Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa
File:                     3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          jgaUjYJVE+GSDLj3rT5R5mNAPiuCgmpduygEwTcyk+I=
Subject key identifier:   6D:2A:AC:FB:A7:34:13:FD:70:45:11:D2:4A:73:8D:B3:A6:F6:77:B9
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       52F434430A4614298369EED43AA50F9246AA8740
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:40 +0000
ROA not before:           Fri 23 Jun 2023 19:01:40 +0000
ROA not after:            Fri 21 Jun 2024 19:06:40 +0000
asID:                     264589
IP address blocks:        138.36.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f4:34:43:0a:46:14:29:83:69:ee:d4:3a:a5:0f:92:46:aa:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:40 2023 GMT
            Not After : Jun 21 19:06:40 2024 GMT
        Subject: CN=6D2AACFBA73413FD704511D24A738DB3A6F677B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:9b:2f:39:c2:e0:e4:f8:5e:b8:ac:b9:f3:
                    36:a5:58:84:29:6f:e0:17:82:9e:d2:20:64:b1:1a:
                    21:ff:e4:cf:9c:ea:10:a1:05:ec:40:2f:bf:5b:53:
                    f3:a4:26:6f:06:20:f9:98:1d:76:46:0f:7e:f9:0c:
                    e2:6a:cc:a3:92:00:d9:1a:d1:93:9c:e4:12:a2:88:
                    e6:c9:b8:4a:d5:38:ff:77:ac:23:50:56:b8:70:c2:
                    a3:68:af:70:49:4e:29:88:38:78:ba:06:b6:34:39:
                    f3:de:f6:d3:5a:d3:c2:da:58:c9:f1:c3:e0:c1:0a:
                    27:32:fb:4a:87:57:ec:2b:bd:e6:ca:23:34:0b:62:
                    08:00:9a:a4:a5:47:ab:60:1c:8f:f9:4b:19:28:b5:
                    f4:25:f9:7b:78:c6:b6:19:dd:34:a6:eb:07:45:ed:
                    fd:38:55:53:70:e0:b0:d0:aa:ff:71:2a:83:e7:0d:
                    06:1b:e2:ba:0f:ba:10:b1:a9:c8:ac:41:b5:81:4c:
                    66:d0:08:16:0f:09:5e:8a:c9:5b:42:af:b3:a2:75:
                    a3:53:e6:a1:0d:35:dc:37:50:33:8f:de:9a:61:09:
                    3a:31:25:7b:63:c4:02:f2:70:20:00:4b:cd:dd:93:
                    b9:0a:7a:3d:55:80:81:aa:e5:6c:0b:af:9c:af:82:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:AC:FB:A7:34:13:FD:70:45:11:D2:4A:73:8D:B3:A6:F6:77:B9
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:03:73:e1:71:96:3e:fc:e2:0b:f8:d2:06:b8:2e:eb:df:
         15:d3:91:c1:70:20:fc:d2:b0:53:5f:49:fa:15:2e:01:05:2c:
         6b:68:65:26:22:e1:94:36:87:76:ca:04:8b:57:cf:52:98:72:
         70:00:75:98:f1:5c:27:8a:dd:7e:ab:c9:fc:c4:6c:e8:f7:88:
         f0:31:19:dc:30:3b:69:5b:e0:5a:e6:03:e6:fa:8d:d5:e8:04:
         60:5d:4e:61:74:6f:4f:13:f8:1e:89:85:4d:59:60:9c:71:61:
         17:93:4a:73:17:14:98:68:f4:94:a9:13:de:95:75:74:27:55:
         0b:3b:90:ed:36:9f:44:fb:49:4c:eb:b0:1b:2b:7b:19:23:03:
         78:2c:26:ee:46:ae:51:ca:00:9c:fe:f8:16:3d:02:ab:67:58:
         1f:fb:e6:8c:10:94:5d:7f:9e:8b:74:4b:a5:2a:96:94:2f:99:
         e1:89:53:fe:fe:53:d7:fc:49:35:e8:c9:4d:ac:cb:bd:ca:81:
         a0:22:df:80:4a:2a:93:b2:11:19:74:ab:fb:14:1b:52:fa:2c:
         da:b5:d7:10:53:31:14:8a:9a:59:03:24:90:a3:51:a4:18:23:
         26:32:4b:03:dd:ca:0e:22:2e:e2:cf:75:4d:46:d1:87:00:01:
         c3:44:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org