Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32302e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          IHqKAFLgl68PFgAlK/yTVBdCZ4SlBSGWBaPj4ycbGaA=
Subject key identifier:   10:66:E7:43:1C:C0:61:20:A4:14:03:97:C6:E2:F2:0D:AD:55:E5:69
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       66985183DA561460048D5D863DE506855CE20C05
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:13 +0000
ROA not before:           Thu 15 Jun 2023 19:58:13 +0000
ROA not after:            Thu 13 Jun 2024 20:03:13 +0000
asID:                     263026
IP address blocks:        138.36.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:98:51:83:da:56:14:60:04:8d:5d:86:3d:e5:06:85:5c:e2:0c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:13 2023 GMT
            Not After : Jun 13 20:03:13 2024 GMT
        Subject: CN=1066E7431CC06120A4140397C6E2F20DAD55E569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:e8:e3:05:a5:3d:a4:98:8c:be:fa:6f:ed:
                    4e:fa:56:76:08:d7:ad:ea:16:1f:81:84:7a:32:b8:
                    21:f9:15:fc:93:24:40:2b:7f:77:4b:46:b3:a0:3d:
                    40:a6:e6:c8:5f:33:66:67:96:b6:2c:21:cf:59:bb:
                    71:bf:cf:92:dd:73:a0:54:ab:fb:b6:0d:8c:96:01:
                    e3:7d:e1:75:b2:1a:32:f7:b2:a1:cf:75:2e:47:f8:
                    7f:c3:48:9a:73:d0:75:5b:76:eb:d2:e3:ca:82:96:
                    10:55:f3:01:d9:76:6c:21:76:14:90:8b:04:1c:eb:
                    2a:7a:7c:5b:98:cc:f9:45:7e:2c:5a:f6:7c:a6:5a:
                    03:ea:87:4e:94:e8:0f:70:0a:22:77:80:17:68:73:
                    10:db:31:ba:52:08:2b:d8:79:07:7e:75:df:fa:9e:
                    2e:ef:2a:2c:e7:f4:c6:75:d1:ee:54:90:c5:d3:25:
                    67:24:6e:fe:5b:0e:24:07:44:7a:d1:99:dd:91:dc:
                    cc:81:03:29:d0:d0:5f:3c:e2:54:0c:57:61:c3:23:
                    87:b0:1a:3a:bc:cc:77:3a:76:fc:53:dd:7d:c2:68:
                    93:f4:54:54:50:0d:3e:4a:d2:78:e2:3d:9b:b5:62:
                    bd:ff:90:3e:0b:b1:69:e2:3a:7b:93:98:1d:a9:97:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:E7:43:1C:C0:61:20:A4:14:03:97:C6:E2:F2:0D:AD:55:E5:69
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:62:e1:a9:35:91:31:7a:05:20:9b:17:8f:bb:e0:1f:38:f2:
         08:14:8f:75:bf:17:7c:ba:2f:15:a8:5e:13:ff:13:29:ce:5e:
         d9:c8:3a:76:d3:66:c1:b3:61:51:60:ed:2c:e4:ce:b6:96:ad:
         d6:52:ec:24:df:5b:ee:bd:a1:4b:29:32:30:f7:ec:58:fc:10:
         fc:eb:8d:40:dc:5f:44:b9:e6:fd:2e:2b:c8:b5:37:e3:f0:81:
         90:ff:64:d0:3f:de:8d:7f:9d:12:ae:89:5a:70:98:4b:f5:04:
         24:b9:1e:2e:cf:62:17:db:c6:d7:4d:50:8c:d1:f4:c3:2a:13:
         eb:65:0d:03:21:01:8c:43:fa:0d:89:9c:a2:9a:f0:60:eb:f9:
         f8:11:3d:ad:e2:90:8f:54:66:bb:e7:62:9f:68:65:b6:2c:f3:
         5e:5e:ee:d6:8f:6c:7b:43:83:df:0e:20:99:20:9e:57:d7:96:
         2f:42:e6:34:d1:71:66:d7:13:c3:17:86:2d:90:2b:a2:35:25:
         94:47:c0:5d:14:ba:e5:17:d5:11:56:58:b9:1e:32:d6:04:f7:
         5e:8c:47:3b:00:b8:84:9c:24:a9:69:2a:9d:2b:f7:e8:c2:fd:
         85:14:e6:e3:aa:85:0e:5f:23:32:99:e0:13:1a:a9:74:fe:2c:
         5e:58:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org