Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
File:                     3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa (raw, json)
Hash identifier:          GftlYBhHgMXQGwN8UNmxFU7LRUzovd65DwWXdmvi6GM=
Subject key identifier:   3A:A8:9D:95:85:1F:95:36:6C:33:3B:A5:7A:71:88:F4:B0:DF:96:88
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       348E10EC08F65A4C6F1BD2DBDB0A9EFC3C05FA71
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
Signing time:             Wed 25 Oct 2023 00:26:59 +0000
ROA not before:           Wed 25 Oct 2023 00:21:59 +0000
ROA not after:            Wed 23 Oct 2024 00:26:59 +0000
asID:                     264332
IP address blocks:        138.185.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:10:ec:08:f6:5a:4c:6f:1b:d2:db:db:0a:9e:fc:3c:05:fa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Oct 25 00:21:59 2023 GMT
            Not After : Oct 23 00:26:59 2024 GMT
        Subject: CN=3AA89D95851F95366C333BA57A7188F4B0DF9688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:31:6d:17:93:65:6d:a2:49:86:98:36:c4:
                    5d:81:42:a7:72:b5:42:b9:34:69:51:d2:15:9a:5e:
                    a3:76:29:8c:28:b8:cb:21:d3:9a:8f:16:1f:80:7f:
                    ea:13:25:49:06:c1:3c:c8:06:19:83:ba:09:d8:ac:
                    63:b1:85:6d:3e:b7:54:0c:6c:4e:eb:ef:1f:4a:61:
                    12:1f:ec:0a:d0:80:77:db:62:e6:2b:0f:13:fa:20:
                    8a:7f:63:79:15:03:be:8e:eb:82:7b:30:3b:75:f6:
                    73:e0:27:47:34:6f:be:b3:d1:ea:d2:80:36:13:c4:
                    52:0a:34:dc:07:95:12:80:0d:27:c2:2d:37:e2:d5:
                    4e:b4:83:a1:88:02:54:76:ab:2a:5f:d6:c5:58:bf:
                    6a:b3:68:dc:9a:f8:8a:20:2d:3d:53:68:70:d5:63:
                    7e:73:77:95:60:79:f1:54:6c:52:76:b1:47:3b:b1:
                    0a:a8:a7:cc:a3:7a:e3:f4:b7:a1:83:a3:1d:c9:69:
                    5f:54:0b:17:b1:8d:8e:96:1b:3e:08:ff:45:62:bf:
                    b0:28:e5:8e:87:52:06:94:cd:52:24:e5:98:75:bb:
                    49:95:b2:64:e1:f4:b8:5c:33:63:15:79:b1:33:83:
                    1d:a5:54:2a:d9:b2:0c:94:64:35:12:13:f8:6e:ac:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:9D:95:85:1F:95:36:6C:33:3B:A5:7A:71:88:F4:B0:DF:96:88
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:19:86:e0:fd:72:9a:24:52:fa:70:3a:77:3f:fc:50:a9:99:
         c4:72:eb:d0:b6:1d:cc:bd:81:d6:85:29:02:b1:5a:df:45:7b:
         44:47:32:a3:dc:55:ea:6f:e5:05:b0:75:22:31:ed:63:75:c9:
         77:0d:91:dd:54:5a:b9:b8:55:bf:ad:37:a5:75:4b:29:10:d2:
         b2:72:ef:b1:7f:dd:ac:4f:fc:67:60:31:21:cc:38:2c:d6:d2:
         d3:d7:8d:8f:51:9a:8d:f8:34:fb:8e:bc:5a:b1:4b:ec:d0:76:
         de:09:9a:8c:aa:1a:0a:07:6c:57:d7:ef:93:d9:87:05:e2:ab:
         ee:28:eb:f2:b4:34:64:bd:f3:6e:90:48:a7:8b:5f:66:f4:89:
         74:df:3b:b0:ef:c1:88:a7:29:e4:94:25:92:d1:64:7e:8f:4b:
         ab:7d:85:0b:de:26:95:4c:08:c4:98:1a:23:27:81:4a:06:1a:
         e5:6c:c5:24:d6:e3:0b:e8:12:e3:ac:fb:20:30:c0:e2:53:a2:
         62:49:0e:fb:7e:b4:30:f8:ea:07:3d:56:0c:29:bf:73:2c:12:
         22:02:25:a6:4e:67:e0:c1:c7:a2:00:18:fe:1e:67:13:cf:65:
         44:87:e3:0e:c2:4f:95:d9:d2:f8:af:0c:14:f3:8d:e5:83:26:
         2a:af:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org