Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          SsiMSOywcOWmbu59qCHiMnrpadKSybfv1GBlZzXV+u0=
Subject key identifier:   94:32:CF:95:20:61:41:74:B0:F4:C8:1E:4E:08:A1:7D:EF:B7:CD:A5
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       321206EDB9153BC6522CA8E3CA05DC19F20523D5
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa
Signing time:             Thu 04 Jan 2024 19:26:26 +0000
ROA not before:           Thu 04 Jan 2024 19:21:26 +0000
ROA not after:            Thu 02 Jan 2025 19:26:26 +0000
asID:                     262393
IP address blocks:        138.121.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:12:06:ed:b9:15:3b:c6:52:2c:a8:e3:ca:05:dc:19:f2:05:23:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  4 19:21:26 2024 GMT
            Not After : Jan  2 19:26:26 2025 GMT
        Subject: CN=9432CF9520614174B0F4C81E4E08A17DEFB7CDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:23:d7:92:b3:d0:29:84:bf:10:48:42:f7:
                    06:e4:c4:a1:35:1a:2e:71:36:2e:36:9a:ea:33:35:
                    22:d2:59:2c:00:f7:46:c8:b0:ff:55:29:17:6e:f9:
                    5c:87:d9:74:b6:c0:c8:4f:ea:4d:a5:1f:fa:43:7c:
                    a0:c7:33:19:32:d6:d8:07:be:89:96:6b:6f:91:55:
                    4d:54:b3:9f:55:31:f5:95:1e:ee:c9:8d:b1:5f:9b:
                    cc:54:42:95:0b:61:ff:14:7e:14:aa:8e:4a:2d:2f:
                    31:87:fc:11:d7:ce:12:31:d1:78:2b:8d:13:a9:49:
                    e5:a4:91:9c:16:77:43:28:d5:69:98:3d:8e:bd:f0:
                    14:25:cd:c9:a1:80:59:12:80:e9:b5:aa:c0:e3:05:
                    1d:3d:8a:a7:f5:37:a8:e9:5c:1a:e1:3e:39:56:8e:
                    ed:4a:e1:aa:be:2a:f8:0f:75:26:6b:f5:77:ff:9d:
                    47:32:e5:fe:d4:1c:74:1b:e7:bd:c1:c2:c8:7c:3b:
                    49:89:1d:e0:a9:50:39:b9:88:a4:50:02:35:98:36:
                    ca:26:69:39:dc:9f:d7:27:1a:93:85:d2:25:76:09:
                    d4:78:6c:8d:bd:38:ab:82:10:ae:4d:b9:c4:8a:06:
                    e6:33:75:12:28:bb:af:cc:ff:63:c2:d6:ea:97:cf:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:32:CF:95:20:61:41:74:B0:F4:C8:1E:4E:08:A1:7D:EF:B7:CD:A5
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:35:24:e7:18:de:8c:21:f7:d5:85:c2:85:85:13:e0:99:c9:
         d9:12:8b:35:64:60:36:3b:99:18:b5:af:89:fc:0b:78:16:83:
         5c:0a:2c:db:e8:d9:d4:13:fe:7f:c1:61:34:c3:c2:c9:59:db:
         e9:3e:40:f1:08:7a:24:80:7d:5a:6f:1b:94:d1:80:09:c8:a7:
         a0:32:60:36:dd:4b:be:32:bc:6a:8f:c7:6a:30:8f:92:8b:11:
         e1:5f:2d:ef:b3:14:2e:00:96:ee:e1:0d:24:0a:87:e6:ca:37:
         f0:10:6c:35:32:28:c6:80:db:07:f5:32:3d:5a:3c:71:a9:c9:
         c7:2c:00:ac:31:27:3f:f7:72:51:6c:a4:32:14:69:3b:32:56:
         be:79:1b:0a:86:28:24:62:4b:3f:27:e6:69:ce:16:61:29:dc:
         bf:66:c5:14:13:d7:36:5e:26:33:97:14:7c:a2:a9:28:0f:90:
         d6:95:2f:11:33:9b:da:92:af:1b:c7:68:ea:df:05:38:92:72:
         24:ba:36:18:77:c4:a3:60:17:27:38:3c:11:4f:19:dc:1a:6c:
         c4:6d:dd:75:81:b1:8d:87:90:79:08:45:85:0c:f3:0d:e8:5c:
         42:0e:80:2a:cc:d9:ec:e8:35:8d:c7:b4:a5:87:fe:8f:40:14:
         0b:9f:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org