Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa
File:                     3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          Xfwwllhqwl9+l7cZbYf2CIG3enwaMuAcR4WPMNDKshE=
Subject key identifier:   26:C0:44:0A:18:87:2C:8C:64:34:9E:DC:54:EB:83:65:3E:AB:36:E4
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       E1C0A1A93678D0D361845B5FECD75F95F5B281
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:22 +0000
ROA not before:           Wed 28 Feb 2024 13:58:22 +0000
ROA not after:            Wed 26 Feb 2025 14:03:22 +0000
asID:                     28210
IP address blocks:        138.117.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e1:c0:a1:a9:36:78:d0:d3:61:84:5b:5f:ec:d7:5f:95:f5:b2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:22 2024 GMT
            Not After : Feb 26 14:03:22 2025 GMT
        Subject: CN=26C0440A18872C8C64349EDC54EB83653EAB36E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:99:6c:95:0a:8d:29:b2:36:db:f8:d5:c2:
                    2d:7f:17:46:ff:65:8d:2b:a9:16:cd:39:cf:6c:5d:
                    fb:07:62:87:7d:cb:5d:05:bb:ca:18:69:79:cc:44:
                    f9:49:f5:fe:a8:a2:49:65:c3:3b:e8:56:dd:a6:31:
                    6b:3a:52:a7:4f:25:b7:b2:8f:d7:cc:50:4d:24:07:
                    05:0d:a6:8b:a1:ad:54:1d:74:14:19:11:31:16:c5:
                    60:60:8d:c8:ea:43:41:2b:3f:81:ba:f8:68:5f:fc:
                    0a:7d:e9:d1:a8:d8:4e:2d:20:3b:65:4f:69:cc:43:
                    ef:1d:4d:82:3d:26:2b:51:de:18:c5:c6:30:30:59:
                    80:dc:cf:b3:6c:e7:84:26:12:93:fd:30:6d:44:10:
                    f1:cd:f1:bd:0d:d0:86:8d:9d:8a:cb:70:36:87:20:
                    77:1b:28:92:9e:be:dc:35:b4:39:14:43:a0:7b:ed:
                    32:03:d7:55:e5:6c:f8:26:fd:1d:3b:40:5b:c3:d2:
                    64:d5:80:27:dc:61:57:dc:83:16:74:ef:e5:0c:8f:
                    e1:fc:a5:c0:87:e6:26:70:22:24:83:86:a4:73:23:
                    ce:4f:35:ec:27:b9:22:93:0a:f6:c4:dc:5d:2d:16:
                    a6:36:18:a1:85:11:a8:f2:cc:a9:cc:53:6f:a2:c4:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:44:0A:18:87:2C:8C:64:34:9E:DC:54:EB:83:65:3E:AB:36:E4
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ed:05:50:98:1c:d8:69:f9:ff:e9:a2:a9:d1:c4:8d:aa:17:81:
         8b:2b:fc:74:25:b7:88:e7:5e:a2:c4:f9:94:15:14:c8:65:34:
         5c:90:7d:32:af:cb:5e:4a:3a:d5:da:c2:24:4b:17:87:32:23:
         6c:71:5f:a5:17:58:b7:89:29:e0:73:cc:62:ed:c2:79:d9:9a:
         fb:ea:af:96:05:39:bf:44:ab:58:79:99:04:88:c6:db:b4:12:
         79:b3:31:43:66:d6:ec:da:24:20:cc:28:d8:64:89:73:84:ad:
         3e:ac:75:f3:6b:80:0d:cf:1a:14:17:d5:b1:f9:43:17:4d:f6:
         98:e9:c3:c5:0c:c4:6a:03:fb:93:06:c2:5f:da:7a:f1:ad:96:
         9f:fd:e6:a4:f8:c7:7c:89:01:34:f7:11:1b:4a:91:df:bd:89:
         98:9f:d6:94:6b:1c:69:d4:ee:72:9d:31:32:3e:a4:99:61:2f:
         eb:bf:66:d4:89:99:36:9b:53:12:e4:8d:1e:3e:37:47:87:04:
         37:05:2f:52:ca:11:a5:c5:90:41:ae:70:07:2b:c4:71:1c:f1:
         cf:eb:7a:da:56:01:c9:ad:f0:15:93:23:1d:9d:7f:7c:41:b1:
         b0:3d:31:92:dd:73:3b:fd:f5:93:ea:84:78:7b:37:b2:e1:33:
         2d:68:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org