Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3234203d3e20323634353835.roa
File:                     3133382e33362e3139322e302f32322d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          iHuUD0P13XA326S90s1/jbRkew6TJg4QoFqqR4LTZvc=
Subject key identifier:   90:28:A3:20:0B:B2:0C:8E:06:24:35:5E:0D:C8:A8:8C:50:E5:83:BF
Certificate issuer:       /CN=A32AB6457BBA29BE2D2FF1DAA94931E35F30DAD4
Certificate serial:       1B3235391534B042474011FEC661678CD170C847
Authority key identifier: A3:2A:B6:45:7B:BA:29:BE:2D:2F:F1:DA:A9:49:31:E3:5F:30:DA:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32AB6457BBA29BE2D2FF1DAA94931E35F30DAD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3234203d3e20323634353835.roa
Signing time:             Wed 11 Jan 2023 18:57:33 +0000
ROA not before:           Wed 11 Jan 2023 18:52:33 +0000
ROA not after:            Wed 10 Jan 2024 18:57:33 +0000
asID:                     264585
IP address blocks:        138.36.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:32:35:39:15:34:b0:42:47:40:11:fe:c6:61:67:8c:d1:70:c8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A32AB6457BBA29BE2D2FF1DAA94931E35F30DAD4
        Validity
            Not Before: Jan 11 18:52:33 2023 GMT
            Not After : Jan 10 18:57:33 2024 GMT
        Subject: CN=9028A3200BB20C8E0624355E0DC8A88C50E583BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:b0:3b:a1:40:1e:67:66:2d:38:cc:e0:3a:
                    54:5d:cd:e1:ac:38:5e:fe:03:6b:03:30:65:57:f0:
                    7f:48:bc:e9:e9:f2:88:88:a4:fc:2f:b2:12:9e:7a:
                    02:3f:f0:d6:28:19:b0:ed:2d:e2:31:db:25:b3:09:
                    91:50:13:02:80:59:57:e9:a5:e8:f3:8e:4c:b9:88:
                    64:9d:c1:ac:71:5d:64:b5:0c:f5:e7:04:43:9e:3d:
                    71:d3:cd:51:49:78:76:72:ed:42:f2:7e:53:58:ad:
                    24:94:10:a6:ac:80:a4:43:f7:3d:57:ee:9f:2c:a2:
                    5a:bd:cd:ed:b1:49:d3:2f:85:a9:c9:ec:51:f1:5f:
                    e0:87:a5:2a:cf:9e:49:ca:86:e4:68:cc:86:e7:fa:
                    13:06:bd:61:17:a0:dd:9d:f8:ee:4c:a9:db:50:ff:
                    61:a4:02:17:75:e5:f9:8a:05:36:ed:f8:fe:71:4d:
                    95:e8:33:13:24:a8:f7:ab:e2:20:16:ca:18:5e:e7:
                    2a:37:b6:12:2a:5e:78:f6:75:84:a6:60:dd:2d:e2:
                    a2:4b:f4:ef:96:f7:21:07:8e:44:e1:bf:cd:16:d4:
                    82:7f:81:25:f6:2f:69:20:bc:ee:d2:17:71:98:25:
                    c5:1c:cd:4d:ba:8c:5a:46:c4:da:86:bc:ff:14:02:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:A3:20:0B:B2:0C:8E:06:24:35:5E:0D:C8:A8:8C:50:E5:83:BF
            X509v3 Authority Key Identifier:
                keyid:A3:2A:B6:45:7B:BA:29:BE:2D:2F:F1:DA:A9:49:31:E3:5F:30:DA:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/A32AB6457BBA29BE2D2FF1DAA94931E35F30DAD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A32AB6457BBA29BE2D2FF1DAA94931E35F30DAD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/0/3133382e33362e3139322e302f32322d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:29:8c:f5:59:9b:00:b9:ef:43:72:dc:d5:60:22:5b:89:86:
         2e:7a:cb:c0:1f:93:f5:44:bb:69:08:7c:0e:ee:15:c3:22:b4:
         17:e3:dc:21:15:36:cb:9f:67:ee:bf:fb:8a:73:49:9c:94:dc:
         a3:ef:9b:4d:2e:58:d2:9a:0d:dc:31:3a:05:c9:a7:09:e2:e9:
         33:b9:29:6f:34:79:4f:ab:d7:a3:f7:7b:d5:60:8f:f2:68:5a:
         ae:b7:39:60:04:b8:36:24:e4:b0:d1:c6:1c:a7:a9:ab:22:44:
         1b:fa:35:26:50:70:4c:14:d2:83:43:73:ae:a4:3d:09:01:62:
         7a:e2:2a:83:21:a5:5f:fe:79:b2:45:ea:c5:ab:2a:46:f6:22:
         5a:69:c6:3e:e2:ca:ec:93:95:e6:cc:d8:c3:5b:ca:24:a1:3f:
         dd:38:61:20:e9:ed:12:54:80:7a:55:82:75:a4:e2:d9:9e:60:
         09:cd:50:0b:c1:2c:d1:b5:68:48:bf:13:ad:c1:28:74:98:27:
         8a:f3:27:6c:3b:06:8b:83:41:50:d8:27:16:bc:6e:25:0e:a6:
         65:02:ae:23:ec:3d:ef:24:1c:2c:e7:a2:d4:33:2c:5d:ea:49:
         8a:2f:28:70:f7:a6:a7:e8:d9:bc:56:52:f2:74:e5:d9:13:4b:
         89:95:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:51 2023 by rpki-client on console-ams.rpki-client.org