Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3234203d3e203238323130.roa
File:                     3133382e3131372e3232302e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          sincHa87cE5pqZYF3tdbFwWq8Y9MQWZ+2f+CHbjrsEI=
Subject key identifier:   15:2E:09:38:74:84:50:AF:D6:69:7D:DC:FA:5E:93:81:82:6E:3A:EC
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       57B8522DADCF0C7EA764FFC77E2A62C5640FCF8D
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:07:52 +0000
ROA not before:           Sat 04 Mar 2023 16:02:52 +0000
ROA not after:            Sat 02 Mar 2024 16:07:52 +0000
asID:                     28210
IP address blocks:        138.117.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b8:52:2d:ad:cf:0c:7e:a7:64:ff:c7:7e:2a:62:c5:64:0f:cf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:02:52 2023 GMT
            Not After : Mar  2 16:07:52 2024 GMT
        Subject: CN=152E0938748450AFD6697DDCFA5E9381826E3AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:38:72:4a:b0:88:fd:02:df:de:0d:ae:38:
                    ee:cb:9f:e4:c5:12:0e:a1:8a:1c:d4:cf:d1:d3:bb:
                    3e:43:a9:50:6b:3e:6a:18:77:53:d3:fc:cf:66:55:
                    1e:b5:d4:23:ea:5c:4c:bc:86:d9:b0:53:5e:5d:21:
                    8a:34:75:52:21:cd:b5:81:de:04:c3:9f:d0:c9:7d:
                    d0:24:89:35:b1:fc:12:ec:cc:20:fe:c8:1c:ae:b5:
                    73:ed:9b:9b:53:90:9a:e1:f0:1c:85:96:46:21:d4:
                    2e:8d:c3:35:6f:61:c3:56:0c:06:06:ec:9d:9b:81:
                    c4:b1:e7:4c:d5:d8:85:f1:84:57:7a:72:98:d5:5b:
                    f3:6d:93:e0:29:e1:db:d6:41:3c:01:c1:ef:1a:fc:
                    02:6a:4a:97:18:e4:22:a1:ab:c9:44:2f:fc:93:7f:
                    1d:64:c9:f6:c3:24:88:38:43:04:ae:e4:f5:1e:ab:
                    02:ab:09:b5:8a:a1:34:8d:b3:31:da:88:12:37:63:
                    6f:66:f4:bc:bb:2c:8f:0e:dd:c8:87:7b:62:9d:c7:
                    a4:34:bd:10:9a:f0:54:dd:b1:65:dc:db:d3:af:c1:
                    60:f2:8c:d1:8c:ee:d7:f9:54:27:0c:17:17:ea:d6:
                    8d:67:d9:78:f0:51:07:81:d4:14:d1:98:57:f4:d1:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:09:38:74:84:50:AF:D6:69:7D:DC:FA:5E:93:81:82:6E:3A:EC
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e3131372e3232302e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:b3:60:52:6a:f5:a0:ef:ce:7d:b7:94:d7:1d:de:4a:81:
         99:0c:8a:38:1b:a8:a4:b6:cc:90:30:f4:10:15:b8:1a:fe:08:
         bd:bf:13:a9:de:f9:9d:6e:d5:60:de:c3:7c:99:9b:da:69:db:
         ac:05:eb:4c:3c:7a:ca:1f:eb:7b:0a:1a:19:c1:29:63:bb:1b:
         53:57:a5:b8:92:61:ab:4d:ec:e7:6c:7c:db:51:8c:a7:e3:21:
         93:b7:f9:fa:0c:a2:43:05:87:8a:1b:05:7e:71:0e:aa:35:96:
         fe:e8:b6:0f:6c:dd:94:0a:49:bf:cc:33:32:28:ee:50:bc:2c:
         30:1f:fd:f6:3b:bb:c0:4d:ca:9c:e7:e6:6c:c3:8c:5d:7f:e6:
         f2:bd:a4:a3:24:db:54:b6:5d:0f:af:e5:65:1f:1c:63:b5:1c:
         4e:a9:74:44:20:c7:44:cd:fc:b1:e1:32:75:40:32:9b:81:b2:
         fa:ea:6f:ac:48:ed:17:61:9e:5b:cc:d6:da:93:a4:53:17:48:
         57:cf:9e:2e:cc:48:32:59:77:85:2f:2e:bb:24:96:c3:9a:46:
         a1:f4:a4:57:3f:dc:67:41:61:29:75:de:b0:63:28:fc:41:1c:
         0c:36:fc:1c:cc:45:c3:93:ea:44:bb:73:f9:3e:5f:6b:63:5c:
         7a:f5:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org