Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa
File:                     3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (raw, json)
Hash identifier:          BJ1LMhr8X63NFA+1C8aqz00UittnGHAMxkM0UE8gXAQ=
Subject key identifier:   3D:7E:32:AC:A9:A7:F4:33:B7:74:38:35:38:31:EB:6F:8F:AB:91:A4
Certificate issuer:       /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial:       2613D701C4A56231E388D1FE718E4D7E04906ABD
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa
Signing time:             Mon 11 Mar 2024 20:41:45 +0000
ROA not before:           Mon 11 Mar 2024 20:36:45 +0000
ROA not after:            Mon 10 Mar 2025 20:41:45 +0000
asID:                     263924
IP address blocks:        138.219.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:13:d7:01:c4:a5:62:31:e3:88:d1:fe:71:8e:4d:7e:04:90:6a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Validity
            Not Before: Mar 11 20:36:45 2024 GMT
            Not After : Mar 10 20:41:45 2025 GMT
        Subject: CN=3D7E32ACA9A7F433B77438353831EB6F8FAB91A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:4f:af:fb:02:b8:58:49:72:a2:54:3b:2a:
                    d2:54:07:0e:98:b6:75:96:76:4b:5e:0c:35:f2:c3:
                    fa:eb:91:6f:3e:01:0c:2f:34:fa:86:be:f7:b5:a7:
                    8d:36:dc:9b:9d:34:e6:eb:e5:39:ee:8e:fc:ee:b7:
                    af:86:18:ec:0f:62:09:e3:da:6a:92:da:d9:80:ff:
                    fb:ac:0b:bb:ad:61:78:6f:fa:f2:57:85:c0:69:34:
                    f1:e7:77:2a:63:7e:b9:cb:33:e2:a0:ac:9a:0c:ff:
                    13:72:38:e9:e3:e4:09:42:d4:d6:80:d6:81:62:f7:
                    24:ee:5c:6b:93:f6:7e:fc:43:72:a0:8b:79:0d:07:
                    9c:db:25:35:6e:d1:93:a1:72:0a:81:00:2c:71:a2:
                    78:a8:53:b0:61:62:cf:88:9d:d3:fb:75:aa:16:1c:
                    49:c4:e8:ff:74:b1:4b:a7:88:99:75:47:63:2c:24:
                    d9:8b:bb:96:f2:1b:79:c5:b4:ec:60:82:71:61:c6:
                    6a:66:9b:fd:91:42:47:e3:17:63:2f:2c:02:cf:a0:
                    0b:6d:c0:a8:1b:31:1b:6c:db:76:6e:35:a3:87:41:
                    1c:91:b3:7b:f3:20:3b:5c:17:a0:3c:f5:89:ec:5b:
                    c5:b1:36:59:4c:6a:09:cd:be:30:d4:9f:70:f8:dc:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7E:32:AC:A9:A7:F4:33:B7:74:38:35:38:31:EB:6F:8F:AB:91:A4
            X509v3 Authority Key Identifier:
                keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:06:32:ce:76:3f:27:7b:1c:d6:c2:2f:ba:2b:ca:6e:55:43:
         65:07:90:29:d6:37:32:01:64:9e:96:c0:c5:d4:81:bf:33:8b:
         1e:55:d9:2b:c5:f5:fb:db:df:2b:d4:55:11:72:e8:ec:d7:0e:
         61:8b:05:95:6a:03:86:11:3f:9b:42:04:48:56:ac:65:71:93:
         6b:11:94:48:17:80:be:fd:9f:58:0c:20:86:7c:5f:ae:44:22:
         56:87:93:11:75:13:10:4a:2d:ed:20:a9:b8:e4:8c:d3:c5:3e:
         49:71:89:12:1b:da:d3:7d:ce:92:32:71:41:66:83:84:22:1d:
         1c:02:e3:eb:d2:0c:5a:2b:75:8a:a0:10:d7:27:0c:0a:89:dd:
         52:73:5d:c9:2e:f1:8b:e9:57:8f:ba:58:4d:ae:17:64:41:cd:
         1a:2d:8d:cc:1b:7a:3b:cb:aa:2f:db:d6:96:e4:a8:aa:72:66:
         1a:7c:2c:e3:6e:b4:ee:f5:7c:df:a7:f1:93:0f:ef:11:8f:6d:
         a9:40:a4:93:de:b2:24:60:98:74:7e:cd:a8:46:d6:83:ab:8c:
         d0:ba:41:01:73:c3:ab:5a:71:14:35:a1:6f:31:8f:d3:1a:c3:
         c4:84:8d:71:23:db:61:15:da:78:4e:74:3a:e0:ee:8d:72:cd:
         a3:92:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org