Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa
File:                     3133382e39342e34342e302f32322d3234203d3e20323634313235.roa (raw, json)
Hash identifier:          lAmfoKV3ospOjTm1vPcNK9tQxJvFKDl+k5BEF6cSAZA=
Subject key identifier:   AA:2C:9D:B0:2F:56:B5:86:9C:3C:4A:85:D6:32:40:87:F4:4A:87:D1
Certificate issuer:       /CN=A8125301CCFFF14B6F273F5B4F08F9000BA221C3
Certificate serial:       351682A718EDBFCC7CE56EF9FEFA8274DC173D62
Authority key identifier: A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa
Signing time:             Wed 09 Aug 2023 18:14:00 +0000
ROA not before:           Wed 09 Aug 2023 18:09:00 +0000
ROA not after:            Wed 07 Aug 2024 18:14:00 +0000
asID:                     264125
IP address blocks:        138.94.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:16:82:a7:18:ed:bf:cc:7c:e5:6e:f9:fe:fa:82:74:dc:17:3d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8125301CCFFF14B6F273F5B4F08F9000BA221C3
        Validity
            Not Before: Aug  9 18:09:00 2023 GMT
            Not After : Aug  7 18:14:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:8b:a7:10:26:35:6d:ee:ff:cb:33:72:53:
                    b8:07:e7:1d:cb:fe:0f:fe:91:e2:19:dc:b4:83:84:
                    01:3c:a4:e5:4d:86:d3:e4:16:dc:15:f2:8f:f2:b2:
                    44:05:24:3a:42:5a:65:7d:a5:fc:4c:00:54:0e:ad:
                    c7:00:8a:fb:6a:10:5e:c5:fa:40:6f:3b:29:2b:12:
                    ab:f3:be:43:62:56:72:b3:ad:2f:9a:4c:29:0a:68:
                    4e:e7:72:23:cd:34:ff:18:75:03:8d:53:b2:1f:7f:
                    b9:fb:65:54:a2:91:00:9f:30:16:99:15:cc:54:dd:
                    75:17:8b:1e:8b:e0:0e:04:e1:e1:a1:02:27:c6:5f:
                    6b:69:7e:6e:34:d6:fb:9d:04:f8:f3:4f:1a:6a:ef:
                    16:d0:36:7f:7c:fd:20:75:24:20:4d:6d:57:1a:90:
                    bc:57:98:ca:56:f6:8b:8b:2a:de:54:55:a5:02:ad:
                    19:1a:70:0c:df:53:89:b9:0a:ea:34:db:8c:a4:e1:
                    6f:6e:5d:29:ed:96:e6:6e:18:d8:09:a2:56:4d:43:
                    90:29:a6:5a:4e:e6:6a:5e:82:8d:b0:2f:9f:17:a2:
                    f8:95:73:bb:25:35:0b:89:cd:c7:f2:06:35:dd:25:
                    e3:2e:41:37:16:82:01:e1:08:db:78:d7:51:d6:88:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:9D:B0:2F:56:B5:86:9C:3C:4A:85:D6:32:40:87:F4:4A:87:D1
            X509v3 Authority Key Identifier:
                keyid:A8:12:53:01:CC:FF:F1:4B:6F:27:3F:5B:4F:08:F9:00:0B:A2:21:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8125301CCFFF14B6F273F5B4F08F9000BA221C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:0d:a5:d6:65:eb:f5:66:96:72:93:d3:62:7c:64:34:c6:
         26:03:50:70:2c:78:f7:5b:74:33:20:dd:97:eb:7d:27:a0:2a:
         8d:32:06:57:17:05:f9:17:db:dd:40:ad:d9:ba:81:eb:99:6b:
         be:da:5f:4e:2f:29:99:1b:a0:21:1a:68:90:e5:0c:4b:73:91:
         42:2c:94:87:8f:dc:5b:2d:da:36:47:f5:eb:b4:5f:eb:a7:b7:
         67:67:2a:37:c8:0b:b4:95:f3:7d:06:6e:b6:26:3e:42:99:19:
         48:9a:02:89:03:1b:0a:9f:01:5c:74:f4:99:c5:72:e2:f4:86:
         f5:05:cb:c3:4e:79:ad:3e:fa:62:45:a5:7d:b7:d2:ef:1f:31:
         30:11:3b:dd:de:65:e6:8f:ab:db:c6:61:09:38:27:43:ca:46:
         61:f7:16:e6:31:7a:e4:d2:06:91:fa:0e:f7:34:d8:d2:8b:3f:
         62:f0:fe:a2:79:97:60:66:9b:84:48:3c:82:f6:74:db:3f:c3:
         7e:1d:9c:b9:b7:e4:81:60:bf:f6:b8:f2:5c:ac:4b:99:78:c8:
         5f:59:f5:fe:d1:f5:bd:5d:5d:01:b6:70:68:d0:31:7f:17:37:
         82:b6:f5:60:e4:6f:62:9e:22:e5:08:6f:99:05:c5:4f:37:89:
         bc:e2:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org