Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34322e302f32332d3233203d3e20323634323539.roa
File:                     3133382e3131382e34322e302f32332d3233203d3e20323634323539.roa (raw, json)
Hash identifier:          PK9DjYCCkeE7AdbcUV4znChfnz7aWpeaCvYJt6NVJtc=
Subject key identifier:   83:A7:EF:09:51:67:2E:15:66:13:0C:14:EA:71:81:5F:36:9D:85:9F
Certificate issuer:       /CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
Certificate serial:       4C6B5E38070871B243810DA5B9584E1F33A4714A
Authority key identifier: ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34322e302f32332d3233203d3e20323634323539.roa
Signing time:             Tue 20 Feb 2024 18:42:26 +0000
ROA not before:           Tue 20 Feb 2024 18:37:26 +0000
ROA not after:            Tue 18 Feb 2025 18:42:26 +0000
asID:                     264259
IP address blocks:        138.118.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:5e:38:07:08:71:b2:43:81:0d:a5:b9:58:4e:1f:33:a4:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBEBB97A2E0B31B286277642BAC47B714C7BAE8
        Validity
            Not Before: Feb 20 18:37:26 2024 GMT
            Not After : Feb 18 18:42:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:78:86:32:1b:03:2e:fe:68:2b:2a:56:d5:
                    6d:dd:9d:ee:ec:51:71:e9:1e:06:e3:47:b2:41:44:
                    c0:05:d1:04:48:ab:b3:8a:48:48:1c:b0:6f:0c:91:
                    44:c4:a4:3c:13:55:1e:d3:6a:2d:13:5e:63:9c:1d:
                    3c:5b:30:6b:03:a8:f9:b3:e8:e7:97:be:90:e9:e6:
                    a8:69:5e:99:97:2b:ef:ed:fa:8b:36:2e:f1:26:0a:
                    57:eb:a1:42:52:50:16:f2:2d:1b:d1:47:2b:c9:06:
                    d1:c9:48:96:48:06:b3:cd:ba:79:6d:7c:99:f5:3d:
                    78:db:d8:12:e5:21:b3:ec:a8:15:1f:39:72:90:d7:
                    3d:c4:2d:50:c5:55:d8:b5:3b:af:09:9a:b0:94:83:
                    f7:32:9c:13:78:32:e9:51:10:10:50:91:cb:9e:b9:
                    59:da:a0:61:bb:c9:d4:f7:8e:be:47:d9:18:22:76:
                    8d:63:49:31:a4:24:49:05:8a:d1:1f:11:bf:a1:75:
                    e0:2e:40:f4:d2:14:b8:40:55:a1:05:66:2e:6f:af:
                    14:ef:be:44:c7:c7:a4:db:11:f0:e1:d1:6f:9a:9e:
                    a2:b4:80:40:03:fd:0a:18:52:23:dc:8d:d3:60:4a:
                    0b:d6:4f:36:77:80:25:a3:89:11:67:62:a3:bd:61:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:EF:09:51:67:2E:15:66:13:0C:14:EA:71:81:5F:36:9D:85:9F
            X509v3 Authority Key Identifier:
                keyid:ED:BE:BB:97:A2:E0:B3:1B:28:62:77:64:2B:AC:47:B7:14:C7:BA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EDBEBB97A2E0B31B286277642BAC47B714C7BAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34322e302f32332d3233203d3e20323634323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:cf:f9:65:31:6e:52:29:bd:28:56:48:40:b0:cc:b5:21:
         61:34:94:3b:9c:00:ed:46:ea:f3:c4:0d:49:39:be:24:70:62:
         a9:8a:a6:9b:f7:14:44:12:48:51:3e:f6:fd:64:fb:ba:d6:22:
         d3:1a:b4:18:e4:51:81:60:2d:6d:97:75:07:29:5a:f8:a4:76:
         25:f4:f5:f0:5b:2f:44:d1:f0:8d:f8:f8:c0:98:29:73:3a:49:
         18:c7:f2:90:c1:70:d4:da:c1:6b:4a:e7:d0:5f:9f:51:1c:b4:
         8a:20:88:27:f5:af:f2:8f:32:30:47:a2:ca:27:dd:9d:27:e3:
         cc:67:7a:e4:fa:c9:21:33:54:04:dd:a2:4f:ad:74:a2:7b:c3:
         95:53:b3:45:23:05:4e:8d:d9:fb:9b:70:04:a1:53:4a:50:dd:
         9a:1e:6a:78:7b:40:b6:70:fa:56:90:d5:1f:83:c3:95:01:6f:
         de:8e:e4:a9:ff:5f:f5:2d:0f:39:01:14:94:c8:dc:a7:08:a6:
         87:af:ed:bb:b3:24:de:2b:f4:0d:a0:7e:6e:0d:d3:61:6b:3f:
         23:93:13:33:24:78:bc:ec:9d:f5:41:3a:cf:38:60:19:50:6d:
         54:e0:88:55:ab:75:20:ca:5b:37:9b:c9:bf:86:70:dd:a4:29:
         e8:b1:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org