Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3232203d3e20323634313932.roa
File:                     3133382e39372e3135322e302f32322d3232203d3e20323634313932.roa (raw, json)
Hash identifier:          QxymX4OemuLajFM2q898+WwxHDBcfPErwlyOmshCJfs=
Subject key identifier:   A1:D1:3D:1C:0E:94:24:14:1E:B3:9B:05:80:39:58:CE:7A:E2:52:39
Certificate issuer:       /CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
Certificate serial:       65B7371BBBFCD9A325665C6A59B363482FB9524F
Authority key identifier: 08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3232203d3e20323634313932.roa
Signing time:             Sat 02 Mar 2024 16:03:22 +0000
ROA not before:           Sat 02 Mar 2024 15:58:22 +0000
ROA not after:            Sat 01 Mar 2025 16:03:22 +0000
asID:                     264192
IP address blocks:        138.97.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b7:37:1b:bb:fc:d9:a3:25:66:5c:6a:59:b3:63:48:2f:b9:52:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
        Validity
            Not Before: Mar  2 15:58:22 2024 GMT
            Not After : Mar  1 16:03:22 2025 GMT
        Subject: CN=A1D13D1C0E9424141EB39B05803958CE7AE25239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:fd:25:06:3a:32:3f:76:fb:7a:ec:14:ac:
                    27:1b:c2:4e:c0:e7:0d:3b:28:11:cd:22:e2:ae:e4:
                    be:2d:4c:cc:fb:3d:d2:f4:10:6a:bf:30:1a:94:c1:
                    a6:62:26:7c:16:65:ea:ff:c3:9f:1f:88:f9:7a:5e:
                    ec:14:ac:78:d9:bb:d4:52:c6:03:0c:1d:fd:60:3e:
                    29:73:37:97:b4:8f:99:14:d6:d5:cb:95:c9:be:6e:
                    44:9e:e7:60:0f:8e:0f:2e:95:1d:19:dc:60:23:0b:
                    bc:ab:8e:02:99:f2:d8:82:96:6f:9e:6c:cb:9a:d5:
                    75:33:78:22:d4:1b:d4:bc:1d:9b:80:d9:db:1b:37:
                    7d:70:91:d6:7f:38:13:83:85:1b:c4:ed:ef:b8:b4:
                    93:2d:b1:ba:62:57:30:2e:89:fb:da:4c:e3:38:43:
                    f4:fe:2f:01:cb:b6:c4:01:33:1e:b2:bf:4a:80:75:
                    c2:3d:be:99:29:e9:d1:cd:b7:df:84:3b:83:cb:77:
                    e7:86:59:ef:d1:a4:b6:9b:63:58:42:55:3d:b2:6a:
                    2b:eb:86:6f:5a:bb:eb:7e:8c:5c:97:40:ee:e4:b6:
                    3f:4e:c1:30:fd:62:95:16:dc:fd:35:f3:e7:4e:de:
                    7f:13:ee:4d:0e:0b:a9:81:2d:fd:a2:b8:7b:05:7b:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:3D:1C:0E:94:24:14:1E:B3:9B:05:80:39:58:CE:7A:E2:52:39
            X509v3 Authority Key Identifier:
                keyid:08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3232203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:b4:a9:73:36:ca:7f:b0:14:83:a2:ec:bb:55:c3:7e:8a:
         d6:01:a7:f3:00:1d:fc:68:1f:14:24:30:21:b5:45:b8:35:75:
         4e:45:64:de:65:be:77:fb:80:54:85:94:93:ee:53:3d:46:c6:
         74:bc:7f:c1:44:50:25:ad:44:90:da:e9:3a:25:30:c1:39:63:
         1c:63:db:ed:4e:3b:1e:c0:9a:43:01:a9:4f:12:88:92:00:e3:
         34:2e:6d:00:c7:26:87:40:e4:97:79:8e:fc:f5:bd:d4:28:ea:
         31:07:18:1a:e5:44:7e:c1:dc:c9:02:0c:e2:dc:88:47:4a:1c:
         09:04:1e:53:dd:64:2f:f5:ab:bd:5e:13:26:3e:8d:f4:01:40:
         3e:70:30:de:a5:7e:64:f6:b5:cd:a9:fd:95:94:1d:8d:00:b5:
         2d:15:ef:01:3b:b0:af:98:df:0a:f6:6c:91:45:96:65:12:d8:
         7c:5a:24:7b:b8:70:6d:41:59:ec:08:3d:6c:61:37:b5:16:65:
         39:0e:cf:d5:c4:71:e1:1e:93:0f:d4:1e:0a:06:00:3d:e8:07:
         20:db:83:f6:53:b9:12:23:79:84:a6:7b:0c:ae:ed:16:db:2d:
         b0:91:b8:b6:10:5d:0b:1e:ba:0b:6c:0c:75:2d:ea:8e:57:53:
         4e:13:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org