Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa
File:                     3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa (raw, json)
Hash identifier:          aPh60Lo4r9FjE3VfN/AvL9AtlRwdg/wgy568bQ40u9s=
Subject key identifier:   9E:C8:B1:2B:1C:F7:DB:0E:11:64:E9:B1:A3:98:1B:B5:42:FE:84:69
Certificate issuer:       /CN=259481EEE5B47AA88639E34B0669E6971794C977
Certificate serial:       08D9A81D6A9EFA720BDF15456FB5B038D1E3231E
Authority key identifier: 25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa
Signing time:             Thu 18 Jan 2024 18:43:13 +0000
ROA not before:           Thu 18 Jan 2024 18:38:13 +0000
ROA not after:            Thu 16 Jan 2025 18:43:13 +0000
asID:                     264293
IP address blocks:        138.121.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d9:a8:1d:6a:9e:fa:72:0b:df:15:45:6f:b5:b0:38:d1:e3:23:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259481EEE5B47AA88639E34B0669E6971794C977
        Validity
            Not Before: Jan 18 18:38:13 2024 GMT
            Not After : Jan 16 18:43:13 2025 GMT
        Subject: CN=9EC8B12B1CF7DB0E1164E9B1A3981BB542FE8469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:d3:0b:53:e4:63:96:54:41:85:a4:3b:10:
                    6b:a0:58:07:d0:ac:2f:2f:2a:cc:0a:f5:df:0f:ea:
                    56:cc:bb:3a:92:ea:13:85:8e:74:8f:4f:73:e8:ba:
                    3b:5e:8c:35:fb:e3:6a:77:47:a3:f4:7e:84:69:98:
                    48:48:48:ed:32:4e:a5:f7:e8:fa:8f:bc:e2:85:ec:
                    ba:d8:72:77:aa:f9:0d:0c:ea:52:86:cd:1e:22:84:
                    eb:b6:b3:5f:29:af:1c:fe:2a:d9:1f:0a:f0:fc:a6:
                    01:59:2b:ab:ae:d8:c5:4d:a7:24:88:53:b2:aa:93:
                    81:5e:cb:38:96:57:7a:bb:84:68:d8:11:4e:48:95:
                    ae:15:45:bc:73:86:37:4d:1c:5a:c0:90:94:9d:34:
                    23:82:28:30:53:d0:16:e7:ea:0e:38:30:57:10:e4:
                    0e:b1:c4:21:c1:de:51:9d:bb:4a:c4:3e:f7:bc:ac:
                    66:c0:fc:e3:5f:89:a6:e6:ce:05:0d:1b:d7:cd:22:
                    c0:f2:a9:14:ec:1c:81:15:e0:19:66:cd:85:22:7b:
                    f3:9d:64:4f:0a:6f:93:af:d7:fd:1f:da:d0:0a:ca:
                    6e:f1:d6:67:0e:d5:f1:5f:85:f2:5b:4b:e3:f2:a3:
                    0e:0a:22:03:00:bf:93:74:dc:48:a9:cf:6b:8f:f3:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:B1:2B:1C:F7:DB:0E:11:64:E9:B1:A3:98:1B:B5:42:FE:84:69
            X509v3 Authority Key Identifier:
                keyid:25:94:81:EE:E5:B4:7A:A8:86:39:E3:4B:06:69:E6:97:17:94:C9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/259481EEE5B47AA88639E34B0669E6971794C977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259481EEE5B47AA88639E34B0669E6971794C977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/3133382e3132312e3132302e302f32322d3232203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:e6:31:97:42:85:34:8e:3d:f2:fa:44:d9:88:34:d7:3a:
         c4:56:ca:36:09:73:c6:e3:06:b4:82:a1:f2:2e:68:9d:5f:14:
         54:e4:3f:d2:30:0e:4c:97:92:ac:db:04:37:e3:a3:c3:c8:a0:
         c3:29:d3:80:24:d4:32:01:e6:94:d6:6c:57:bd:ed:9e:cd:b4:
         71:27:83:01:34:3e:3b:d0:80:c5:69:20:a2:71:bf:be:10:98:
         50:f2:10:5b:aa:96:8b:49:6a:a0:ae:11:e8:1e:d1:e4:70:7c:
         15:65:41:45:7c:29:45:f9:4f:c4:25:82:63:be:a6:d7:4a:7d:
         bf:51:db:7e:5f:f6:86:6b:3d:0f:0a:00:59:81:85:1f:4a:b8:
         20:1a:e7:23:10:e0:a3:34:3e:6e:d0:33:5d:c5:87:3b:67:65:
         18:e4:a1:0d:ea:5f:35:8c:68:70:b3:3c:07:44:86:af:23:3c:
         80:24:dd:d7:e3:77:72:8b:8f:27:f0:2a:a0:03:b5:07:4e:33:
         42:c3:ba:27:de:b0:a1:6b:fe:e1:2e:1c:07:2b:fa:dd:91:45:
         8a:d6:4e:b9:f2:44:62:53:fa:14:f1:6d:c9:d0:df:98:62:1b:
         dd:6f:72:24:82:6f:d9:d9:ef:a5:38:f3:58:d8:9f:f4:be:e9:
         27:51:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org