Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa
File:                     3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa (raw, json)
Hash identifier:          R9RqLsdkwg62R6XiUJJJ/tg8UJtm4v/9aSHPWo2HyAA=
Subject key identifier:   24:29:83:3D:66:EB:5B:F2:C5:F6:D5:FB:AB:8B:2D:15:F6:D9:93:B2
Certificate issuer:       /CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
Certificate serial:       239A318834C716999D5B67484CE9A4F8C8822808
Authority key identifier: 5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa
Signing time:             Tue 12 Sep 2023 13:09:12 +0000
ROA not before:           Tue 12 Sep 2023 13:04:12 +0000
ROA not after:            Tue 10 Sep 2024 13:09:12 +0000
asID:                     61890
IP address blocks:        138.204.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9a:31:88:34:c7:16:99:9d:5b:67:48:4c:e9:a4:f8:c8:82:28:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
        Validity
            Not Before: Sep 12 13:04:12 2023 GMT
            Not After : Sep 10 13:09:12 2024 GMT
        Subject: CN=2429833D66EB5BF2C5F6D5FBAB8B2D15F6D993B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:36:8c:b6:0f:b1:c5:ca:f5:d2:9e:38:38:c2:
                    13:39:85:00:b8:30:89:bd:c4:6a:1f:34:78:90:f1:
                    bd:62:d9:6f:ee:63:7a:fb:56:d7:7f:d4:17:2f:be:
                    3c:72:5b:71:23:dc:2f:e9:a0:ec:d8:45:1c:fc:97:
                    ad:82:c6:78:fc:46:9d:bf:79:4a:29:26:1e:d7:4b:
                    ce:1c:62:80:2d:62:7c:30:9e:00:29:2a:77:cd:ae:
                    56:fe:3d:05:14:64:e8:6c:b7:49:32:c1:56:c0:6c:
                    da:15:0c:3c:1b:c2:a8:50:92:ae:bd:5c:b3:9a:40:
                    c9:b4:af:5d:c4:71:51:6d:05:2f:3d:b3:18:20:df:
                    61:3e:09:72:07:ad:f2:41:bf:77:95:b4:49:88:b7:
                    ad:b3:93:26:5b:65:6d:c0:5a:34:a5:f1:69:30:bb:
                    59:c4:82:28:5a:03:d6:3b:17:f7:e3:60:dd:85:ab:
                    b9:02:b2:95:49:48:37:58:a6:73:a8:78:3f:da:68:
                    ba:bc:4e:12:97:21:9d:81:60:67:50:43:f4:af:6a:
                    87:07:27:32:2d:9b:d0:1a:e3:e4:1e:c8:7e:b7:ed:
                    df:1b:e4:95:ed:89:a5:3d:3f:60:9a:f0:d3:91:87:
                    d8:38:0c:c0:fa:f0:84:58:ba:74:82:4f:55:59:da:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:83:3D:66:EB:5B:F2:C5:F6:D5:FB:AB:8B:2D:15:F6:D9:93:B2
            X509v3 Authority Key Identifier:
                keyid:5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3133382e3230342e3231322e302f32322d3234203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ad:84:e1:9b:03:86:be:af:42:0f:28:aa:05:86:fa:53:f9:
         d5:16:5a:19:73:c7:07:4d:8d:62:ac:66:52:02:8b:d3:ab:d6:
         6a:22:de:ee:39:ac:1f:e0:94:06:37:5f:1b:e1:12:cf:dc:4c:
         68:80:a2:59:00:1a:23:cb:2b:2c:4a:11:e3:ae:29:c4:36:b0:
         fb:ff:78:9f:53:fe:39:66:c0:44:36:6d:12:14:91:51:86:e7:
         67:0b:a9:9f:ab:a0:72:3f:af:19:44:b4:6a:77:17:ea:9a:32:
         22:47:81:e9:4b:93:43:d2:83:98:3e:af:c1:52:9c:07:80:f4:
         08:92:d5:bc:f2:1e:93:e8:b6:5b:e6:4c:69:bf:5d:0d:e7:49:
         f8:ea:42:84:4c:e9:49:b9:ff:09:1d:b7:42:66:7f:b5:7e:f0:
         61:f6:4c:0c:23:8c:fb:90:80:53:2f:57:98:30:cb:8d:82:7b:
         58:07:d5:21:d1:b9:c5:95:91:41:fe:5e:78:d4:29:ac:c0:9a:
         2a:34:93:a7:ba:4a:6a:28:cc:ea:8d:2f:e5:73:21:8f:be:1a:
         12:0b:81:97:01:2e:f5:f3:67:91:fb:35:12:19:7e:f3:54:7e:
         53:aa:f4:c1:f2:20:55:38:8c:f3:f3:c6:7a:5e:56:46:ee:fb:
         92:3d:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org