Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          gdS4hI7U2/V3wRgAi3TudXseIr5V22VYCM+KlF0ry5Y=
Subject key identifier:   54:0C:9E:61:E1:1D:FA:26:07:FD:7B:20:3E:DA:D0:21:10:84:0A:41
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       7F25F650C39E771385D9C3905E6007D8C3421FDE
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 12:00:00 +0000
ROA not before:           Fri 08 Sep 2023 11:55:00 +0000
ROA not after:            Fri 06 Sep 2024 12:00:00 +0000
asID:                     264311
IP address blocks:        138.122.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:f6:50:c3:9e:77:13:85:d9:c3:90:5e:60:07:d8:c3:42:1f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 11:55:00 2023 GMT
            Not After : Sep  6 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:63:4c:6a:38:a3:a0:7f:f1:a5:60:08:56:
                    90:54:ab:84:0a:25:59:6d:7b:0b:4c:31:bd:a5:2b:
                    cd:8c:4a:49:41:bf:59:3b:57:fe:bd:26:b9:a6:10:
                    06:02:e7:05:a7:24:a9:fd:88:8e:69:9c:2e:a4:7d:
                    11:81:75:bf:26:66:a9:f3:d2:a9:03:a0:90:bf:9d:
                    26:c8:32:63:2f:a8:87:08:8b:90:08:37:e7:ec:b2:
                    12:2c:96:87:7b:78:3e:4d:dc:b4:b4:ae:5e:16:ff:
                    b2:cb:43:db:89:3e:da:df:20:ab:a3:00:4b:da:96:
                    04:c3:28:a1:d5:34:95:aa:e4:84:82:f8:e6:44:a3:
                    64:0a:1d:69:f7:3e:6a:1d:60:80:ae:3f:1e:a3:fa:
                    db:69:a5:3b:53:49:bb:67:3f:ef:78:d2:03:d4:c5:
                    7d:27:ae:e1:c2:9a:b9:dd:c1:85:7a:2f:bb:35:65:
                    f9:04:50:b6:52:0a:0d:1c:5a:44:7c:a6:51:f8:28:
                    b2:17:75:dc:18:e2:8c:cb:7a:b7:9c:19:85:2f:e8:
                    e1:d5:29:2c:de:7d:41:90:2a:af:f7:40:c3:24:3c:
                    1a:2f:24:b1:25:a7:f4:bc:bf:67:63:6d:8b:39:75:
                    eb:43:f9:f8:d1:10:75:89:09:ef:7d:fe:fe:a5:89:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:9E:61:E1:1D:FA:26:07:FD:7B:20:3E:DA:D0:21:10:84:0A:41
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:cb:a2:36:44:2c:0d:0b:72:08:6f:a8:a8:52:6b:26:f1:
         d5:07:ae:56:6d:e2:a2:23:e0:b0:4c:7e:d8:24:15:68:c5:b9:
         e9:61:d9:55:18:7d:5f:9b:c7:3d:40:9a:b2:78:11:38:ce:38:
         e5:06:d5:0d:e5:41:90:e2:31:00:04:3a:c3:43:c7:c7:54:5f:
         79:50:8f:bf:f1:55:d5:04:a8:00:b3:1a:c9:92:c0:13:0a:4e:
         e4:df:35:4d:ab:a0:3c:ff:c0:03:42:d1:11:98:8f:e3:6a:e5:
         bf:f8:19:d6:94:e3:09:a9:d8:3f:64:66:49:4f:f9:e5:90:e2:
         cb:49:41:00:84:bd:55:0c:6a:c6:5d:d6:7c:c9:a3:80:5d:61:
         d9:2c:22:22:ef:bd:5d:b1:3e:ab:2c:15:b2:fb:c0:ce:71:e3:
         d6:c3:7d:48:06:a0:9d:dc:08:00:1a:fc:2e:31:c0:ee:59:1c:
         8f:e4:25:a3:c2:86:d2:51:c2:00:d9:67:f1:c1:f7:b9:3e:cb:
         67:1e:ec:fc:10:da:f5:58:1c:14:fd:a7:bb:19:1e:57:d9:e2:
         48:97:d3:04:30:c1:cf:f6:ad:0e:59:28:76:b6:e2:da:da:ed:
         40:d9:a1:07:6e:9c:23:6e:19:54:20:5a:c8:1b:e6:f1:46:66:
         59:78:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org