Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32392e302f32342d3234203d3e20323632343638.roa
File:                     3133382e3132322e32392e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          P6pnm59quT2cH+qpYNS3x/CvNCxbTei0C5E5xMyWEuk=
Subject key identifier:   E5:22:07:A6:21:4B:E3:4F:9D:99:63:A5:AA:F0:EC:54:36:69:8C:F6
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       339A42AF56470B8FB24384A34C399A2971C8C389
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32392e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:56 +0000
ROA not before:           Tue 20 Dec 2022 15:04:56 +0000
ROA not after:            Tue 19 Dec 2023 15:09:56 +0000
asID:                     262468
IP address blocks:        138.122.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9a:42:af:56:47:0b:8f:b2:43:84:a3:4c:39:9a:29:71:c8:c3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:56 2022 GMT
            Not After : Dec 19 15:09:56 2023 GMT
        Subject: CN=E52207A6214BE34F9D9963A5AAF0EC5436698CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:a6:6c:9a:cc:93:f0:1f:6a:dd:cc:66:aa:
                    05:f5:f8:68:ed:38:7e:83:8c:8d:ab:01:1d:b5:72:
                    cc:e5:43:20:d8:77:39:0c:fe:b8:93:6a:26:23:5a:
                    d2:12:d9:9a:73:e2:ef:e0:b7:e1:6c:b9:3b:b9:f2:
                    a3:8e:71:70:7e:9d:f1:1a:78:af:45:ba:2e:f1:0a:
                    39:54:15:ff:02:02:f1:97:49:7a:bc:87:8b:9f:b1:
                    bb:a9:fd:6d:93:d6:39:d4:6e:20:6d:9f:9f:fc:6e:
                    53:b4:f2:b3:fc:38:6b:47:88:21:7a:5c:12:e3:90:
                    b9:85:ce:27:19:60:3d:8e:b5:7c:ce:1e:15:94:b7:
                    f4:b4:a2:f1:9b:84:cf:2e:36:19:bf:b2:b4:69:ce:
                    54:24:b9:da:7e:9c:07:1e:5c:6e:56:77:6b:41:ce:
                    41:89:e6:61:10:e8:11:3f:ee:f4:12:2e:24:e2:fe:
                    52:84:d1:f4:02:82:9b:66:65:74:34:e1:f3:89:c2:
                    09:f0:a6:13:b8:8a:af:e9:f3:20:66:cc:4b:81:52:
                    92:a3:08:20:30:6d:5f:14:08:03:20:d6:54:39:41:
                    42:a3:c1:8e:e9:60:56:00:80:f8:f7:a9:09:50:ee:
                    1c:cd:f4:db:5f:8e:e8:0c:7e:91:58:0e:08:3b:48:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:07:A6:21:4B:E3:4F:9D:99:63:A5:AA:F0:EC:54:36:69:8C:F6
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e32392e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:91:30:c0:ea:ae:f8:6a:c8:ea:75:70:a8:61:74:d8:39:
         e0:5b:49:40:06:d3:1c:f8:8c:1c:04:e2:60:fd:ef:d0:96:c1:
         e2:92:f9:82:32:d4:e6:f2:6a:8c:2a:b9:a7:f8:b2:8d:6b:01:
         8d:43:e9:b2:f5:f5:4a:1c:d2:b1:e9:f2:2d:e1:25:62:34:3d:
         04:bd:84:39:91:00:63:62:b3:c3:b1:e9:85:75:ee:47:9c:2d:
         b0:c3:0b:08:85:d0:c1:ed:c1:6f:66:72:e5:7f:b6:d8:ef:62:
         62:a2:03:70:aa:13:79:0e:51:dd:0a:8a:16:bb:e5:af:d5:53:
         75:41:0a:fb:bc:e7:d9:3f:f1:86:53:31:dd:61:f3:a0:a1:ed:
         f8:d3:4f:d4:88:77:3c:0c:df:60:f6:d8:2e:14:9e:c5:c0:e8:
         2b:39:04:bb:6a:66:40:ab:b4:bb:2f:a3:4f:da:80:d7:c8:7a:
         5f:66:b8:08:5a:e2:21:e3:6d:5b:41:1a:0c:98:fb:3d:c1:ba:
         9a:43:b5:b1:55:ac:e2:f5:7d:3d:36:42:a2:48:1d:48:32:c4:
         20:33:59:72:e6:b6:a5:c9:db:ea:2b:6e:ad:ca:65:5b:5b:70:
         8f:f1:e5:d1:24:3e:6a:2e:25:eb:29:d0:5e:45:d9:cc:a3:5c:
         2c:58:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org