Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa
File:                     3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa (raw, json)
Hash identifier:          b/K+QA7+IMGBkOKYVUBfREgKqdrMlTaGzjhGBi5DlOU=
Subject key identifier:   CE:3C:41:5F:AB:78:03:90:A3:13:98:17:8A:F9:2B:D3:D7:73:2F:56
Certificate issuer:       /CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
Certificate serial:       60EF416B0E46E439246CA7CC015E63F1B93F2E98
Authority key identifier: 08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa
Signing time:             Mon 01 Apr 2024 21:33:12 +0000
ROA not before:           Mon 01 Apr 2024 21:28:12 +0000
ROA not after:            Mon 31 Mar 2025 21:33:12 +0000
asID:                     264192
IP address blocks:        138.97.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ef:41:6b:0e:46:e4:39:24:6c:a7:cc:01:5e:63:f1:b9:3f:2e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
        Validity
            Not Before: Apr  1 21:28:12 2024 GMT
            Not After : Mar 31 21:33:12 2025 GMT
        Subject: CN=CE3C415FAB780390A31398178AF92BD3D7732F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:0d:11:f1:da:73:6d:07:78:a0:e5:8e:51:
                    81:03:78:13:1b:26:58:3a:78:d5:2b:99:9a:c1:58:
                    9d:27:15:27:2e:62:82:24:02:4d:a1:b2:3a:59:52:
                    7d:bc:49:60:29:99:21:1d:ca:88:c7:c8:df:ff:48:
                    f8:5a:6c:77:51:19:e0:7a:e5:a9:f7:51:b6:f0:cc:
                    a5:67:6f:00:ea:ae:d1:30:0c:d6:41:fa:3c:d0:17:
                    f7:1e:6b:f0:ea:f8:6d:4a:90:02:95:87:d2:aa:5b:
                    c9:e2:80:d1:78:53:b4:89:b3:2f:e6:9c:21:81:2d:
                    61:07:47:bb:ed:f0:10:e4:01:a8:f9:6b:ba:97:35:
                    ef:4b:82:be:91:d1:ed:5b:bf:22:60:e7:1a:8c:72:
                    7c:72:23:b6:3c:f0:04:f2:f5:9d:9f:16:14:05:5c:
                    bc:ab:7f:19:d9:53:2b:ce:25:da:2c:75:56:4d:d6:
                    ae:06:ce:c2:07:1f:63:44:17:f0:25:fa:37:b9:ea:
                    cd:85:af:1f:88:d5:1d:dc:27:27:b1:4e:95:0e:79:
                    e2:7a:30:49:a8:ca:c9:00:de:2e:44:ea:44:52:0a:
                    12:9c:50:a6:54:a9:5f:5f:62:62:bf:8a:20:0b:ab:
                    31:ac:1c:91:68:b2:74:c1:4a:ce:2c:e5:7c:0a:9a:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:41:5F:AB:78:03:90:A3:13:98:17:8A:F9:2B:D3:D7:73:2F:56
            X509v3 Authority Key Identifier:
                keyid:08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:57:83:01:74:e6:86:55:e8:93:f0:40:c1:91:47:97:de:
         de:e5:f3:ed:29:1e:8a:6f:08:6f:9d:f4:35:45:3a:7c:40:6d:
         e8:c6:d9:3e:35:14:16:2c:7e:42:21:4c:05:4d:bc:a3:f1:e5:
         aa:cd:b9:19:7d:a7:68:b1:ba:84:8d:72:13:02:e4:2d:ac:ff:
         7f:36:a0:22:22:9d:39:74:fb:f7:d7:63:6f:3b:2a:91:5f:3d:
         fa:69:d0:c5:fe:eb:bf:6c:73:c0:bf:90:3c:4a:30:0a:56:7d:
         bf:a5:45:7d:7e:09:40:b3:7e:3d:40:64:2c:d8:5f:00:0c:0c:
         9c:0b:1b:5d:43:66:d4:ad:c8:f4:96:42:e1:3b:f2:dd:a8:63:
         9d:05:3e:73:01:d9:f4:96:b9:eb:81:48:e8:25:57:de:54:83:
         af:7b:ff:6a:2c:bc:83:d3:1b:e4:20:e3:a8:95:c3:a1:53:81:
         4b:a2:c5:fd:9f:12:43:62:c1:1d:9a:08:9c:62:1d:0c:af:9f:
         ab:98:ae:67:5c:ee:b8:85:1a:1c:5c:b7:89:9f:e3:1f:73:52:
         da:06:c6:d0:83:7a:ca:a6:7d:f3:71:52:3e:d2:e8:2d:bc:4f:
         1a:47:b8:d8:a3:31:cc:83:c2:4e:cb:60:07:4d:1d:94:89:02:
         63:7d:27:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org