Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32342d3234203d3e20323633353534.roa
File:                     3133382e33362e3137322e302f32342d3234203d3e20323633353534.roa (raw, json)
Hash identifier:          nSWush9cjJo08eEe+VVoVEJWYaDzMfw8T7PAyf/BivI=
Subject key identifier:   F6:27:84:14:E8:E8:9E:2D:79:AB:7F:7D:17:D0:9E:F1:7B:39:84:AC
Certificate issuer:       /CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
Certificate serial:       4844F59A82BEA35B02E6B6C3964E88BA98E3D636
Authority key identifier: 6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32342d3234203d3e20323633353534.roa
Signing time:             Wed 28 Dec 2022 20:20:00 +0000
ROA not before:           Wed 28 Dec 2022 20:15:00 +0000
ROA not after:            Wed 27 Dec 2023 20:20:00 +0000
asID:                     263554
IP address blocks:        138.36.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:f5:9a:82:be:a3:5b:02:e6:b6:c3:96:4e:88:ba:98:e3:d6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F858E8F214AF5D4475E80E8A4E94F75A29444
        Validity
            Not Before: Dec 28 20:15:00 2022 GMT
            Not After : Dec 27 20:20:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:d8:03:08:a5:1f:dc:9e:fb:1d:49:dd:96:
                    7a:a2:86:4f:06:fa:6b:54:7f:9b:ce:20:ec:c7:fe:
                    7d:75:94:8b:cd:b8:48:52:a9:a3:f5:d0:53:11:ad:
                    7a:20:23:99:9c:09:2e:6e:17:0d:fe:fc:91:0b:ac:
                    48:b7:67:88:5c:b0:d1:61:5f:6e:01:0a:87:6c:d7:
                    38:48:af:8c:d9:2e:9e:52:87:48:a0:e0:7a:bf:f3:
                    ce:3b:f3:29:45:a9:be:03:e7:08:6b:4d:24:d8:4b:
                    f1:d5:4c:ba:8f:e4:50:2d:ea:7e:e2:25:d5:3c:68:
                    25:5e:b7:85:af:fa:d4:27:eb:5d:95:24:e1:d6:7f:
                    bc:fa:6a:e3:75:69:82:8a:90:64:fa:27:45:59:bb:
                    68:dc:e7:6f:01:36:55:bb:41:91:03:c0:bf:82:9d:
                    d7:ff:9b:d5:a7:68:f9:c6:42:b8:9f:90:3d:28:8b:
                    3a:2a:c3:29:89:f7:48:0f:f1:b7:0c:5c:dc:df:d3:
                    9b:53:31:9c:21:c6:50:86:da:af:45:ea:61:b0:64:
                    5a:49:95:84:40:b6:03:31:4f:ee:5c:d4:68:89:4e:
                    1d:09:e0:a9:33:d9:ed:47:42:69:51:de:62:2d:42:
                    42:5b:a2:cc:92:1a:ff:a5:84:b4:17:60:cb:a0:cb:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:84:14:E8:E8:9E:2D:79:AB:7F:7D:17:D0:9E:F1:7B:39:84:AC
            X509v3 Authority Key Identifier:
                keyid:6A:0F:85:8E:8F:21:4A:F5:D4:47:5E:80:E8:A4:E9:4F:75:A2:94:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A0F858E8F214AF5D4475E80E8A4E94F75A29444.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1hpyNjcQ6YZP31yRLLzEjTMTQWfPvBZMjtSxsRDfGtu/0/3133382e33362e3137322e302f32342d3234203d3e20323633353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:78:a8:62:9d:5d:d2:b0:ad:c0:4f:6b:7d:f7:4d:3e:5f:a3:
         3d:47:50:29:7e:f0:e1:46:ec:97:cf:79:da:36:6b:47:c5:d2:
         1f:c2:49:9e:b2:65:0c:16:67:d9:3f:17:91:69:e2:25:03:85:
         d9:28:3b:30:20:a4:e6:92:c9:8a:65:47:41:3f:0f:b5:5d:66:
         2e:74:8f:ba:70:9f:ed:66:19:84:c0:03:98:b5:2a:6d:ad:1f:
         56:a0:4b:5c:1d:9c:9e:23:65:a6:d2:59:3a:52:39:4e:53:e6:
         d3:ff:f0:cc:0e:25:0c:2b:dd:6e:64:75:e5:1b:e2:37:bc:33:
         9f:56:1d:f4:2c:01:1e:a0:f9:2c:99:62:64:70:35:21:37:0a:
         e0:4c:ec:bf:e2:54:dd:a2:06:ac:cf:c3:28:cb:9d:31:1e:b5:
         f3:3a:6c:f6:91:9e:26:62:88:37:9c:4a:f5:37:25:a7:3e:28:
         bf:0b:92:20:c8:78:91:3f:17:c8:d9:e9:76:b3:16:4c:b4:82:
         b9:90:72:e6:d6:2b:1c:39:98:09:47:b2:33:12:05:a0:88:bc:
         f9:04:94:e5:23:7b:12:1c:5d:af:02:e2:c3:f1:59:78:d8:d5:
         00:f2:0a:12:91:9b:ec:54:6e:51:5c:c2:10:2c:b9:b2:39:f4:
         92:c1:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org