Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa
File:                     3133382e302e3138382e302f32322d3234203d3e203532383338.roa (raw, json)
Hash identifier:          YBKOYrj2rXl6aSrS8D2lJu+4eiu/BnTyWz2JR7Y14Wg=
Subject key identifier:   9E:A1:9E:B3:10:A2:2C:84:91:0F:4E:C2:67:43:71:76:A6:A8:E7:0D
Certificate issuer:       /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial:       2CF0CDC5EE4DA36093573C58814ACD4D1D54D1D7
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa
Signing time:             Tue 14 Jun 2022 20:05:40 +0000
ROA not before:           Tue 14 Jun 2022 20:00:40 +0000
ROA not after:            Tue 13 Jun 2023 20:05:40 +0000
asID:                     52838
IP address blocks:        138.0.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f0:cd:c5:ee:4d:a3:60:93:57:3c:58:81:4a:cd:4d:1d:54:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Validity
            Not Before: Jun 14 20:00:40 2022 GMT
            Not After : Jun 13 20:05:40 2023 GMT
        Subject: CN=9EA19EB310A22C84910F4EC267437176A6A8E70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:e5:08:d0:18:99:e9:d9:cb:87:73:c1:f4:
                    f8:a3:75:cc:b2:f3:7c:cb:96:61:33:1c:82:1d:f9:
                    bf:18:fc:68:e0:40:1f:61:99:3e:5e:30:e5:e2:ef:
                    35:88:db:15:6e:a2:2b:46:4c:66:1b:23:d4:cd:16:
                    d8:4d:35:b9:23:98:9f:34:7f:c1:73:8a:f1:3f:c9:
                    60:25:20:7d:8c:cc:3b:c6:80:1e:f8:6d:55:74:31:
                    a8:cf:ed:c0:84:54:4c:10:ff:4f:e5:16:60:a6:42:
                    c2:c5:86:df:eb:d7:3c:a2:c0:ae:5d:d4:fa:a5:e7:
                    4a:e9:cc:e5:5b:23:ea:6f:3e:70:dd:9e:73:28:31:
                    29:0b:1e:6a:47:9c:b1:4b:fb:d1:21:13:5e:c0:e0:
                    6e:09:80:16:f1:a4:d4:a9:9a:dc:3c:0a:5f:64:9c:
                    47:ce:01:d5:2b:a5:16:71:c8:20:fc:4a:fa:39:22:
                    c6:d0:3b:9b:4c:f4:a5:de:26:fa:31:bd:e9:36:47:
                    41:46:c2:1c:2a:8a:2f:69:5d:db:ab:57:a7:64:cb:
                    a1:3c:08:57:67:0a:30:c2:27:3b:50:29:98:88:e5:
                    e7:3d:72:0f:f7:a5:fc:f5:4f:13:ea:a1:99:af:44:
                    a0:a5:eb:0a:f9:8a:76:96:f2:cb:f0:e5:aa:63:f2:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A1:9E:B3:10:A2:2C:84:91:0F:4E:C2:67:43:71:76:A6:A8:E7:0D
            X509v3 Authority Key Identifier:
                keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/3133382e302e3138382e302f32322d3234203d3e203532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:61:b1:96:e4:f8:fb:e3:04:2f:7e:c6:44:73:b5:9c:64:
         b6:7f:da:51:2b:dd:45:81:dd:ab:fc:93:bd:f4:70:2a:7e:ba:
         ca:50:6e:ba:9b:b4:c7:6d:b4:a0:ce:a5:68:2e:b3:b9:c5:3d:
         40:cd:6e:01:f6:c7:b4:af:19:33:66:44:18:53:71:05:9f:47:
         e0:f0:fa:8b:3e:23:47:7f:75:ae:f6:99:22:a7:c3:2a:28:8f:
         eb:ad:50:75:f7:07:b1:05:f4:eb:24:48:00:9c:06:4f:96:a9:
         20:35:0c:0d:0f:85:0b:b6:a7:37:a1:e5:12:a2:65:19:f1:e3:
         61:46:e3:71:91:af:ab:05:46:73:01:03:ec:37:8b:ae:e5:96:
         30:2d:a3:cc:66:1e:48:1d:6a:f9:f0:3a:0d:b5:ad:d9:dc:e1:
         c3:10:c1:db:95:f7:d0:f4:df:2d:37:49:a9:8e:67:1d:b3:75:
         e8:ae:64:af:87:d6:90:3d:f7:2f:80:cc:6e:21:e9:c1:a5:6f:
         85:e6:dd:21:b0:1c:d8:c0:b9:9f:da:7f:f3:a1:77:f6:b7:86:
         43:ae:a2:19:4e:15:24:f1:2d:da:9f:a2:60:93:ac:72:e3:56:
         42:fa:2c:93:94:37:47:b0:7e:54:79:92:2f:0e:ba:34:d5:16:
         a4:fc:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org