Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e33312e302f32342d3234203d3e20323632343638.roa
File:                     3133382e3132322e33312e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          TN7CTtNr3IpS94jBDZoR4EbzFwVEXHQimnlPkLQABjE=
Subject key identifier:   91:A5:05:0D:EA:DB:E6:FC:F0:0D:60:82:4A:7C:EF:C0:D2:A5:13:9E
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       4AA4679D383F986A045512486CC192E1BFDA54C5
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e33312e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:50 +0000
ROA not before:           Tue 20 Dec 2022 15:04:50 +0000
ROA not after:            Tue 19 Dec 2023 15:09:50 +0000
asID:                     262468
IP address blocks:        138.122.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:67:9d:38:3f:98:6a:04:55:12:48:6c:c1:92:e1:bf:da:54:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:50 2022 GMT
            Not After : Dec 19 15:09:50 2023 GMT
        Subject: CN=91A5050DEADBE6FCF00D60824A7CEFC0D2A5139E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c0:cc:6f:c5:63:ca:1b:a2:fd:7c:e0:90:7c:
                    b8:ee:11:d4:d8:21:36:87:6e:e5:11:64:54:b5:73:
                    85:d4:0c:f8:ce:97:e1:db:bd:39:40:50:b6:68:93:
                    b8:32:3a:b8:71:8c:d4:4f:de:ef:e8:f9:c6:f6:44:
                    e5:c5:f8:e2:5e:69:ba:a1:27:ad:ab:b6:28:d3:16:
                    92:07:f8:2b:70:41:46:73:ce:6a:fe:61:10:00:21:
                    d8:06:b6:fa:a6:02:25:42:a6:8b:75:7d:a0:ca:b5:
                    2c:f4:1b:fb:91:c0:ca:99:02:de:79:33:70:b7:67:
                    ff:a3:91:19:72:97:2d:82:3a:52:8b:bf:20:77:bf:
                    dc:37:b9:40:dc:31:62:5a:fa:7e:06:84:04:d0:ec:
                    37:63:96:0d:14:fd:7f:5e:34:e9:d7:b7:ca:00:27:
                    ae:84:7b:6b:97:f4:a7:ca:be:83:fb:1d:6d:e6:58:
                    60:2a:b5:32:5c:1b:1b:80:5d:7a:5b:64:f2:19:df:
                    7c:1b:4b:ef:af:3d:5c:09:85:25:be:73:55:11:f1:
                    30:62:81:0c:7b:ae:19:33:d3:64:6e:94:85:cc:33:
                    7a:88:15:3f:5d:1b:f9:7d:93:e5:ef:d4:0e:a0:68:
                    ee:e6:6f:af:ee:36:c2:19:bf:ef:72:b9:4a:8f:d7:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A5:05:0D:EA:DB:E6:FC:F0:0D:60:82:4A:7C:EF:C0:D2:A5:13:9E
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3133382e3132322e33312e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:d9:8f:f0:d5:99:ae:c9:7d:ad:ab:e3:82:b0:17:f3:1a:
         1d:2a:8f:6b:37:91:2d:7d:64:80:cf:2e:26:28:12:09:fd:7f:
         b1:f9:23:3a:31:af:bf:fc:8e:b1:1a:ff:cc:4c:3b:1e:77:60:
         0b:59:84:42:28:98:7b:41:b8:87:d9:00:0e:03:32:11:55:04:
         c4:96:68:c7:2f:7b:47:54:f8:c1:74:d3:3e:ab:ac:bf:39:3d:
         1a:66:8a:da:7d:be:01:38:19:83:30:13:52:e4:ce:18:fa:af:
         76:80:3f:3d:24:23:e5:53:9d:5d:0e:cc:24:10:4f:05:96:09:
         1d:61:28:89:46:f7:31:7e:ac:f6:94:4c:bb:cb:34:e6:d1:7e:
         fc:c1:da:01:7d:f9:17:5c:59:98:fc:df:5b:cd:0e:cc:e3:21:
         fe:74:f8:5f:a1:3e:ee:75:22:f7:c7:b9:9f:ac:c3:15:ad:76:
         f9:13:67:48:87:f9:a0:38:41:52:85:af:46:e1:4d:86:5d:1b:
         9d:88:c6:f1:29:57:ad:e0:f5:7d:ae:f3:75:ea:e6:70:2f:4c:
         6d:30:f0:51:04:12:ed:ec:01:38:ab:d9:f1:c1:97:7c:ec:b6:
         d1:a7:eb:fe:38:01:cc:3b:dc:82:98:82:c8:64:ef:26:1b:df:
         63:c3:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org