Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File:                     3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          i/6pYBqhOg0mfwZJ7Wohe5SkszWmgPgr1Amvj9GOoco=
Subject key identifier:   BB:D9:B6:8B:61:17:71:EC:88:0D:D7:2A:EA:04:C7:A8:D0:16:B0:90
Certificate issuer:       /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial:       3F4A396B8AFDFE7A337FB96CE064CBB2AA228076
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 22 Jul 2024 18:02:20 +0000
ROA not before:           Mon 22 Jul 2024 17:57:20 +0000
ROA not after:            Mon 21 Jul 2025 18:02:20 +0000
asID:                     28287
IP address blocks:        138.118.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4a:39:6b:8a:fd:fe:7a:33:7f:b9:6c:e0:64:cb:b2:aa:22:80:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
        Validity
            Not Before: Jul 22 17:57:20 2024 GMT
            Not After : Jul 21 18:02:20 2025 GMT
        Subject: CN=BBD9B68B611771EC880DD72AEA04C7A8D016B090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:9a:b3:be:f2:78:61:6a:6a:fe:ab:f8:e3:
                    94:6d:0e:90:5a:1c:4b:5e:5b:78:13:59:6b:80:88:
                    98:14:48:60:44:c9:c9:e3:b0:86:49:51:e0:5a:d9:
                    45:8b:94:5e:8d:2e:51:43:af:60:b7:8c:b6:10:ad:
                    98:16:1d:d3:36:3b:c1:e3:56:6a:ab:8a:ed:d1:79:
                    83:1b:4c:4f:14:f5:db:3b:a2:d1:2c:10:12:76:08:
                    1a:ae:06:3e:65:e9:66:0d:1e:bc:c4:7c:5f:50:af:
                    45:7a:b5:d1:a1:7e:e3:00:ad:f6:1b:74:96:5a:69:
                    44:c6:7b:ec:be:3a:c5:e2:14:46:5a:6e:93:3f:32:
                    97:56:63:f7:2d:b0:18:99:f8:32:a0:64:ae:f0:29:
                    dd:54:f0:c5:b0:3f:be:a6:34:c5:69:79:e7:d1:55:
                    51:0b:82:86:ae:cb:9b:70:b8:4b:0d:53:66:7d:ed:
                    c5:41:77:9b:28:29:2c:d9:a5:d7:81:6e:b7:cc:41:
                    01:bf:b2:cb:a4:4e:20:f3:c0:fa:74:df:cb:81:70:
                    78:9d:f6:40:f2:9f:35:7d:e6:c1:94:54:75:6a:23:
                    66:4a:24:b8:17:d6:65:2f:41:fb:dc:16:12:58:b2:
                    e1:63:5e:13:70:1f:bb:ca:60:4b:b7:cc:42:fe:28:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:B6:8B:61:17:71:EC:88:0D:D7:2A:EA:04:C7:A8:D0:16:B0:90
            X509v3 Authority Key Identifier:
                keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:58:8e:d8:6e:a3:77:fd:cf:b3:89:97:2a:f6:e4:c4:2b:10:
         22:ef:18:00:98:44:d6:7d:18:0f:fa:58:a3:3f:d4:96:c0:3f:
         0f:8f:1a:7e:6e:d9:e6:aa:3d:0e:8c:67:64:dd:be:d3:9f:bf:
         55:40:91:7b:e4:e6:c2:3a:f7:e5:1c:c6:dc:f7:a2:d9:c2:2d:
         c8:59:ab:7a:38:4e:a1:15:bd:fb:ca:94:1c:9c:1f:4a:8e:95:
         35:be:03:ee:53:7c:b1:d4:63:56:34:14:40:35:86:6c:1d:c3:
         d0:19:f2:03:18:70:a7:14:9b:11:00:b8:c3:af:e7:6b:70:90:
         16:9c:01:c8:1c:7f:c0:06:ef:ae:b4:05:e9:1d:ea:0e:5b:f8:
         8c:c1:39:46:61:08:5c:f0:c3:f3:fa:f2:9b:b3:31:cd:50:b1:
         c8:0d:c0:0c:eb:68:13:f2:6b:b3:76:fe:de:33:df:f2:bf:c7:
         99:bb:d9:ad:e2:ab:29:2a:3b:83:89:05:ad:e8:d8:e9:09:9d:
         7f:e7:3b:13:60:dc:04:11:0d:e7:de:ff:59:94:2d:94:88:60:
         e8:f5:9b:67:20:38:30:94:56:22:e1:5a:34:e2:89:c4:fc:e7:
         61:7e:d1:d7:28:03:4f:4a:00:fb:22:32:ad:a3:ed:ec:b1:c1:
         93:59:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:32 2024 by rpki-client on console-ams.rpki-client.org