1b:00:03:d8:6e:11:65:06:57:73:c9:
                    d3:c6:02:76:0d:fd:27:8a:55:a6:ab:fc:9f:05:1f:
                    67:7e:db:33:26:14:e4:da:e0:47:f5:3d:81:94:ac:
                    c8:dc:d0:d3:50:d7:e3:82:2a:ee:d6:a2:71:d6:f0:
                    30:6d:c4:dd:63:72:29:8a:c8:bc:6d:69:8f:d9:2b:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:71:78:B0:95:50:A4:80:78:32:F8:A8:80:4F:2D:9F:D6:91:C6
            X509v3 Authority Key Identifier:
                keyid:14:97:9A:02:E8:60:62:8C:B6:05:59:1B:1E:86:86:D8:26:EF:04:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/14979A02E860628CB605591B1E8686D826EF0478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14979A02E860628CB605591B1E8686D826EF0478.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32322d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:c8:40:5a:c6:16:b0:f4:9d:d2:ed:b6:ca:62:d3:9e:e8:92:
         bf:af:e9:b4:45:9c:1e:f7:aa:34:44:97:81:48:ce:73:b8:25:
         e0:d3:8e:77:8e:a8:0a:3a:ad:1a:39:4f:aa:fa:2a:26:e9:f5:
         03:dd:d0:eb:ea:a4:0e:3b:b1:64:48:bf:10:e9:25:65:b1:81:
         ab:d5:4c:bf:8a:90:48:15:1a:f3:f5:ff:54:b2:33:6d:29:1a:
         e2:35:75:bf:23:0b:39:92:d9:02:59:6d:c9:1c:a4:98:11:c3:
         17:7b:8a:51:7e:78:b8:4c:09:ff:53:b7:01:68:6b:be:c7:f1:
         f8:19:0c:32:78:7c:c4:64:a2:57:9a:bd:fb:3e:9a:c4:9f:ec:
         33:79:06:ad:d6:30:2b:0a:4a:b3:2f:61:c3:af:fc:be:66:69:
         db:33:37:f7:77:bd:f4:ab:f4:1a:7d:54:d3:c4:0f:0d:94:fd:
         4c:7a:8e:c1:63:88:ba:a3:e6:75:f4:79:2b:ce:08:9e:1f:f2:
         ef:ca:eb:09:20:75:82:c6:97:ab:11:ea:32:bb:42:94:ee:a2:
         42:31:2c:ff:56:90:d4:65:af:80:ad:03:a6:28:28:71:a1:ef:
         8e:37:52:c7:88:97:05:71:14:24:5d:91:88:2d:d0:16:94:51:
         76:35:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org