Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32322d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          Pt4QMjPBzBVYfrIC/hWCum7sC7IQNT1ihXy8UvgMCso=
Subject key identifier:   7F:61:AA:F2:69:FD:E9:38:BE:CA:5C:3D:EE:7D:AC:A9:F3:EF:81:40
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       683737C4356844A8097A24A5F15BBB8D605E145C
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:18 +0000
ROA not before:           Wed 10 Apr 2024 00:15:18 +0000
ROA not after:            Wed 09 Apr 2025 00:20:18 +0000
asID:                     264550
IP address blocks:        138.0.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:37:c4:35:68:44:a8:09:7a:24:a5:f1:5b:bb:8d:60:5e:14:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:15:18 2024 GMT
            Not After : Apr  9 00:20:18 2025 GMT
        Subject: CN=7F61AAF269FDE938BECA5C3DEE7DACA9F3EF8140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:ae:3e:a7:74:a2:2b:7b:e3:a6:1b:f8:46:
                    8e:6a:2b:06:25:86:ed:de:5e:07:3b:d0:a8:c4:65:
                    83:35:35:49:0c:bf:4d:63:23:3e:fc:94:06:0e:20:
                    8d:9e:d7:d4:2b:e0:36:62:2f:22:eb:ab:5e:2e:f7:
                    e7:31:9e:fc:4f:42:22:77:81:b7:ec:c6:43:39:7c:
                    fa:a5:86:42:58:67:c2:d1:b2:04:dd:f4:64:3d:8b:
                    80:72:49:17:a8:8b:a0:e9:cf:3b:d9:8e:ba:8f:bb:
                    53:cb:86:87:c1:9d:73:d8:b0:bc:a6:67:fa:7d:96:
                    8f:6c:57:98:7c:5a:8f:82:43:4d:66:c4:59:c5:2b:
                    3f:01:a5:35:a3:46:e4:e6:5d:57:4f:96:00:6c:ac:
                    1e:56:cc:fe:98:93:a0:99:bd:b2:1e:2e:b0:d2:8b:
                    4c:53:de:a1:c3:69:1c:67:20:65:27:3d:d0:77:54:
                    86:ca:d9:62:c1:77:f2:c1:5b:3e:69:80:fe:92:46:
                    2e:75:43:8f:a9:43:92:1f:20:41:31:f7:fa:27:70:
                    ee:f9:26:3a:c1:d8:cb:9d:0c:79:28:d4:0e:d8:e4:
                    90:d8:f1:7f:cc:96:02:c5:61:f9:18:de:38:5c:e3:
                    1c:14:40:7b:27:83:e9:c9:c0:e9:c4:6f:03:0d:3a:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:61:AA:F2:69:FD:E9:38:BE:CA:5C:3D:EE:7D:AC:A9:F3:EF:81:40
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/3133382e302e3133362e302f32322d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:3e:19:e7:a1:07:d8:bd:b9:5b:10:c9:a7:d7:61:d4:07:
         1b:9b:f0:0d:c1:e4:4c:d5:c5:f0:79:4d:fb:5d:26:83:05:d4:
         fe:b4:27:3d:94:38:0f:78:9f:3b:87:ef:b3:ac:51:04:71:8d:
         1f:77:d1:b3:f8:9c:ec:55:8a:ba:47:98:c3:b8:4a:e6:10:9f:
         41:3a:53:bd:a5:30:4d:f9:cb:9d:b4:61:f8:11:ab:23:5a:b8:
         bb:60:27:d8:5f:ff:fe:f4:c9:60:5d:4d:bf:9e:7c:2e:3b:6f:
         a2:3f:43:a3:6a:73:f4:42:f8:64:1f:65:de:07:c4:eb:51:66:
         0d:c1:3c:22:5a:e1:37:58:5e:ad:3d:27:84:7e:d3:13:1e:09:
         ee:81:53:06:c1:1d:88:87:c2:69:d4:3d:99:da:d5:2b:60:9d:
         de:a3:e3:81:f7:ce:9b:78:99:c6:b8:f2:ba:81:ea:40:39:0b:
         2f:e9:9f:5e:cb:bf:3c:d4:a4:44:18:16:e9:ea:d6:81:70:ba:
         cd:36:a7:7c:9c:3c:52:b8:d5:fb:fe:2c:26:90:fb:b7:1b:e0:
         c5:1b:84:20:93:c8:bf:74:04:8b:bf:49:9d:03:d9:08:3b:34:
         c4:9c:37:67:f1:e7:72:65:82:12:38:76:1d:57:63:7a:6b:4f:
         7e:57:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org