Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3233203d3e20323634353339.roa
File:                     3133382e302e32342e302f32322d3233203d3e20323634353339.roa (raw, json)
Hash identifier:          Q6SaevBtwHHETXRkU6/vVnD7h2mHJtzW1dGM/PlA4zs=
Subject key identifier:   CE:72:AF:05:D0:C0:15:68:1E:39:35:C3:01:9F:17:E9:2C:C4:24:F5
Certificate issuer:       /CN=AD0F2A1345790C4B061672E4A6491483609A7BCB
Certificate serial:       1E3485E40B2A544B22794526609714E3B0592D8F
Authority key identifier: AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3233203d3e20323634353339.roa
Signing time:             Thu 29 Jun 2023 14:52:11 +0000
ROA not before:           Thu 29 Jun 2023 14:47:11 +0000
ROA not after:            Thu 27 Jun 2024 14:52:11 +0000
asID:                     264539
IP address blocks:        138.0.24.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:34:85:e4:0b:2a:54:4b:22:79:45:26:60:97:14:e3:b0:59:2d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0F2A1345790C4B061672E4A6491483609A7BCB
        Validity
            Not Before: Jun 29 14:47:11 2023 GMT
            Not After : Jun 27 14:52:11 2024 GMT
        Subject: CN=CE72AF05D0C015681E3935C3019F17E92CC424F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:84:cb:a3:5d:4d:49:e6:f6:4a:3b:ae:48:
                    0a:59:77:a1:e2:50:a3:75:34:e0:4b:c8:36:fb:72:
                    c4:59:92:d3:08:15:48:65:bf:95:f9:8a:2b:9f:c7:
                    57:0e:56:25:9b:0d:73:c0:ed:b0:be:f9:9a:40:e5:
                    2c:db:96:a1:5a:24:a3:4b:ab:0e:30:8e:17:68:51:
                    dc:2e:87:2a:97:d2:3c:dd:c5:ae:a4:e0:95:1f:25:
                    63:74:3a:b2:13:c5:c6:ba:9b:36:82:1d:ba:0b:59:
                    81:66:eb:9d:79:b9:12:1a:8e:5a:be:f8:11:ae:74:
                    8e:a1:49:7a:56:ea:f3:4a:0c:81:bd:62:a0:a7:11:
                    6c:9d:86:ff:d9:e7:41:06:11:17:b5:10:b5:79:f8:
                    a4:51:1c:ad:6f:47:56:d7:ca:ad:3b:fe:02:01:88:
                    e2:52:94:24:47:0e:0e:dc:b9:95:49:3d:cd:2b:8d:
                    e4:a0:ee:f9:16:69:95:c4:95:1e:3f:4c:a7:33:08:
                    e2:fc:ca:86:ea:b4:3b:50:18:61:79:04:b5:35:0f:
                    4d:c4:6e:ec:fe:5b:6b:db:38:59:c1:02:f0:51:c7:
                    85:13:ab:01:cb:87:dd:3a:bb:91:05:78:87:19:4d:
                    d8:0a:45:d6:e4:2a:ca:69:17:19:ee:b7:ff:6a:82:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:AF:05:D0:C0:15:68:1E:39:35:C3:01:9F:17:E9:2C:C4:24:F5
            X509v3 Authority Key Identifier:
                keyid:AD:0F:2A:13:45:79:0C:4B:06:16:72:E4:A6:49:14:83:60:9A:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD0F2A1345790C4B061672E4A6491483609A7BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3233203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:da:c1:a6:d9:1c:fb:31:fe:24:1d:70:ef:99:0d:2b:a4:
         5d:43:f1:e2:7e:c2:ba:c9:4f:5e:23:3f:54:cf:99:34:c0:4e:
         8a:4a:c8:63:ad:ed:07:d1:78:6d:82:f2:66:69:4e:fe:25:eb:
         67:0e:66:d9:0b:4b:0e:76:98:ee:8f:91:67:75:14:e1:59:db:
         c7:08:4b:79:9a:f8:91:22:f6:8f:67:5c:5c:00:aa:f7:b5:f5:
         ab:a2:f7:11:ee:4b:18:a7:ea:8f:ff:0c:76:dc:a1:e5:d4:85:
         64:78:06:cc:ab:f1:f1:e6:55:e0:7e:73:84:6e:7f:ca:6e:04:
         93:82:a4:9e:57:f3:66:e4:44:ff:a5:63:7d:0e:f9:82:06:ff:
         49:b0:61:06:ef:2a:79:74:90:d2:38:0f:69:c4:1e:03:f9:26:
         47:e8:78:71:49:71:36:8c:13:76:34:1e:73:c0:8f:1b:e9:bc:
         df:de:68:1c:8f:d1:f0:d8:f5:a1:e7:03:92:1a:a3:49:90:ee:
         e6:c3:4f:43:84:3a:a4:91:c9:ea:73:cb:c0:6d:c5:c0:96:37:
         48:4b:5f:92:6b:3e:60:a4:20:08:eb:97:8d:e6:a2:56:4e:c9:
         06:c9:b7:8f:6b:a0:98:5c:b6:66:08:1b:62:1e:ac:2d:9f:2b:
         2b:2a:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org