Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132372e302f32342d3234203d3e20323634333336.roa
File:                     3133382e3132322e3132372e302f32342d3234203d3e20323634333336.roa (raw, json)
Hash identifier:          vNK8tSEDrK5YixDw4DO4kQNB/zMumWs+5yhuJAuHIlM=
Subject key identifier:   C3:0E:B2:41:18:10:DC:AD:1F:FB:F1:4E:BC:3C:5A:5C:90:A2:69:C2
Certificate issuer:       /CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
Certificate serial:       08A0BC2A6F5519CA633C24C4C869CAAE94000C9B
Authority key identifier: CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132372e302f32342d3234203d3e20323634333336.roa
Signing time:             Tue 11 Apr 2023 10:33:13 +0000
ROA not before:           Tue 11 Apr 2023 10:28:13 +0000
ROA not after:            Tue 09 Apr 2024 10:33:13 +0000
asID:                     264336
IP address blocks:        138.122.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a0:bc:2a:6f:55:19:ca:63:3c:24:c4:c8:69:ca:ae:94:00:0c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Validity
            Not Before: Apr 11 10:28:13 2023 GMT
            Not After : Apr  9 10:33:13 2024 GMT
        Subject: CN=C30EB2411810DCAD1FFBF14EBC3C5A5C90A269C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:1f:12:e4:c3:7c:50:af:93:3a:92:15:5d:
                    88:fc:f0:66:92:c2:3e:e6:6b:5c:41:bb:9b:c1:2f:
                    f4:f1:3c:e3:e9:10:a4:b0:46:ed:30:1e:c1:2c:5c:
                    97:73:25:49:5c:71:11:59:25:0c:17:1b:ac:d8:3d:
                    e9:e8:e7:25:12:89:83:54:e8:1a:3b:85:d1:52:5c:
                    bb:52:4f:b3:90:a3:41:c3:e4:68:89:4c:93:8d:30:
                    1c:2e:ab:41:c8:50:74:05:61:16:af:f5:46:8f:d6:
                    8e:a0:db:88:ea:6d:ea:5e:5c:38:b3:77:c0:eb:61:
                    0c:5d:0e:a0:d8:2f:dc:3e:85:57:13:54:24:9a:ad:
                    00:f0:e0:1b:b5:d2:e9:01:6a:5c:91:23:ce:74:e7:
                    d5:2e:0b:f1:9a:6b:c3:66:d8:15:09:4a:8e:32:e6:
                    82:2a:d6:9a:9c:1b:f1:06:0b:14:5f:a5:a2:53:cb:
                    70:64:7a:3d:f3:dc:86:71:10:3b:d8:42:46:68:c9:
                    85:ef:44:6c:e7:9e:d6:de:f3:b9:26:41:a9:f4:1a:
                    62:e9:99:91:9e:37:95:a8:95:e8:08:08:62:b6:1f:
                    43:df:ef:63:d6:aa:2c:a9:b6:64:9e:1d:7a:f4:f5:
                    a9:22:8c:57:5d:12:62:1e:87:28:25:0e:eb:2c:b8:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:B2:41:18:10:DC:AD:1F:FB:F1:4E:BC:3C:5A:5C:90:A2:69:C2
            X509v3 Authority Key Identifier:
                keyid:CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/3133382e3132322e3132372e302f32342d3234203d3e20323634333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:09:68:da:35:e6:69:d7:4d:bd:aa:c4:b4:fc:0e:92:74:
         3f:01:8e:9a:79:05:29:fc:52:c4:ac:93:74:fb:81:08:25:65:
         19:0d:89:f0:b7:4b:f2:ef:a3:48:b4:4d:62:02:89:6b:da:08:
         f2:70:ab:3d:9c:74:92:b5:4c:23:08:3d:a0:6e:4f:b6:c7:52:
         5e:68:87:95:e0:66:bc:cd:f6:2c:7f:f8:1e:ed:e8:c8:23:93:
         22:df:cb:a6:89:f8:3f:b7:aa:e9:77:cb:8b:04:ed:b3:de:47:
         65:aa:5e:be:e5:f3:5b:0f:00:f8:58:49:17:bc:18:0c:0e:cb:
         09:5d:6a:94:f8:61:02:15:3d:0f:4f:b4:8c:3e:b2:73:93:de:
         87:6d:fa:28:ac:5c:89:f0:ad:e1:3e:47:6f:b9:da:96:ef:e6:
         b6:d0:9b:01:67:b0:6e:bc:64:af:cf:a9:b2:00:cc:2b:2b:bb:
         84:9f:ca:33:4c:14:b6:71:11:e0:ca:a4:fe:b4:62:91:46:37:
         5c:9f:c4:32:5e:49:ed:e3:31:e3:4e:c8:8b:69:09:7a:9a:2c:
         85:a0:d1:af:ec:e0:f0:07:3c:10:34:ec:1c:20:fa:99:de:63:
         e2:86:df:1e:7b:5a:02:15:ec:4a:23:3e:66:ca:96:96:be:c6:
         cf:b5:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org