Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3133382e3131382e3234342e302f32322d3234203d3e20323634323730.roa
File:                     3133382e3131382e3234342e302f32322d3234203d3e20323634323730.roa (raw, json)
Hash identifier:          e1H9EADkR2yHz3XXzgDc6KflvTee+Wrr3hsVZrS7S6k=
Subject key identifier:   F4:F2:53:4A:97:A0:A5:1D:CD:ED:FD:9F:A4:22:8F:53:B2:95:AE:45
Certificate issuer:       /CN=043A136A1C8758CC468D95236A1355C4ADAF676C
Certificate serial:       0F38E0B3A02307BC01090C69C82ED2744F45EFEF
Authority key identifier: 04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3133382e3131382e3234342e302f32322d3234203d3e20323634323730.roa
Signing time:             Wed 14 Feb 2024 16:53:57 +0000
ROA not before:           Wed 14 Feb 2024 16:48:57 +0000
ROA not after:            Wed 12 Feb 2025 16:53:57 +0000
asID:                     264270
IP address blocks:        138.118.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:38:e0:b3:a0:23:07:bc:01:09:0c:69:c8:2e:d2:74:4f:45:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043A136A1C8758CC468D95236A1355C4ADAF676C
        Validity
            Not Before: Feb 14 16:48:57 2024 GMT
            Not After : Feb 12 16:53:57 2025 GMT
        Subject: CN=F4F2534A97A0A51DCDEDFD9FA4228F53B295AE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:b1:23:d0:f3:1d:64:e2:bc:81:23:86:8c:
                    a4:85:ca:57:a7:da:dd:6d:0b:85:20:30:7a:51:2e:
                    e1:25:50:a9:ac:3d:d7:87:62:01:d3:da:ff:5d:68:
                    f5:bf:89:ed:5a:f4:27:15:24:86:9a:55:2b:98:ab:
                    c0:d9:a5:f2:66:52:e5:57:c8:10:a0:e8:cf:2d:5b:
                    22:53:a5:59:3d:49:b0:39:cc:61:9b:3f:0d:1a:b7:
                    fa:57:e6:5f:1d:0d:85:a7:62:67:ad:00:4d:bf:28:
                    81:38:85:ff:dc:61:9e:0c:f2:33:66:b9:d1:0a:6a:
                    78:dd:a3:d6:4c:e6:dc:4a:c3:58:04:cf:2d:b6:93:
                    f5:9a:e2:50:eb:9b:27:d2:fb:32:03:40:d4:3e:9a:
                    a5:35:d1:ec:11:8e:d7:e3:49:5e:b8:72:8b:27:59:
                    e7:87:25:63:b5:9f:b6:4b:c7:f9:1e:0a:12:bb:bb:
                    39:49:4d:72:ff:33:a2:c6:3c:ec:3d:9b:d8:0a:66:
                    7f:11:c5:56:a2:45:b5:09:d4:87:58:10:b5:e4:6f:
                    f4:b8:1c:f6:9d:c2:8d:83:12:64:05:07:4c:c1:df:
                    f8:8a:01:67:33:ca:cb:25:14:ab:8e:bc:ac:dc:b9:
                    ed:c9:5d:4a:20:99:7f:c0:b1:5f:9c:1d:92:ae:6f:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F2:53:4A:97:A0:A5:1D:CD:ED:FD:9F:A4:22:8F:53:B2:95:AE:45
            X509v3 Authority Key Identifier:
                keyid:04:3A:13:6A:1C:87:58:CC:46:8D:95:23:6A:13:55:C4:AD:AF:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/043A136A1C8758CC468D95236A1355C4ADAF676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/043A136A1C8758CC468D95236A1355C4ADAF676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/0/3133382e3131382e3234342e302f32322d3234203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:ba:69:3e:c1:35:6c:ce:ec:e5:b1:59:0a:6c:cf:67:01:
         8a:f2:59:98:8c:5a:1a:99:8e:5f:df:dd:f1:71:ce:10:6b:40:
         c5:96:b7:e8:7d:26:ab:35:f7:41:4f:3a:3b:1d:7c:ca:11:04:
         26:02:08:8b:e1:91:44:50:50:bd:fd:cb:f6:77:65:6d:85:05:
         65:db:ea:20:26:15:fa:6a:16:8b:99:f1:cf:03:8d:a0:33:e4:
         86:a8:da:ec:cc:66:86:4c:b3:af:32:ea:d5:55:aa:c8:bc:5e:
         08:2b:9c:1e:d6:70:c0:e5:6c:35:8c:54:2a:a1:80:9a:85:ca:
         21:6f:7e:81:83:a2:fd:d8:f2:63:fc:3c:33:0e:91:df:b7:10:
         06:81:29:d1:58:4f:92:e4:ff:ac:d0:d3:7f:8a:f6:03:8e:99:
         ad:5c:4f:b3:6e:49:76:cd:a5:a6:b3:9d:eb:01:52:c2:c3:1b:
         e2:6c:52:60:4d:ee:c5:ba:91:e7:b9:61:80:15:7d:4f:c4:81:
         db:bf:e7:29:16:6c:56:23:c1:9a:74:57:e1:bf:48:7d:d3:1a:
         41:fc:de:ef:c8:04:12:ce:e8:d4:a0:fd:ee:55:d8:fb:39:96:
         8a:3a:be:b8:7b:87:8f:8f:8c:16:75:c1:75:00:36:a9:23:84:
         cb:8a:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org