Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3234203d3e203532373331.roa
File:                     3133382e3235352e3134302e302f32322d3234203d3e203532373331.roa (raw, json)
Hash identifier:          84vtzAl4AkKdtw3tn7sPaQ4sq1ok250foePRS+C3d68=
Subject key identifier:   03:BE:D4:53:5D:1C:A4:AB:90:09:4C:5B:00:F4:FF:61:A1:F5:E8:68
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       60B6F7366CBA720400DCECD1AC133976E0DD4659
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3234203d3e203532373331.roa
Signing time:             Sat 11 Mar 2023 00:58:26 +0000
ROA not before:           Sat 11 Mar 2023 00:53:26 +0000
ROA not after:            Sat 09 Mar 2024 00:58:26 +0000
asID:                     52731
IP address blocks:        138.255.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b6:f7:36:6c:ba:72:04:00:dc:ec:d1:ac:13:39:76:e0:dd:46:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 00:53:26 2023 GMT
            Not After : Mar  9 00:58:26 2024 GMT
        Subject: CN=03BED4535D1CA4AB90094C5B00F4FF61A1F5E868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:02:79:37:3f:61:59:7b:b8:f9:d8:c2:20:
                    6d:aa:34:fc:aa:7f:89:27:79:5b:40:fb:2b:0d:d6:
                    9b:0a:ac:d5:9b:65:52:93:e5:4a:27:08:6f:89:07:
                    3b:1b:ed:3a:69:06:d3:0f:3c:9d:65:e2:48:f2:18:
                    84:88:c2:0b:49:7a:8b:ca:34:14:3b:ac:37:48:66:
                    0f:b7:38:99:72:2b:97:1a:90:29:98:a7:e3:62:de:
                    13:ec:85:8d:1c:6b:72:f3:36:06:3a:51:9c:74:52:
                    01:d6:18:ec:09:5e:57:2f:7b:32:3c:d0:1e:19:50:
                    31:b8:56:ea:c3:09:dc:1c:11:56:e3:b2:bf:b9:b6:
                    bd:69:0c:2d:30:cf:fc:16:13:bb:bd:fb:65:fa:7b:
                    7d:f4:a2:ee:a8:54:05:2b:50:3b:ad:36:6b:1f:63:
                    a7:c7:04:a3:07:e2:a5:0a:dc:e4:95:1d:0d:fe:5b:
                    f9:96:73:b6:73:e9:d5:44:23:6c:0c:85:36:2a:3f:
                    91:70:d3:8a:4e:19:64:be:4d:63:4b:de:28:64:47:
                    84:d0:5e:a2:fe:b5:56:52:53:0b:91:bd:15:7f:54:
                    1d:88:a5:e8:33:f9:e2:cc:01:9b:83:0e:0e:03:07:
                    85:49:4e:a1:69:09:c2:98:4f:84:c2:5a:31:13:a4:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:D4:53:5D:1C:A4:AB:90:09:4C:5B:00:F4:FF:61:A1:F5:E8:68
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/3133382e3235352e3134302e302f32322d3234203d3e203532373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:2e:a0:c6:92:17:70:a6:01:eb:24:2c:40:6c:e4:d5:7e:de:
         41:f8:45:08:05:e9:b7:35:09:b4:1a:f7:20:bf:b2:12:ce:d9:
         fb:a1:b0:1e:90:2c:30:9f:7d:15:62:0b:ee:91:2f:eb:bb:54:
         62:3f:d2:79:7f:a0:71:e6:7d:fb:09:b8:4f:27:c1:11:54:9f:
         15:d6:ec:bb:b4:3f:5f:c7:4b:12:e7:b2:54:0e:e5:31:4c:b1:
         cd:bc:be:15:4d:7d:54:9a:bb:6a:d5:39:9e:77:dd:0c:5b:35:
         fe:de:5c:0e:04:d3:5c:16:80:f3:0e:92:65:33:59:77:76:1f:
         67:ba:2c:3e:c9:e1:28:40:3c:a4:fb:aa:dc:df:74:05:b5:bb:
         94:a4:e7:eb:bd:bd:f5:b1:7d:36:b6:82:c7:80:43:59:22:6d:
         51:d3:48:c5:85:fe:41:e7:07:11:6c:e1:27:f4:e6:0a:5c:16:
         ea:fc:db:d9:41:28:85:70:53:b9:5c:28:e5:b3:f6:a0:fb:cf:
         2f:b3:ce:c7:b1:80:b9:dd:64:c6:af:9e:59:6f:bf:b8:1b:10:
         a1:95:ff:1d:de:65:b7:a5:16:e9:76:15:63:08:e3:e9:03:5e:
         e2:8b:06:d3:a3:93:cf:f8:f1:82:ab:fc:61:4e:33:4b:c3:12:
         4c:ae:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org