Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa
File:                     3133382e39392e3136382e302f32322d3234203d3e203631353832.roa (raw, json)
Hash identifier:          fKaAcsTor2H4zjUrvDRZKaq9uQGyEn9ZJ72+Nj1iycM=
Subject key identifier:   12:BF:A7:0C:47:2C:39:48:42:83:98:77:A5:C1:1D:DB:6C:7B:00:BF
Certificate issuer:       /CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
Certificate serial:       3C080E3EC3D240B18FAEA4DF01B0F8EE06B84F55
Authority key identifier: 2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa
Signing time:             Thu 04 May 2023 17:08:00 +0000
ROA not before:           Thu 04 May 2023 17:03:00 +0000
ROA not after:            Thu 02 May 2024 17:08:00 +0000
asID:                     61582
IP address blocks:        138.99.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:08:0e:3e:c3:d2:40:b1:8f:ae:a4:df:01:b0:f8:ee:06:b8:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
        Validity
            Not Before: May  4 17:03:00 2023 GMT
            Not After : May  2 17:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:3b:fc:f5:7b:99:e9:17:d7:b5:de:49:63:
                    28:60:f4:0e:b8:5b:32:67:91:e1:30:9f:c1:95:bc:
                    13:91:17:5c:fb:8d:6a:bd:b6:74:41:b9:13:dd:a4:
                    73:eb:66:49:66:22:44:3a:7b:1a:4b:c6:cb:9d:8e:
                    5f:81:b7:4e:f1:49:4c:85:ae:44:2f:5a:25:cf:a2:
                    2f:ed:db:1c:95:2a:01:57:64:4a:51:c1:bb:cc:7a:
                    c5:0c:43:0f:b9:e4:2a:51:ed:9b:cf:96:9d:1e:3d:
                    34:c8:f6:16:87:04:58:a5:82:bc:0e:b0:f7:4a:63:
                    11:e0:eb:be:bc:45:2d:d0:fa:da:88:0e:2d:c4:e9:
                    84:bc:3e:17:21:f9:cb:dd:ed:43:ad:2b:72:ac:62:
                    f2:d6:7e:0a:a5:e6:da:e1:70:e1:ee:1a:56:17:67:
                    f3:8f:bd:df:35:5b:76:fe:f7:91:d7:89:27:b8:fa:
                    81:58:cf:7a:32:68:4c:58:23:8c:35:27:92:f2:87:
                    8a:d5:ad:25:5d:54:cd:22:10:3a:50:02:31:9f:6f:
                    c0:73:b6:2f:91:38:52:18:a4:e0:e2:f8:e4:fc:6f:
                    e2:70:ba:52:a2:87:74:03:11:91:0f:0d:37:1f:71:
                    e3:8f:56:9e:5a:1b:7e:75:b0:9d:87:59:47:63:ac:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:A7:0C:47:2C:39:48:42:83:98:77:A5:C1:1D:DB:6C:7B:00:BF
            X509v3 Authority Key Identifier:
                keyid:2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/3133382e39392e3136382e302f32322d3234203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:aa:16:0a:1e:dc:44:d4:18:63:12:f9:73:bf:86:50:21:39:
         ee:26:34:37:c4:a1:9e:5e:69:a2:e6:b4:8c:0c:78:c3:bb:c2:
         54:9e:f2:5a:75:cc:2e:7b:02:bd:9c:5c:d9:82:c0:71:b7:c1:
         e1:8d:bb:1a:26:7f:86:53:9c:0c:32:97:b3:47:88:de:a0:a3:
         8f:1c:07:ce:e9:0e:92:3d:71:ef:69:38:34:ac:9b:9a:1b:6f:
         87:3d:9f:9d:82:55:5e:68:ea:6a:e6:a6:3f:b2:43:31:ba:9a:
         0f:31:f8:a5:1d:0b:07:2f:ad:5d:93:fb:46:b8:43:68:f4:b0:
         c1:3b:94:36:26:c6:61:af:30:9a:f6:50:56:f1:05:80:be:7a:
         09:c0:93:e5:70:dd:15:27:e9:cd:61:b7:e5:85:e3:c0:a6:cc:
         18:0a:d9:0f:f1:33:d3:77:d7:7b:01:db:e1:44:6d:36:2f:ff:
         3a:ec:e5:60:c6:4f:b0:d1:53:bc:f5:0e:2d:aa:4b:ef:35:88:
         e8:fd:4e:ee:1d:78:c4:10:6e:30:14:8e:2d:06:a5:28:18:0f:
         7e:43:e1:bf:bb:2b:61:32:32:c8:29:e6:89:53:04:28:1c:e5:
         da:bc:56:e1:84:73:b1:34:46:3a:84:63:22:09:b5:c3:78:b5:
         7f:96:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org