Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32342d3234203d3e20323632343638.roa
File:                     3133382e3132322e32382e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          To/HHOY1FUnLZKlWxmCe72q4omO3ydvYEtEU4XXf6PE=
Subject key identifier:   A7:13:6C:E8:A0:E5:79:7F:FA:7C:95:15:D5:57:AD:BC:0A:B1:9D:88
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       20A700841B12D6B89BCF4A11BB40085CF8D75D3A
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:41 +0000
ROA not before:           Tue 20 Dec 2022 15:04:41 +0000
ROA not after:            Tue 19 Dec 2023 15:09:41 +0000
asID:                     262468
IP address blocks:        138.122.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a7:00:84:1b:12:d6:b8:9b:cf:4a:11:bb:40:08:5c:f8:d7:5d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:41 2022 GMT
            Not After : Dec 19 15:09:41 2023 GMT
        Subject: CN=A7136CE8A0E5797FFA7C9515D557ADBC0AB19D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:64:a6:2e:fb:ef:39:50:71:0a:a9:b7:f5:
                    c1:dd:00:93:2e:1d:25:b3:89:02:ef:97:97:89:dc:
                    46:81:0a:04:ba:f0:f0:19:d0:55:48:50:75:34:84:
                    2d:16:bb:20:03:3c:ca:0e:ef:22:88:42:d8:f8:e7:
                    34:d5:57:8d:27:ff:b8:ac:0a:74:31:e8:76:93:c7:
                    c7:75:78:8c:49:5b:cc:51:82:92:12:ab:ea:d0:a6:
                    d9:96:55:bb:04:67:05:83:54:fa:ea:b8:81:01:db:
                    97:25:f9:95:fb:dd:41:84:d3:62:97:a8:b6:46:d2:
                    00:d5:39:c9:bb:04:2a:46:21:1a:83:2b:f8:1f:a5:
                    52:9d:ee:e3:f0:40:bc:78:d2:da:c4:60:8c:07:70:
                    b0:da:00:e2:e5:25:e3:97:a2:8c:4e:1c:04:a9:81:
                    17:94:40:61:e2:69:23:2d:fa:5f:ae:b4:97:3c:b0:
                    3c:c5:2b:27:f7:42:05:ef:4f:81:73:81:e6:25:b8:
                    00:1a:32:21:72:3c:e8:de:02:00:69:7c:03:55:0d:
                    0a:94:1d:05:cf:67:f3:bd:53:00:2b:aa:57:5c:e9:
                    af:96:4d:69:49:b9:f6:37:33:98:5e:87:a2:cd:b4:
                    26:2f:21:ca:2c:5d:95:3f:a4:26:a2:85:ab:b2:22:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:13:6C:E8:A0:E5:79:7F:FA:7C:95:15:D5:57:AD:BC:0A:B1:9D:88
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32382e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:e3:56:39:a1:50:4a:c4:ce:7e:dc:10:0a:5d:2e:c7:71:
         e4:85:e8:21:d3:a4:06:33:10:8d:e0:f6:07:20:bf:c6:44:a5:
         b5:77:9a:5e:d3:ea:34:2c:56:21:88:dd:b1:a5:2f:aa:71:12:
         a1:fe:48:16:48:d7:33:62:7e:54:72:36:f2:9a:5b:34:6a:1d:
         bf:6e:4c:78:db:ff:30:7c:85:5a:b3:d9:0e:6b:de:07:5e:4f:
         b5:2c:fb:6d:8d:c7:fd:fa:da:5c:9c:9a:d0:1a:9c:e3:54:fa:
         0e:08:62:59:80:3a:2e:06:8c:cc:70:28:ab:81:30:37:9c:b4:
         58:aa:c2:02:16:bc:9f:46:29:67:0f:7b:e0:dd:7b:2c:1f:d1:
         fd:97:cd:df:1d:dc:23:85:72:74:1a:fa:64:fc:ed:16:27:33:
         50:e3:84:3b:db:db:27:2e:39:ec:31:22:2a:b2:a4:97:03:f7:
         2d:c4:b7:be:f9:e3:4e:6f:76:df:16:c2:61:7b:de:86:00:8c:
         78:f1:31:1e:59:9e:ff:c0:bf:fa:ef:1c:26:f5:61:49:c3:62:
         62:46:81:6a:bf:9f:06:eb:20:af:2a:1c:84:6d:81:4b:a5:10:
         0d:25:77:7c:38:f4:7a:93:d0:49:5c:39:d8:f9:61:cc:04:98:
         09:f6:22:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org