Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32312e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          4eD9LgcYev9l4dRjyPNQzL9+FVNDTBCl7FBZfhFvsmQ=
Subject key identifier:   D5:92:44:36:B5:B7:5F:BF:5F:DA:9F:2C:7D:B2:34:E7:BC:1C:A4:30
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       245E93A71CF7BB614D4E95FFF9B381099356F0C8
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:12 +0000
ROA not before:           Thu 15 Jun 2023 19:58:12 +0000
ROA not after:            Thu 13 Jun 2024 20:03:12 +0000
asID:                     263026
IP address blocks:        138.36.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5e:93:a7:1c:f7:bb:61:4d:4e:95:ff:f9:b3:81:09:93:56:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:12 2023 GMT
            Not After : Jun 13 20:03:12 2024 GMT
        Subject: CN=D5924436B5B75FBF5FDA9F2C7DB234E7BC1CA430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:4b:73:88:ca:d9:c5:40:2a:57:e3:50:65:
                    09:58:bf:19:7c:d0:18:54:0d:16:16:36:c9:a1:d9:
                    8c:0e:74:6a:b6:28:d0:2a:8b:d6:e7:64:df:9d:75:
                    10:26:dd:5e:2e:5a:5f:8f:ea:f0:10:78:e0:09:76:
                    e1:a3:a8:fd:bd:a3:bc:1a:c7:b8:e6:6a:f6:0f:fb:
                    aa:44:86:67:d6:1d:3c:9c:0a:3d:9f:b6:2b:b5:7a:
                    8e:d0:03:29:fb:7f:0d:b8:8f:91:f7:ce:80:b1:70:
                    3f:a0:d5:2a:30:d8:a6:74:60:20:d3:52:93:93:82:
                    62:16:a3:87:1d:e9:9e:59:97:32:a8:5a:6e:50:72:
                    da:ba:57:9d:0c:ed:7a:97:0f:38:90:0e:4d:a8:b9:
                    4b:77:d1:23:17:b7:83:1d:91:26:81:b8:84:23:00:
                    07:c8:44:5c:49:94:ac:3a:22:f8:0b:11:fe:3a:d4:
                    97:81:78:e4:14:37:5b:e6:9a:4c:0b:25:d1:22:58:
                    88:c4:95:ba:4d:c9:a9:90:ab:7a:f8:bc:da:90:fb:
                    a0:02:dc:d6:2f:99:6d:76:ea:d9:9d:c1:d8:ee:c8:
                    92:bb:bf:ed:d6:6c:26:b9:bd:b0:fc:2d:d5:16:54:
                    67:1c:1a:36:94:64:49:f6:75:cb:58:81:60:f4:96:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:92:44:36:B5:B7:5F:BF:5F:DA:9F:2C:7D:B2:34:E7:BC:1C:A4:30
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32312e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:d2:bd:d1:c4:f8:b8:c7:1e:39:6b:35:f8:a5:4a:b4:2c:
         07:a4:c8:19:01:7d:9a:45:99:5d:a1:a9:ac:1a:fa:75:a7:a1:
         6f:e6:36:8d:c4:28:45:ca:35:e7:ef:46:05:49:4a:64:41:29:
         99:e1:cb:c9:da:cb:94:76:00:67:d5:e9:bc:37:e4:93:62:49:
         2e:47:67:4d:ad:33:c4:93:ef:40:aa:0a:3c:ec:3a:ba:8a:b0:
         e2:61:de:17:4d:3f:bb:1e:53:d5:38:06:f0:53:4b:05:fb:78:
         82:b0:a3:f2:00:2b:5f:4b:cd:89:25:e4:e6:e1:9b:38:4d:2a:
         4c:9b:37:0c:ba:b9:f6:79:52:44:40:c5:75:26:f4:22:2b:c3:
         d2:07:b5:3c:5e:12:b5:18:ba:ba:88:98:5f:a5:94:2b:de:3b:
         87:7d:7d:db:4e:78:a1:e1:57:9a:42:2f:1c:e0:a7:db:b1:e3:
         e0:1b:0e:25:2c:ab:e2:01:d3:26:ba:99:82:79:7c:fb:ed:3a:
         a8:26:64:eb:35:e4:14:98:62:77:1b:7f:10:c4:35:6d:c1:f5:
         83:a9:53:cb:0c:82:75:7e:9e:f5:cc:4d:93:ae:81:91:e7:5d:
         94:c1:cb:da:f4:c9:94:07:e0:25:47:d2:79:18:95:11:a1:7e:
         cd:16:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org