Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132362e302f32332d3233203d3e20323634333336.roa
File:                     3133382e3132322e3132362e302f32332d3233203d3e20323634333336.roa (raw, json)
Hash identifier:          3fWdaBA4qEtxx+WxWpNGSSt11jo+8rnEEbmgpWWp9NU=
Subject key identifier:   CF:08:C7:51:15:1B:CE:2D:E5:54:68:F9:5F:4C:08:B5:50:70:07:56
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       36C6905322306305297C0764FF4B108363507399
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132362e302f32332d3233203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:13 +0000
ROA not before:           Tue 11 Apr 2023 10:28:13 +0000
ROA not after:            Tue 09 Apr 2024 10:33:13 +0000
asID:                     264336
IP address blocks:        138.122.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:90:53:22:30:63:05:29:7c:07:64:ff:4b:10:83:63:50:73:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:13 2023 GMT
            Not After : Apr  9 10:33:13 2024 GMT
        Subject: CN=CF08C751151BCE2DE55468F95F4C08B550700756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:61:78:27:0d:05:43:ff:a9:60:a4:5f:d4:
                    0e:67:80:4e:a5:45:31:18:ec:11:27:30:c9:08:4a:
                    21:6d:9c:b9:3d:f9:51:71:9c:15:06:5f:d5:c5:3c:
                    4e:f0:81:9d:b0:f8:75:e6:ac:c7:64:a7:a2:65:62:
                    a5:6d:dd:d9:e3:23:a4:5f:eb:a0:03:7c:b0:6e:21:
                    6b:f8:5b:40:bf:24:a7:4b:c4:bb:a8:48:89:9e:80:
                    06:d9:70:fe:e3:b2:9e:63:7a:e4:a8:b9:11:13:f4:
                    71:46:e1:e3:26:3f:79:3a:0c:0d:4d:54:5b:86:67:
                    a1:e8:60:0a:a2:30:43:a3:6c:42:26:f3:6f:c8:f8:
                    93:ec:25:92:56:c8:89:81:b4:4e:a9:d1:19:15:8b:
                    81:28:ef:31:58:28:33:4b:b7:54:2a:94:50:d2:44:
                    30:16:d3:7d:12:66:5d:3d:e3:b1:c2:a2:e6:67:65:
                    34:dc:85:4a:f4:9c:5f:b1:48:52:1e:b4:9c:6d:4b:
                    fb:3c:00:03:41:a8:2d:1b:b5:32:4c:b9:c0:42:4b:
                    e6:39:b6:b3:9c:b5:c9:f0:dd:a1:d3:d6:fc:35:ee:
                    a5:54:7b:58:f6:54:fb:48:6f:e5:51:f4:d0:65:c8:
                    b7:6b:be:dd:f8:0f:23:d4:34:3d:ac:9d:25:2d:63:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:08:C7:51:15:1B:CE:2D:E5:54:68:F9:5F:4C:08:B5:50:70:07:56
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132362e302f32332d3233203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:32:51:a1:b2:1d:e8:7f:d0:48:dd:8a:52:91:f1:c4:d4:
         b7:de:7f:7e:17:60:34:10:df:5a:0b:e1:5e:46:3b:a2:37:39:
         e3:d6:96:af:f1:5c:b6:6f:95:7e:1f:9c:a5:09:79:ca:9c:a2:
         09:ff:21:31:32:3e:aa:c8:41:36:f7:e1:b6:dc:db:31:a2:92:
         c3:98:d8:46:9d:d4:c2:8d:5a:f5:12:a8:7b:2e:1e:e1:c5:be:
         b3:ef:43:31:b5:8f:7f:69:2e:54:af:28:77:60:bb:23:4d:94:
         31:c5:81:f7:5d:ef:0e:a7:ff:99:ff:eb:d2:9e:25:bf:5e:31:
         0a:f6:9a:0c:7c:4f:77:16:71:36:97:a2:18:f6:0d:83:d9:d9:
         19:6b:26:f1:df:23:6e:af:c9:7b:61:76:85:ae:ad:4c:ff:58:
         b6:1a:81:3d:46:61:30:4f:58:04:53:c3:05:f6:00:a1:a6:78:
         6e:99:cf:9f:9e:0a:d0:30:9b:73:4d:52:d9:24:35:f5:16:83:
         74:5c:df:c5:07:d3:65:2c:52:15:05:58:27:d7:68:4d:61:5e:
         0a:46:d4:34:1b:40:bd:12:42:d0:b3:2e:10:d3:58:df:94:38:
         60:ea:b6:83:bd:78:ba:0a:81:b0:55:87:e8:74:51:3c:16:53:
         29:79:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org