Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32332d3233203d3e20323634323036.roa
File:                     3133382e39372e3138322e302f32332d3233203d3e20323634323036.roa (raw, json)
Hash identifier:          9+sk9qAZzMHGHnf/WoiCcN2aJDMZF7OZ16mAKEOWHn8=
Subject key identifier:   18:97:67:7F:56:74:81:F8:A0:9C:B2:BC:FD:E8:AF:4B:1A:C0:37:58
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       496AF30F8ACC475350B678323C88852825F0E459
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32332d3233203d3e20323634323036.roa
Signing time:             Thu 29 Jun 2023 23:00:00 +0000
ROA not before:           Thu 29 Jun 2023 22:55:00 +0000
ROA not after:            Thu 27 Jun 2024 23:00:00 +0000
asID:                     264206
IP address blocks:        138.97.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6a:f3:0f:8a:cc:47:53:50:b6:78:32:3c:88:85:28:25:f0:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Jun 29 22:55:00 2023 GMT
            Not After : Jun 27 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:e4:33:f1:8a:66:74:90:5d:39:b3:e8:23:
                    9f:52:9b:1a:9f:eb:bd:cd:49:e5:a5:52:06:d8:f4:
                    61:be:1e:1b:bc:e0:dd:b6:7c:b0:9e:b3:73:e6:91:
                    7e:64:92:b2:2c:e1:70:51:d4:ca:7a:bc:91:c8:3a:
                    dd:e7:10:16:b7:70:03:d3:de:7e:38:38:ac:7e:79:
                    51:12:fd:d8:93:cf:e3:da:15:06:35:5c:96:bf:b5:
                    fd:d0:56:49:69:b8:ef:3c:3f:36:44:73:5d:55:c8:
                    b8:9c:48:e7:1b:dc:c1:f6:ba:0f:b9:6a:18:cf:8e:
                    c2:05:51:04:46:29:cf:e5:5d:58:23:b7:c6:a5:a0:
                    6f:49:83:45:12:ed:9d:ad:3d:b8:24:be:4f:a2:7d:
                    8c:99:1d:6d:f3:0b:e0:22:5c:cb:ac:d0:66:3a:f6:
                    c6:18:37:c3:a0:9a:4f:7d:0a:5f:29:aa:fb:a8:32:
                    ae:78:75:ac:0a:ac:11:55:4a:d7:4a:80:a9:e4:8f:
                    11:1d:c6:57:3a:d4:d0:78:1a:47:86:04:59:d0:f8:
                    78:2b:ce:c2:2a:36:6d:ac:75:a1:d8:a1:27:33:84:
                    e6:24:50:84:6f:ed:3a:bb:29:f3:2c:88:51:a0:99:
                    92:3e:11:44:41:65:89:32:ad:cb:cd:9c:44:4e:36:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:67:7F:56:74:81:F8:A0:9C:B2:BC:FD:E8:AF:4B:1A:C0:37:58
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32332d3233203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:b7:fd:0d:d6:2d:f4:7a:f2:2a:3e:df:ea:09:60:39:2c:
         17:32:41:82:fb:21:6b:8a:c9:75:f6:1d:16:d8:47:16:fe:75:
         c3:f4:4a:a8:f2:1b:b3:87:8a:21:65:86:6a:47:a8:f5:a8:1f:
         20:bc:6e:3a:d5:e1:78:90:fb:e8:e8:2f:88:5a:e8:e5:99:8e:
         53:f6:9a:2d:a6:a8:1c:81:f0:c8:71:a3:1c:47:c9:25:4b:1e:
         25:4d:ee:b1:ba:92:e5:e6:be:0a:53:1d:d2:9b:f9:93:df:92:
         c9:61:bc:c5:7e:5c:08:0f:a6:17:32:86:18:9d:3d:f3:eb:52:
         ff:1f:a0:78:d6:eb:31:85:65:b8:b9:82:e1:f1:5c:27:df:9e:
         59:4a:4b:3c:f4:23:38:03:80:9b:5e:71:c4:a9:19:39:9c:0c:
         f9:93:c9:6e:6e:c4:21:2d:b0:ac:54:08:7f:74:10:50:17:c4:
         68:3d:d0:dd:2d:d9:ee:6a:45:61:52:00:df:e2:4e:76:b6:24:
         5e:21:cd:3e:56:ed:0b:9b:42:8a:d1:f6:e6:04:e5:72:53:af:
         4d:b6:2c:7b:9f:2f:3a:c2:bd:9d:8b:52:48:cb:0e:8b:e6:d5:
         a0:3e:ad:53:15:b8:2e:ca:46:52:a6:0b:48:69:6c:b8:28:e4:
         43:51:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org