Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32342d3234203d3e20323634333336.roa
File:                     3133382e3132322e3132342e302f32342d3234203d3e20323634333336.roa (raw, json)
Hash identifier:          1ewwy97g0vqaGZLFdsLC+sZdY0MXe9n25xycRPAwPxs=
Subject key identifier:   D8:5C:E9:4F:D2:BE:BC:86:0D:F9:DE:01:78:68:D5:A7:BF:D9:B5:B8
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       3DF96E1B1D278AF7F755CF97B31A342FCDFE10AE
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32342d3234203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:12 +0000
ROA not before:           Tue 11 Apr 2023 10:28:12 +0000
ROA not after:            Tue 09 Apr 2024 10:33:12 +0000
asID:                     264336
IP address blocks:        138.122.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:6e:1b:1d:27:8a:f7:f7:55:cf:97:b3:1a:34:2f:cd:fe:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:12 2023 GMT
            Not After : Apr  9 10:33:12 2024 GMT
        Subject: CN=D85CE94FD2BEBC860DF9DE017868D5A7BFD9B5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:09:09:97:0e:66:6e:09:36:6d:d0:e1:52:
                    3a:ba:24:11:d9:a4:78:88:14:fe:d2:07:5a:c1:93:
                    8c:d0:b0:7f:84:4e:e3:30:77:d5:77:7a:fb:c2:43:
                    61:81:3a:28:01:27:3e:53:d5:09:6a:5f:0c:1b:71:
                    ba:9a:39:64:c3:89:cd:dd:7d:dc:3f:e8:ae:89:46:
                    48:f6:3f:f5:96:44:b2:76:dc:08:15:75:cf:67:98:
                    74:89:5a:f9:8d:b6:dd:f2:a5:87:cb:3d:23:cc:7f:
                    26:9d:87:35:3f:bf:a1:87:51:3f:9d:4c:71:be:0d:
                    09:a7:4a:95:c6:b4:e8:23:0a:fa:8a:6a:74:47:ec:
                    f8:be:f5:00:3a:62:90:f5:4e:03:de:b9:04:84:54:
                    26:1b:5f:ff:41:20:d2:cc:5f:8b:0c:2f:d5:2f:55:
                    b0:64:3d:c8:c4:11:08:cd:98:4a:85:f1:4b:eb:55:
                    07:ca:1d:d8:ed:32:4d:df:36:b4:4b:70:d2:cf:ce:
                    42:ae:0c:8d:b2:85:d7:8d:7f:50:51:73:4b:d9:38:
                    03:14:10:82:39:4c:76:27:c6:2e:cb:17:99:bb:dd:
                    40:ed:dc:41:8b:80:f1:00:65:b2:18:5a:bd:cf:8f:
                    f7:5b:02:c6:c0:e4:12:ba:20:2b:26:4f:27:bb:8a:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:E9:4F:D2:BE:BC:86:0D:F9:DE:01:78:68:D5:A7:BF:D9:B5:B8
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132342e302f32342d3234203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:72:1e:f4:74:a3:e5:fa:cf:6f:55:00:a9:70:09:bc:9a:
         70:6f:e8:9b:27:f8:69:d9:c4:98:40:80:56:01:2c:8c:ad:e4:
         d2:3d:65:a7:f2:64:5a:80:5e:20:cc:6b:71:d5:d2:f0:7b:33:
         b4:57:a9:30:f2:54:f7:b3:5e:db:53:cf:f2:ce:ac:a1:4c:c5:
         9e:79:1a:c5:76:09:29:93:64:14:50:6d:b8:c3:6e:12:dc:f3:
         88:af:e1:e0:bb:fe:d7:a8:c4:df:e0:14:b4:9f:10:de:1d:cb:
         c5:5e:7d:77:98:e9:7d:25:e8:d9:02:de:e3:70:40:95:c6:2b:
         c4:19:69:39:28:ca:69:4a:c5:7e:15:0b:9a:ef:44:17:30:19:
         74:3d:47:9e:3e:65:6d:1d:c7:84:df:e5:68:1c:3a:33:00:7f:
         92:c9:8e:8d:20:b7:b6:a3:74:03:74:87:8b:db:bf:ff:66:0e:
         02:af:0c:f0:99:27:83:72:25:2e:75:57:ef:ce:21:8d:07:6d:
         16:42:8c:53:46:08:78:a3:87:f3:07:39:a9:8e:4d:58:ff:59:
         d1:48:81:16:40:2a:f9:f2:38:95:92:f1:4a:fc:82:3c:d9:87:
         3a:ee:b6:4d:7e:80:5f:98:2e:30:41:d3:84:f0:c2:9b:c7:1b:
         7b:ae:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org