Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133382e302f32332d3233203d3e203238353938.roa
File:                     3136372e3235302e3133382e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          Fjl1QeK070pTuICd3BkQ4RDOMB6ifaxDBCXkiuhiKCE=
Subject key identifier:   68:22:C7:7E:E2:B1:03:E9:1D:E3:0B:35:13:C3:A0:29:EA:5E:72:F5
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       6DBDD653265F182751D08A9D3FF0242830572747
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133382e302f32332d3233203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:00:57 +0000
ROA not before:           Mon 23 Oct 2023 12:55:57 +0000
ROA not after:            Mon 21 Oct 2024 13:00:57 +0000
asID:                     28598
IP address blocks:        167.250.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:d6:53:26:5f:18:27:51:d0:8a:9d:3f:f0:24:28:30:57:27:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:55:57 2023 GMT
            Not After : Oct 21 13:00:57 2024 GMT
        Subject: CN=6822C77EE2B103E91DE30B3513C3A029EA5E72F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:4d:06:56:1f:64:00:ad:7f:6b:62:97:87:
                    7f:f3:ea:c2:3f:6d:39:90:c6:dd:b3:81:be:95:4f:
                    ec:0a:68:05:d4:fc:21:28:a5:44:c4:2a:00:26:0b:
                    71:58:3e:18:79:1e:68:8c:33:fa:d1:7c:18:bb:58:
                    7c:47:b1:68:24:c4:0b:f2:7a:d5:9f:30:7b:f4:ab:
                    40:30:9f:2e:3f:7d:6f:f5:7f:c0:72:e5:fb:b2:e6:
                    97:88:f8:c5:e7:9f:dd:ce:04:fc:58:7a:03:55:26:
                    fb:0f:33:9e:af:50:75:17:d2:ec:ed:c9:8b:ec:ee:
                    42:58:ce:12:e3:80:89:fb:45:7f:c7:dc:62:73:78:
                    73:37:78:a7:6a:46:25:a3:7b:c3:45:7d:8f:fe:b0:
                    d3:9c:78:5c:fb:32:ae:de:2e:1e:e4:af:e2:71:2a:
                    78:cf:68:7f:e8:2e:38:8e:9e:b7:af:0a:d9:fd:e7:
                    84:25:ac:78:35:74:07:69:0f:89:44:33:27:d1:81:
                    3d:b9:69:af:86:fa:6b:4b:c1:f4:6e:62:7c:ee:db:
                    57:d1:b4:17:8f:77:1d:f2:42:e9:82:49:d8:9d:19:
                    6a:d6:1d:af:3f:ff:e1:45:8f:71:f7:34:e1:82:62:
                    b5:0f:8f:a2:11:54:7a:5a:04:00:e0:9d:2e:b1:a6:
                    56:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:C7:7E:E2:B1:03:E9:1D:E3:0B:35:13:C3:A0:29:EA:5E:72:F5
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133382e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:58:b1:c3:55:c0:9b:d6:1f:0e:73:31:0b:77:8b:f7:64:
         88:93:2e:52:f5:69:af:01:ae:ff:e0:15:cf:33:35:c4:2f:18:
         5f:c8:c1:42:26:22:a4:bc:62:4f:32:a5:ca:5f:62:e2:2c:fd:
         d5:c9:61:62:12:4b:85:2d:ff:e0:35:0c:73:81:03:af:64:77:
         fa:b1:27:99:4f:1a:23:9f:bc:e4:03:1f:b5:07:a9:b6:48:6d:
         c9:73:f0:f1:1b:ce:c9:ce:5b:5c:a3:70:0b:0a:c6:4c:b9:28:
         f6:51:9f:7f:a7:04:e7:42:e5:17:32:be:ac:93:24:e6:09:cd:
         b6:74:b0:5f:9d:32:61:fd:d7:fe:75:ae:8c:34:46:8c:b6:32:
         86:37:31:ff:71:34:1b:84:16:1e:d4:6f:a7:55:84:83:0f:db:
         2b:98:65:ce:a8:b5:21:fd:83:9a:3c:c3:2f:fd:d7:5b:63:d7:
         0a:20:3c:21:3f:a3:e0:2f:5e:0e:32:25:db:6e:22:9d:30:7f:
         c1:46:78:59:30:7e:5d:ad:ed:25:3a:5d:5e:6b:c9:26:3b:25:
         35:d7:b4:ee:4d:a0:2f:18:4c:dc:7f:f8:f4:d3:6f:89:4e:99:
         76:64:f0:49:1a:b1:7f:62:f1:14:47:ca:f8:bd:5a:0a:b7:b6:
         d4:7f:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org