Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa
File:                     3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa (raw, json)
Hash identifier:          wzk7b6zX3PTS9d/J0uYD6qSZR7aa/LY712L3N2dzUAU=
Subject key identifier:   8B:70:F5:4E:2B:91:40:14:D9:AB:82:94:3F:E8:B5:0B:4F:ED:0D:22
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       60DC8E22EB44376075D9E0A9BD47768287368ACA
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa
Signing time:             Tue 11 Jul 2023 11:41:19 +0000
ROA not before:           Tue 11 Jul 2023 11:36:19 +0000
ROA not after:            Tue 09 Jul 2024 11:41:19 +0000
asID:                     262518
IP address blocks:        138.122.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dc:8e:22:eb:44:37:60:75:d9:e0:a9:bd:47:76:82:87:36:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Jul 11 11:36:19 2023 GMT
            Not After : Jul  9 11:41:19 2024 GMT
        Subject: CN=8B70F54E2B914014D9AB82943FE8B50B4FED0D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:79:44:a6:92:d5:ae:32:a6:bf:1e:92:4e:
                    c8:0d:dd:e5:dc:dc:e6:ab:b9:cc:f2:a9:05:6c:e3:
                    4f:58:79:5d:a7:7e:be:3f:a6:10:db:e1:9d:25:b6:
                    e8:67:c1:b0:50:c5:c4:83:b2:d5:50:cd:d7:15:d5:
                    bd:52:d0:e5:a7:8c:a9:64:09:a0:30:d0:f0:ef:59:
                    78:c5:c9:e6:cd:8d:06:f9:94:5c:8f:49:d0:90:95:
                    02:70:f1:d8:db:f8:bb:b7:e6:9a:8b:86:e8:3d:14:
                    27:8e:c2:a2:0c:11:ed:ae:ec:a0:69:9b:6e:ee:ae:
                    db:40:98:95:2a:00:9b:9f:e0:83:e7:57:84:c4:e6:
                    16:64:6d:81:aa:2d:f6:0b:a8:ac:a5:54:97:31:c1:
                    92:53:55:5c:cb:2a:82:35:14:fd:c0:2a:99:02:12:
                    d6:12:b0:6f:cd:bf:77:47:08:11:71:6f:4d:1d:0c:
                    fc:7d:35:89:eb:33:11:c3:70:4c:42:e3:7c:67:cd:
                    86:68:b5:00:10:be:31:3e:40:8c:22:bb:4b:94:e6:
                    10:de:bb:43:bd:9b:6e:ef:7f:7e:09:7a:33:1a:e6:
                    36:bb:de:c2:2c:af:0b:a1:2b:f2:70:10:92:bc:a4:
                    46:18:bc:79:60:3b:1c:31:1b:b3:82:61:90:e7:43:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:70:F5:4E:2B:91:40:14:D9:AB:82:94:3F:E8:B5:0B:4F:ED:0D:22
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:6c:af:e2:d3:ab:47:97:9f:10:37:47:3e:b4:03:a7:92:
         62:f5:c0:54:cf:ef:31:81:0b:86:89:05:a3:2a:9c:82:b2:7f:
         b8:48:2d:28:c7:0f:e8:24:87:78:e0:5a:6b:88:e5:4f:d9:b1:
         5e:9f:b0:aa:dd:ce:9a:33:4d:e6:4c:f4:3f:03:3f:e0:b1:91:
         a1:7f:37:a3:36:aa:25:07:4c:bc:79:43:5a:85:e6:9a:1d:77:
         a0:bf:42:f8:12:44:4b:0e:d2:6a:bb:8c:04:dd:fd:51:b0:f4:
         d4:88:ca:fe:46:57:78:58:9a:a8:f8:1e:29:89:a9:dd:55:00:
         dc:1d:e3:09:30:7f:b7:43:46:b3:16:68:5a:64:8d:a4:50:6d:
         24:b3:a6:49:22:46:e3:b6:59:75:1e:26:68:c9:47:82:c1:10:
         ba:d8:c0:b2:02:b0:ce:b2:c8:89:6d:48:b5:9a:e9:f6:50:89:
         ea:70:13:7f:29:2a:c5:4f:5b:52:c2:5e:a7:74:2a:41:86:90:
         81:81:67:89:22:a9:90:be:fc:fe:87:01:ba:41:68:f3:b2:ff:
         76:6e:8f:b0:f6:dc:3b:49:e3:e3:75:7a:19:12:54:1d:99:91:
         90:87:1c:06:f9:40:d6:b9:83:68:a4:12:79:c5:78:de:22:df:
         cc:6f:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org