Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa (raw, json)
Hash identifier:          yvmaj8rbWGRFrNTcUKTA+bp3T7PvgJQp6Ol+AFA0w6w=
Subject key identifier:   38:04:7E:94:F7:6D:68:7D:FD:E0:7A:0A:A9:04:53:63:9D:F8:01:3C
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       5DF774C9CCE23F9773332C05CE04078B25FC49A9
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:03 +0000
ROA not before:           Fri 08 Sep 2023 12:55:03 +0000
ROA not after:            Fri 06 Sep 2024 13:00:03 +0000
asID:                     264311
IP address blocks:        138.122.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f7:74:c9:cc:e2:3f:97:73:33:2c:05:ce:04:07:8b:25:fc:49:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:03 2023 GMT
            Not After : Sep  6 13:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:99:7e:2b:9e:3b:5a:39:d4:43:f2:6c:f2:
                    f0:ad:35:af:ec:58:65:2f:97:f9:3c:db:db:6a:6b:
                    b9:eb:7e:40:b3:ec:ac:38:66:80:ac:23:bf:d8:d1:
                    2d:af:6c:d7:cf:45:8c:a0:6b:8b:77:ce:e8:39:c0:
                    f2:47:c9:09:ef:39:9e:80:ca:8b:a1:d2:59:75:be:
                    ba:93:6c:28:cc:49:a3:c3:67:b5:27:e1:00:17:f8:
                    f0:f5:a2:df:73:98:40:8d:eb:28:31:32:31:eb:bb:
                    aa:09:8d:f7:50:90:62:8d:ee:59:5f:26:ad:27:7e:
                    6e:ba:51:70:4b:97:5f:4b:85:4b:64:55:6c:97:a8:
                    d1:25:e1:67:f4:77:4c:a8:85:4d:1d:13:48:6f:e6:
                    ef:5e:26:49:da:09:e2:3b:af:47:99:f8:30:f5:12:
                    60:1e:62:aa:6e:ad:6d:2c:57:05:0b:a7:5b:dc:d3:
                    d8:59:09:92:37:ad:0a:91:eb:17:2f:49:75:66:46:
                    cb:15:98:18:5b:70:a2:66:46:65:fd:b2:1a:cf:ff:
                    ca:79:7f:da:97:8b:e3:0b:0a:0c:6c:f9:4c:ba:ad:
                    71:93:bf:8a:89:b9:c7:5e:a7:89:23:a2:f4:85:ae:
                    8e:f4:6d:4b:5e:17:a3:fe:47:0b:05:78:2f:f1:7a:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:7E:94:F7:6D:68:7D:FD:E0:7A:0A:A9:04:53:63:9D:F8:01:3C
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:68:8b:cd:82:d8:39:3c:99:34:b1:71:11:83:c2:3d:1f:5e:
         f7:51:30:3f:57:08:fa:b1:7a:68:b3:58:4f:16:b1:d0:8c:18:
         9f:d9:37:e8:06:e1:15:55:15:a6:60:da:4c:0b:e4:b9:55:b1:
         25:51:a0:02:46:42:dd:6b:60:72:ba:02:fc:af:76:3d:49:d9:
         3a:cb:70:f1:42:79:1b:da:29:f0:bf:45:7a:b8:38:74:a8:26:
         15:4b:85:b3:d5:61:b4:0b:ba:c0:32:3d:c2:0a:92:a0:0e:39:
         d9:9a:98:75:db:5a:26:b2:8f:68:f3:d5:a9:fd:4a:34:b6:f3:
         26:76:80:51:53:76:86:e7:da:50:9c:82:4e:b3:29:78:80:79:
         0c:ef:08:d4:3c:e8:63:b2:6a:3a:0f:76:53:c8:19:32:a4:85:
         a9:1b:23:f5:f4:22:ae:78:1a:e3:dd:8b:27:b9:c8:eb:2e:a4:
         59:78:4c:be:84:66:f4:a0:27:c1:5f:4b:8d:b6:98:96:1a:73:
         2a:2d:47:f9:57:84:1a:e8:09:49:37:34:0d:4a:7f:8a:98:d1:
         89:c5:fb:d3:9f:fe:0a:45:e9:48:0a:9a:28:3f:16:d6:91:13:
         50:67:3c:df:55:9c:b6:30:dd:76:64:27:08:a7:e4:32:26:cb:
         f4:77:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org