Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32332d3233203d3e203631353834.roa
File:                     3133382e39342e3132382e302f32332d3233203d3e203631353834.roa (raw, json)
Hash identifier:          9m7gE41oLiPOc6c6SUwm4WeoDP+0/mMlH2pPsrjeK5g=
Subject key identifier:   28:64:D5:DD:CC:39:A4:FD:13:EA:99:73:76:0C:55:AA:60:B6:BD:AD
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       1C633DE2ED0668E5F57ECEC948A6E7B3F11E66D9
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32332d3233203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:33 +0000
ROA not before:           Mon 10 Jul 2023 19:01:33 +0000
ROA not after:            Mon 08 Jul 2024 19:06:33 +0000
asID:                     61584
IP address blocks:        138.94.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:3d:e2:ed:06:68:e5:f5:7e:ce:c9:48:a6:e7:b3:f1:1e:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:33 2023 GMT
            Not After : Jul  8 19:06:33 2024 GMT
        Subject: CN=2864D5DDCC39A4FD13EA9973760C55AA60B6BDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:64:ca:a2:61:ac:d1:04:6b:a1:d4:42:40:
                    47:b8:f5:1e:96:ac:0e:5d:d8:27:7e:17:28:ca:2f:
                    ab:3a:66:69:04:75:2b:89:bd:25:fd:66:7f:89:eb:
                    b5:e4:84:98:2a:7a:2d:a9:9c:0f:69:f8:b8:a3:12:
                    70:07:8c:c1:51:b9:1b:b2:9c:79:df:7f:78:20:fd:
                    d4:b2:07:8f:38:d6:31:0a:19:db:85:07:8e:07:05:
                    1c:5e:db:86:be:ef:52:1c:cb:6a:0e:0e:39:b2:d0:
                    e8:06:92:01:e7:08:1f:80:6e:83:ac:d7:5a:7c:47:
                    62:42:72:63:b0:eb:24:f5:b5:c4:e5:ec:2d:93:1c:
                    9d:3b:e3:19:1e:f7:6d:8d:9d:78:ff:47:0a:ec:ab:
                    b0:13:f2:10:13:41:32:b9:63:d0:2a:94:bb:4b:f6:
                    a5:e4:9f:6e:96:e6:34:a4:a8:96:cf:16:1a:59:94:
                    af:74:9c:cd:be:53:b8:e1:e5:6c:47:b1:cf:0f:4e:
                    2a:4b:6a:01:99:ae:c8:ed:49:d6:db:cc:78:79:7d:
                    37:ed:a3:94:f3:35:6c:03:85:2d:2a:7f:72:c1:5b:
                    71:4f:d7:24:e3:53:4f:34:5f:aa:f5:89:ef:ab:bd:
                    f1:dd:bc:09:ba:07:32:b5:6f:56:11:0c:cc:57:b0:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:D5:DD:CC:39:A4:FD:13:EA:99:73:76:0C:55:AA:60:B6:BD:AD
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32332d3233203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:e1:64:33:ed:6b:97:0f:d5:6f:84:ea:dd:b4:73:59:af:
         a3:af:1e:7e:91:19:0a:28:d1:e5:1e:76:68:03:d7:9e:18:08:
         06:87:20:54:56:1f:2e:26:b4:8f:31:44:7b:5b:2d:9e:dd:d1:
         d0:0a:37:40:36:94:db:62:c6:50:18:5b:3e:c5:79:3c:3f:bf:
         c9:38:fd:45:40:45:13:55:2a:3e:96:57:76:60:73:09:c7:f8:
         6e:25:98:40:a8:42:0a:82:62:96:fb:f2:75:47:17:54:d9:70:
         48:f8:2e:8d:a7:6d:32:d1:fc:0e:09:c3:4e:3a:6a:67:2f:43:
         bc:b8:b6:ca:11:f9:d7:b5:b9:12:31:e7:e6:57:00:80:5f:f4:
         96:f9:35:c4:01:0a:0a:ca:14:29:3f:1b:f4:0d:0c:1c:3e:de:
         fc:39:04:06:09:f4:6e:be:24:de:bf:b8:79:e0:3c:51:0e:7e:
         82:3e:b6:76:ce:67:55:3b:4b:e3:99:d8:ef:33:2e:d3:92:4a:
         16:27:14:11:47:13:c8:e1:d9:05:bb:d4:b7:81:8c:73:65:b6:
         2b:a8:a9:85:49:26:63:fc:dd:7f:b2:c2:94:2c:5a:6e:68:9e:
         20:7d:fd:90:49:75:57:00:68:3b:6f:98:28:86:02:a8:1a:1d:
         13:0b:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org