Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
File:                     3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa (raw, json)
Hash identifier:          bBCjUtteBt0ajGtYaMS47PQJE9uUUF6+eCcPzKoZFOs=
Subject key identifier:   03:04:E6:AB:67:08:E6:68:E9:1A:7E:5D:FA:56:60:9F:18:9A:00:44
Certificate issuer:       /CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
Certificate serial:       13E49748005C67D5E4CF45DBB6D19429239D51B0
Authority key identifier: 4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
Signing time:             Thu 19 Oct 2023 20:41:11 +0000
ROA not before:           Thu 19 Oct 2023 20:36:11 +0000
ROA not after:            Thu 17 Oct 2024 20:41:11 +0000
asID:                     263866
IP address blocks:        138.186.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e4:97:48:00:5c:67:d5:e4:cf:45:db:b6:d1:94:29:23:9d:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
        Validity
            Not Before: Oct 19 20:36:11 2023 GMT
            Not After : Oct 17 20:41:11 2024 GMT
        Subject: CN=0304E6AB6708E668E91A7E5DFA56609F189A0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:ad:ba:53:74:7a:cf:24:30:a9:fb:81:bc:
                    3a:fa:13:01:83:cb:a4:27:d6:64:b8:35:2d:8f:e5:
                    dd:05:ee:34:e2:22:36:fd:78:6c:be:cc:4f:5b:de:
                    3c:40:00:ed:e9:85:1f:c1:1f:ef:2f:9e:49:7e:ee:
                    f5:34:46:0c:cf:88:e8:e2:36:3c:2f:ae:ac:7e:c2:
                    5b:61:92:68:41:35:66:1b:81:3c:1e:17:24:22:d1:
                    aa:77:dd:c3:a9:ac:db:b2:20:36:5a:d2:d3:29:c8:
                    74:d4:69:f6:48:a9:37:58:72:21:25:96:d6:0f:23:
                    28:94:6b:f6:e8:dc:c3:73:c2:6d:50:ee:9e:95:f4:
                    22:2a:b7:bc:df:4b:63:7a:e0:7f:3f:bf:c5:ba:fe:
                    a6:c8:df:b2:dc:89:24:ce:2f:03:ff:32:a9:eb:1e:
                    a7:69:e4:85:e4:e3:76:65:3a:04:38:02:76:7c:57:
                    34:16:7a:a7:df:ce:78:61:7d:19:29:4d:36:7e:b8:
                    68:73:58:a0:79:09:77:8d:d2:ed:07:19:cd:c4:ad:
                    3b:20:0a:b1:99:21:7e:99:7b:7d:07:eb:bd:1f:9e:
                    17:8e:fd:08:f5:59:3b:ad:50:2d:39:36:c5:79:2b:
                    b3:45:8e:79:60:69:39:61:53:24:44:c0:22:76:bf:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:04:E6:AB:67:08:E6:68:E9:1A:7E:5D:FA:56:60:9F:18:9A:00:44
            X509v3 Authority Key Identifier:
                keyid:4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:40:da:9d:b5:3b:df:1b:f9:4d:aa:28:07:a7:55:53:24:
         c6:87:47:ae:18:5f:b5:d3:7c:fd:26:8c:cd:4c:2b:a5:a8:38:
         f6:b9:21:d0:e0:4c:95:76:57:df:4f:b9:69:e9:e5:14:ba:53:
         6a:a2:42:01:25:ca:d8:84:fc:9d:57:4d:3e:a2:92:31:f2:6f:
         65:53:9c:ef:5f:59:f7:65:1f:30:dc:1f:8f:93:27:36:52:20:
         2d:68:ad:2c:73:e5:a5:10:ed:56:cb:d0:72:11:89:30:d7:c4:
         8a:00:d8:25:7b:e9:1a:8f:0c:f1:50:df:ab:e3:07:71:f6:cf:
         5a:29:4d:53:d4:68:a3:96:28:b2:1d:30:99:84:83:51:fa:e2:
         8c:ff:a0:67:50:02:e5:e1:ab:eb:82:2c:37:50:ef:2a:1f:85:
         ec:f5:fe:d2:e6:aa:c1:6d:02:45:5b:1b:53:87:94:da:7f:43:
         af:7f:59:f2:e7:b6:4f:61:bc:46:79:18:a4:2a:19:20:11:8d:
         37:3b:05:38:4f:57:a5:2a:06:1f:85:31:28:37:c0:74:aa:c7:
         51:cb:1e:8f:8f:33:c9:2a:b9:e9:a7:a2:03:47:85:6a:36:cd:
         aa:9f:52:cf:88:97:7c:db:f6:06:60:f4:58:c6:93:2a:d5:45:
         71:f9:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org