Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa
File:                     3133382e33362e32322e302f32342d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          vxDGtTVURLwlSsRg5SdtWTC2hFl/63kCMRj7Km2y5GQ=
Subject key identifier:   7E:89:3E:51:12:ED:74:C7:20:10:1B:BD:70:5D:14:E9:68:E8:E3:91
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       76237BE5D0BFB168A5CEF0E45EA96DEB5EA0A507
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:12 +0000
ROA not before:           Thu 15 Jun 2023 19:58:12 +0000
ROA not after:            Thu 13 Jun 2024 20:03:12 +0000
asID:                     263026
IP address blocks:        138.36.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:7b:e5:d0:bf:b1:68:a5:ce:f0:e4:5e:a9:6d:eb:5e:a0:a5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:12 2023 GMT
            Not After : Jun 13 20:03:12 2024 GMT
        Subject: CN=7E893E5112ED74C720101BBD705D14E968E8E391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:cc:82:4f:30:03:c0:51:8e:fc:46:7b:f8:
                    e3:7b:a7:b1:c5:f8:17:82:4a:55:80:82:29:fc:70:
                    bf:9e:00:fd:2b:64:36:2a:98:be:71:de:78:a9:76:
                    ac:d1:0e:c9:05:90:66:0a:da:30:55:3f:7f:0b:bc:
                    10:a0:48:e7:7b:b3:63:c7:74:2e:7a:41:f2:d6:52:
                    f9:d2:d1:aa:33:49:10:ab:4d:22:21:22:74:50:41:
                    52:3b:a4:4f:1c:4c:da:03:77:67:70:2f:61:35:72:
                    df:05:85:02:60:50:8b:f4:4a:86:71:da:59:e9:65:
                    ec:e1:cb:d7:b6:c2:6a:da:f1:10:be:93:7d:18:ef:
                    4a:f0:55:bb:97:41:81:e2:9d:81:ec:1f:b0:c6:ff:
                    2c:0a:94:ba:db:67:1a:ec:37:90:24:02:6f:84:b9:
                    c2:68:37:a1:57:d8:cf:9c:0c:32:fd:8f:d0:0c:ec:
                    4f:53:1b:50:04:44:9c:74:3d:c3:47:4a:55:c5:4e:
                    0f:50:0a:d9:0e:55:6a:ce:b8:59:8a:a2:a2:ca:34:
                    88:c3:6a:2d:5d:dd:a9:12:ae:0b:45:e7:93:0b:eb:
                    84:4f:cc:69:50:ea:17:5c:e4:81:39:3f:ca:24:24:
                    e9:99:b9:bf:94:25:9e:0f:79:80:bd:9b:5c:61:88:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:3E:51:12:ED:74:C7:20:10:1B:BD:70:5D:14:E9:68:E8:E3:91
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32322e302f32342d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:a5:ab:1a:92:9c:51:8b:14:41:9e:f4:7a:b2:e1:7e:a3:
         4f:13:72:72:42:90:5c:99:a2:68:1a:39:3e:78:12:4b:30:8e:
         07:51:ce:5b:ec:7c:cb:d8:c8:9e:79:74:73:65:33:7f:a0:03:
         0e:88:94:bb:14:98:e1:28:32:94:9a:d6:c3:f0:6a:d2:03:47:
         6a:b0:e9:6c:d8:b3:a8:d8:d1:1e:9d:c8:76:2a:cf:5b:e2:43:
         fd:4c:ea:fb:8a:29:13:e2:e3:74:5f:c6:e8:11:07:15:94:38:
         62:b3:ea:af:b1:32:46:14:f1:3b:c1:e7:46:d0:7b:3f:7d:c7:
         69:33:de:e3:8f:32:3d:85:14:64:4a:e2:47:40:83:f6:e9:94:
         f0:f2:34:1a:6b:a2:8c:a4:6f:cc:a9:c9:a4:0d:58:e6:21:9c:
         2a:be:61:eb:ed:10:16:e2:c6:62:37:58:35:8c:f6:cb:3c:d8:
         3b:d8:2f:75:d3:62:53:fe:67:4d:f0:83:0a:f6:91:53:38:80:
         9c:3c:f3:5f:cf:47:87:e1:24:ed:ab:0e:c6:d5:a6:d4:a0:cf:
         e1:46:80:c3:2f:a1:12:bc:6c:d1:b2:7f:4c:75:ea:f7:6c:3c:
         f1:a8:08:00:8e:ed:8b:45:78:17:53:95:c7:14:c6:e6:8e:06:
         71:9f:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org