Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (raw, json)
Hash identifier:          3zY+RaGS+ZqOgFf6pnbdNspsU9QZ49UJMNezy3ev8zQ=
Subject key identifier:   F9:A1:B9:BD:54:56:1C:02:E7:FF:42:2D:B7:69:F0:57:24:4F:7D:C0
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       63B72AA57A5D1F4CAABDE5C8AE3CFCB6C4AA8FC9
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:42 +0000
ROA not before:           Fri 23 Jun 2023 19:01:42 +0000
ROA not after:            Fri 21 Jun 2024 19:06:42 +0000
asID:                     264589
IP address blocks:        138.36.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b7:2a:a5:7a:5d:1f:4c:aa:bd:e5:c8:ae:3c:fc:b6:c4:aa:8f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:42 2023 GMT
            Not After : Jun 21 19:06:42 2024 GMT
        Subject: CN=F9A1B9BD54561C02E7FF422DB769F057244F7DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:05:e9:82:57:d1:41:37:0e:bc:1f:f1:f5:
                    98:e7:13:0b:d6:c8:bb:c2:aa:80:82:83:37:4e:ec:
                    1a:f2:ab:47:0d:e5:e5:c4:ec:d3:b8:6d:98:d3:d7:
                    d5:9e:db:44:dc:97:ae:64:ca:76:53:b7:18:d6:9a:
                    6a:61:19:32:a1:80:5d:3c:8d:0f:4b:04:7d:64:4e:
                    2a:89:53:f3:23:36:ab:83:7e:e8:6d:4e:5e:cc:4a:
                    00:e7:89:a8:4b:15:db:0f:8a:da:4d:1a:13:8e:ac:
                    7c:b7:66:f7:69:b4:d6:aa:c1:f6:3f:46:32:2f:eb:
                    13:d2:e4:28:70:34:23:38:fc:a3:89:c0:1c:10:62:
                    c7:d3:1b:04:dd:3e:46:d9:cb:86:54:5a:22:d5:34:
                    28:62:6c:48:d1:53:22:47:c4:3f:68:c2:0a:ed:83:
                    2a:a9:34:a6:0d:33:ba:36:29:95:5f:37:77:ea:f5:
                    2e:1c:18:51:df:74:54:e8:4c:b2:00:63:49:d1:94:
                    88:6e:40:99:22:01:63:b3:92:12:9f:80:e2:4c:da:
                    90:d7:fb:6f:75:90:fc:5c:d3:1d:07:c9:0e:1f:dd:
                    90:82:d2:af:ab:c8:5f:3f:33:fd:57:7c:03:d6:22:
                    a6:46:99:8a:67:10:fe:1c:f9:51:95:08:96:1e:e5:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:B9:BD:54:56:1C:02:E7:FF:42:2D:B7:69:F0:57:24:4F:7D:C0
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:d2:ad:83:8c:b3:d1:de:74:89:7f:b0:fd:6e:58:eb:ef:
         c1:f9:51:69:50:c2:54:68:5c:ae:9a:e8:89:90:3d:8c:a1:26:
         64:cf:e1:7a:03:32:9d:9f:a2:a2:c8:3b:2a:76:bc:ae:d9:d2:
         cb:9b:33:99:9b:ff:e5:58:a3:d0:f6:a4:07:a7:01:37:62:f1:
         02:f3:ce:2e:23:48:a1:df:08:b6:9e:08:75:92:a3:12:3a:fe:
         9b:1b:98:72:54:6e:94:a6:7f:7b:2b:40:eb:00:2d:aa:dd:30:
         ab:8f:7b:54:16:68:c4:57:79:45:64:1b:6b:ae:fa:24:55:23:
         96:70:1c:63:24:70:2d:04:59:25:5a:e6:a2:a7:5d:58:02:78:
         ee:c4:dd:ca:d6:ed:9f:ca:a7:67:bb:37:6d:3c:1b:ab:3e:d5:
         96:e8:43:a0:e2:1a:d1:27:45:61:e1:c2:25:85:4d:39:78:66:
         ef:c6:29:d3:62:1b:31:ea:3c:76:64:4a:da:b3:52:8e:da:6b:
         31:2a:d6:ae:38:4d:26:63:60:26:60:ca:fb:6e:96:e9:05:52:
         2a:78:f6:52:b2:16:50:4c:2e:59:79:76:3e:97:af:29:7a:18:
         dd:c1:e3:be:62:5b:39:11:22:44:44:e2:d6:f6:da:59:66:28:
         e0:1c:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org