Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa
File:                     3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (raw, json)
Hash identifier:          CpQ9wV8uG3lkOMAT7+9B4KZoEXcGg2vFgWPrD/SDTOU=
Subject key identifier:   5C:20:A0:53:93:A3:CD:64:A2:2A:94:50:31:E8:31:73:CD:EC:AF:6F
Certificate issuer:       /CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
Certificate serial:       5F0A0051CEDD44BC540CFB52E7A1DDE9736D0EB0
Authority key identifier: 8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa
Signing time:             Mon 06 Nov 2023 23:55:45 +0000
ROA not before:           Mon 06 Nov 2023 23:50:45 +0000
ROA not after:            Mon 04 Nov 2024 23:55:45 +0000
asID:                     271623
IP address blocks:        138.121.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0a:00:51:ce:dd:44:bc:54:0c:fb:52:e7:a1:dd:e9:73:6d:0e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
        Validity
            Not Before: Nov  6 23:50:45 2023 GMT
            Not After : Nov  4 23:55:45 2024 GMT
        Subject: CN=5C20A05393A3CD64A22A945031E83173CDECAF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:22:f6:c8:c2:d8:0d:aa:70:41:a1:1d:62:d1:
                    ef:3f:a0:d1:2e:3e:a2:7d:db:2f:81:85:d1:6e:fe:
                    92:45:e3:b0:8e:13:7c:b0:c3:86:6d:70:15:29:22:
                    0e:10:4d:3d:9f:b4:b1:52:10:46:df:55:bd:ae:a6:
                    26:1a:06:4c:89:7f:d5:e1:59:6d:9d:54:b2:ed:ba:
                    e9:bf:7c:e7:99:8e:a9:c7:aa:21:98:2d:3e:45:6f:
                    6a:ab:8b:07:78:8d:11:7b:cd:0d:ce:81:c4:f2:37:
                    84:73:ed:58:52:fe:f1:3b:bc:fb:2a:2c:8f:51:57:
                    9f:57:e9:cd:4d:26:51:8a:1c:84:01:a7:08:a2:00:
                    6d:c8:2a:8f:06:cb:85:f8:75:2e:c2:55:2d:61:70:
                    20:9c:29:67:e5:b5:80:a7:71:b1:14:60:ea:fd:94:
                    81:ec:fd:73:36:62:56:13:36:8a:44:d2:4a:1e:8e:
                    7d:7a:9e:9a:25:4a:27:54:4e:20:8e:c0:0f:39:51:
                    c6:cd:96:aa:b6:25:f0:b6:07:90:94:db:27:98:8a:
                    c9:69:87:60:56:01:df:fe:4f:d1:32:38:a7:dc:5e:
                    d6:bc:ea:e2:18:b3:18:1c:63:dd:55:5c:73:90:78:
                    d5:ea:aa:48:18:57:51:98:32:39:ed:d0:bb:24:b1:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:20:A0:53:93:A3:CD:64:A2:2A:94:50:31:E8:31:73:CD:EC:AF:6F
            X509v3 Authority Key Identifier:
                keyid:8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:45:72:f9:a1:a4:07:ba:a0:19:d4:3f:d2:71:7a:bd:98:
         00:87:67:b5:a3:df:68:28:6a:de:55:f6:9d:8f:03:8f:66:04:
         c8:cb:b4:33:84:58:db:4f:f0:a1:40:3e:08:65:4a:84:f5:11:
         33:e3:1f:9d:e3:60:90:d7:67:9f:10:9b:75:71:39:7b:43:3f:
         ff:e7:77:db:ae:70:19:58:bc:33:70:65:ef:5e:aa:cf:6b:e6:
         4a:f7:53:ef:50:90:f1:53:d7:28:dd:77:69:e0:e2:85:ff:c5:
         20:ab:1a:67:ac:da:81:ad:dd:c1:c5:d8:5e:5f:08:91:e6:e4:
         7d:8c:ce:59:9f:21:4a:56:5d:42:63:e1:bb:0f:98:c1:8a:23:
         5e:2d:15:9c:99:18:73:1d:e8:d1:d6:76:41:76:f0:49:16:f8:
         10:90:01:01:f4:12:24:cc:52:c0:68:7e:a2:b8:11:27:e3:93:
         2f:1d:20:36:45:96:ec:69:93:50:64:67:59:34:40:43:1c:21:
         fa:cc:61:68:10:c3:73:80:b8:f4:bf:04:5d:5e:94:8e:38:e3:
         2b:cb:ac:04:1c:68:26:25:f4:d3:d1:ce:4f:64:3e:c4:46:28:
         f8:1d:b2:9a:15:a2:c8:9c:aa:04:08:57:2e:c5:bf:79:60:34:
         25:43:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org