Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa (raw, json)
Hash identifier:          wWVesQekCNpGLM3PamXZN+94Zw0QxC3zicyDO+jnZ3A=
Subject key identifier:   37:2C:22:D2:36:F0:E7:AD:12:0C:05:62:D5:B3:C7:71:30:7F:F8:BF
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       1295D106E436AC4E09F2A33E4813A41574CA0A4E
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:01 +0000
ROA not before:           Fri 08 Sep 2023 12:55:01 +0000
ROA not after:            Fri 06 Sep 2024 13:00:01 +0000
asID:                     264311
IP address blocks:        138.122.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:95:d1:06:e4:36:ac:4e:09:f2:a3:3e:48:13:a4:15:74:ca:0a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:01 2023 GMT
            Not After : Sep  6 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:fd:27:59:eb:f8:bd:09:c0:70:2b:73:d5:
                    2a:e2:52:19:f6:45:eb:af:9b:66:29:4e:bd:81:5f:
                    32:56:ca:30:cb:2d:d7:c3:a0:a6:59:ec:e9:2c:48:
                    11:14:16:a5:3c:d8:98:b6:25:0e:6d:8d:76:51:fb:
                    79:af:58:f1:e1:4c:ef:a6:32:3d:a8:ef:66:18:55:
                    d1:f2:e3:c3:da:00:6b:64:7c:f3:0c:ef:03:76:ec:
                    41:c2:5c:ae:bb:23:c1:90:42:7d:db:98:ea:5a:76:
                    b7:ad:9f:ec:bb:fa:83:a5:05:f5:bf:b2:b8:69:26:
                    23:f7:0a:9c:a8:29:09:97:cf:69:03:2a:7b:2b:b0:
                    81:ab:bb:fe:f1:56:d2:e6:af:3e:36:3b:9c:32:68:
                    8c:87:20:aa:03:f9:27:5a:58:f7:2f:f9:55:76:94:
                    c5:0d:41:a8:b2:a0:d7:0f:66:1e:cc:70:a7:4b:06:
                    87:3f:e5:e2:66:99:c8:19:79:bc:28:b8:50:21:64:
                    f0:b9:5f:80:fd:b5:bc:0a:93:ee:ee:48:78:34:cd:
                    e0:e9:23:66:02:f7:6c:66:a6:1c:40:50:2a:ad:24:
                    e0:db:64:50:6f:17:85:5a:72:a2:59:03:77:6e:d7:
                    27:2b:34:3c:f3:c9:fa:72:54:67:60:e6:6d:e0:03:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2C:22:D2:36:F0:E7:AD:12:0C:05:62:D5:B3:C7:71:30:7F:F8:BF
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32322d3232203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:14:e4:cd:08:45:04:97:dd:ee:fa:56:67:8b:03:ca:b6:
         df:2b:b8:77:28:bb:b3:a3:bb:75:6f:de:4f:57:c5:d6:3b:3c:
         70:52:47:b7:ab:ad:89:5c:d9:48:8a:6f:7b:5e:a8:94:bc:4c:
         61:1e:1e:08:ca:bf:f6:d4:8e:8a:38:62:23:28:0e:fd:c1:b9:
         61:ae:1e:10:20:84:20:6d:e1:9e:48:71:7e:7c:96:a8:c1:61:
         1d:0f:07:97:22:34:8e:0a:23:72:ef:4d:ab:4e:56:e3:70:67:
         0f:3b:99:fe:f2:b1:73:26:c4:b2:18:6e:16:2c:da:63:8e:f6:
         73:d3:11:21:66:77:a0:e9:87:8a:4a:31:44:7b:b8:a9:4c:c9:
         19:fc:73:56:d5:7f:19:aa:8d:0e:e5:68:3d:1c:d1:be:d8:71:
         49:24:29:68:e4:d9:e0:46:a0:67:15:21:8a:5e:7d:b4:3a:84:
         f3:35:ef:bc:ca:f0:a0:00:2a:68:be:02:d7:cd:47:07:6c:c6:
         ed:84:a3:1a:f9:27:45:22:0a:d2:3f:86:20:e0:1b:20:7f:60:
         12:69:a1:ff:3c:b6:5e:22:b8:ab:bc:ee:ab:7e:0b:07:38:a9:
         33:d8:43:70:a6:82:66:f9:a6:3a:9e:5d:5e:3f:8e:f1:35:6c:
         64:e8:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org