Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa
File:                     3133382e33362e382e302f32322d3232203d3e20323639333934.roa (raw, json)
Hash identifier:          tKJSZEGnoJe4zrqzjYi2xDCCWvfwL9yqjy1TvS9VVvA=
Subject key identifier:   FA:92:97:D3:06:DB:A0:89:34:0B:9F:FD:A2:E1:65:2C:C7:DE:F4:B9
Certificate issuer:       /CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
Certificate serial:       7FDF2B7AF8E5ADD81743D825285FBDE37C7274B7
Authority key identifier: 23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa
Signing time:             Wed 20 Dec 2023 13:24:31 +0000
ROA not before:           Wed 20 Dec 2023 13:19:31 +0000
ROA not after:            Wed 18 Dec 2024 13:24:31 +0000
asID:                     269394
IP address blocks:        138.36.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:df:2b:7a:f8:e5:ad:d8:17:43:d8:25:28:5f:bd:e3:7c:72:74:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
        Validity
            Not Before: Dec 20 13:19:31 2023 GMT
            Not After : Dec 18 13:24:31 2024 GMT
        Subject: CN=FA9297D306DBA089340B9FFDA2E1652CC7DEF4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:05:e9:8b:6d:5b:54:7f:9d:1d:5e:83:f5:
                    d8:7a:1c:02:cb:d7:2f:30:c8:b7:3a:db:a5:a0:30:
                    5a:97:26:29:53:3e:0f:01:10:f0:08:49:45:fd:80:
                    36:2b:8c:5d:a5:68:a1:aa:e0:8a:2e:84:92:7d:5f:
                    4f:df:b3:3b:9c:af:55:f9:af:85:b4:bd:c6:5f:9b:
                    af:c2:c7:ea:1a:c7:cf:89:ad:80:16:8a:23:c3:23:
                    70:d3:76:f4:31:2f:05:88:e2:6f:46:56:b0:20:b9:
                    6d:a9:b6:74:f6:55:25:8f:fe:d7:f0:f3:33:b2:62:
                    b6:26:28:85:2d:8b:a2:42:b6:9c:b5:c8:f5:b6:1e:
                    61:62:f1:21:2b:74:79:d1:5c:6e:14:f5:a2:48:28:
                    ed:e1:78:b1:13:19:1a:77:37:a4:75:23:4c:6e:9a:
                    26:44:c1:fe:a9:09:4a:e6:8b:33:2e:a2:f7:e4:73:
                    95:4b:d0:83:c0:55:46:c3:c3:d2:17:80:3c:8f:90:
                    b0:73:c5:d7:16:75:6d:b4:5a:f5:73:1c:22:e3:d2:
                    0c:30:31:df:e6:38:2b:3a:e8:9b:b4:ed:5c:6b:a8:
                    61:35:60:9d:ee:d2:5d:17:0c:45:33:a0:45:a1:b5:
                    be:be:6c:18:4b:11:26:bb:25:51:9f:b1:fc:c4:a6:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:97:D3:06:DB:A0:89:34:0B:9F:FD:A2:E1:65:2C:C7:DE:F4:B9
            X509v3 Authority Key Identifier:
                keyid:23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/3133382e33362e382e302f32322d3232203d3e20323639333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:07:f8:56:18:f4:a0:bd:59:96:48:2d:e9:78:c6:90:87:
         ea:89:c1:4d:5c:f2:74:a4:79:14:4f:1f:4e:aa:db:8b:80:37:
         d1:d8:07:83:a8:55:5c:17:26:97:69:5d:66:f6:91:e7:82:c0:
         d1:f6:06:2e:51:3e:bd:e7:fd:e2:19:b4:2d:91:4f:d4:eb:03:
         ee:ed:71:ab:88:af:eb:0c:ce:83:4c:61:9e:00:b9:5b:0f:61:
         aa:a8:ad:7f:50:23:48:5e:c8:20:16:4b:de:3f:34:34:26:d9:
         62:79:60:c1:27:7b:24:9c:91:26:7d:a0:cb:15:8c:aa:eb:e2:
         8b:05:0d:e9:aa:7e:56:33:ce:d6:72:25:6a:7e:54:ce:a4:3a:
         d0:f1:3f:1f:30:da:40:cd:4d:05:87:90:e2:1f:dd:1a:a5:5f:
         ec:79:c1:d9:56:d0:d1:0e:c6:70:4f:8a:45:c8:51:33:ac:8b:
         8f:8b:ba:35:0c:49:5b:36:9c:04:dd:06:20:c9:58:60:82:e7:
         1d:08:6c:1d:00:90:61:6b:a8:70:16:4a:2c:9a:6c:52:43:9d:
         e4:6a:7a:7e:d7:69:61:f9:2b:3b:c6:10:4b:c1:55:1d:8b:14:
         50:2c:4a:06:2b:d1:48:ce:03:96:a4:41:40:06:ea:c2:8b:04:
         a4:11:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org