Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3232203d3e20323632333136.roa
File:                     3133382e3131372e3139322e302f32322d3232203d3e20323632333136.roa (raw, json)
Hash identifier:          jqKhuwxa7pdzDMu1W4nVQFbwYw5jQW+Uw+tC7x6Z3a0=
Subject key identifier:   DF:D1:5A:40:08:6C:76:E6:22:BB:67:AC:AA:BF:F6:20:58:CC:BA:A1
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       45513FF7392F8561EE3C11DE54027E5D5293F0AC
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3232203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:39 +0000
ROA not before:           Mon 21 Aug 2023 13:21:39 +0000
ROA not after:            Mon 19 Aug 2024 13:26:39 +0000
asID:                     262316
IP address blocks:        138.117.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:51:3f:f7:39:2f:85:61:ee:3c:11:de:54:02:7e:5d:52:93:f0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:39 2023 GMT
            Not After : Aug 19 13:26:39 2024 GMT
        Subject: CN=DFD15A40086C76E622BB67ACAABFF62058CCBAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:97:d6:fe:b8:38:1e:fa:2b:2a:aa:9e:bc:
                    77:0b:69:02:97:f9:7a:2d:76:66:af:51:67:1f:d4:
                    b8:37:75:1c:a5:6c:f4:46:cf:aa:44:0f:cf:a1:f0:
                    49:e5:03:97:56:57:d3:19:8c:e4:da:84:e1:cd:a4:
                    5d:ca:1b:17:e5:74:df:88:84:f1:43:9c:7e:04:52:
                    67:85:0a:be:f9:05:b9:8c:85:3a:c5:de:03:b7:23:
                    81:0b:93:73:6f:84:77:7a:a7:5e:bd:ed:20:63:8d:
                    ff:2a:f8:a0:c4:e3:01:70:1e:f1:3d:11:7a:7c:34:
                    69:16:2a:2b:39:2c:50:56:8d:96:76:f5:25:c8:d9:
                    f0:74:8b:9a:bc:2c:23:13:81:c9:e0:d6:e3:28:ea:
                    0c:0c:de:8c:aa:d7:42:f8:0a:15:23:26:bc:f8:58:
                    a6:8d:91:f4:d7:9f:28:61:69:38:e1:c3:bc:5f:b0:
                    31:c2:13:f2:02:d3:ff:cd:12:08:1b:c6:97:d6:59:
                    cd:2e:98:98:36:88:39:44:d1:45:12:3e:f7:b5:75:
                    ce:70:55:08:76:48:eb:68:94:33:49:91:a2:c0:c3:
                    1b:f9:2f:21:37:44:a9:8c:bf:89:92:21:7b:66:fe:
                    c4:56:ac:6a:5b:a7:88:b2:c4:ec:c7:17:ab:0d:11:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:5A:40:08:6C:76:E6:22:BB:67:AC:AA:BF:F6:20:58:CC:BA:A1
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139322e302f32322d3232203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:28:d0:70:aa:94:ed:82:0f:9f:cc:0f:56:f1:c4:9b:ba:
         ba:0c:53:cc:12:74:aa:9e:f9:db:91:d9:f6:df:c8:03:b5:02:
         0b:ee:d2:f5:91:dd:c1:10:7f:4a:9d:23:ac:6d:21:b1:a3:26:
         2a:a0:d2:89:69:1a:68:85:1e:17:57:7a:7e:80:b0:91:50:ec:
         10:bd:3c:68:ff:0a:00:ff:13:2f:2b:c4:79:5a:c2:1d:5b:3f:
         08:4a:db:e1:d7:2a:31:a9:f3:65:9b:bd:75:7d:c0:64:50:77:
         04:2c:0d:90:a8:d5:ad:c0:68:90:5f:f3:32:dc:ff:05:02:71:
         de:4d:b3:a9:49:86:37:d5:bd:bd:69:08:a8:1a:a5:55:98:4d:
         dd:19:a6:87:47:16:24:bd:81:a2:c8:e1:92:71:49:96:23:89:
         85:8a:a4:4c:2a:1c:b3:83:f3:4e:bc:ef:26:b7:33:2d:60:6b:
         ac:cd:e1:43:b1:c4:3d:c1:2d:f2:ea:2c:2f:01:17:5a:38:20:
         92:a8:b6:e7:2b:eb:5b:86:e2:e3:f3:df:c5:8b:72:94:0d:46:
         fc:3e:1c:79:94:d7:c6:71:ac:29:95:d3:fb:e8:84:db:75:bb:
         07:3e:38:6b:aa:d8:f3:94:a2:41:5c:1f:28:f3:36:0d:0a:9a:
         87:af:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org