Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131312e302f32342d3234203d3e20323632323933.roa
File:                     3133382e39342e3131312e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          gtTofFR1oeIka99fjhpYyiF/eteuivJuWjn7uRvCBNs=
Subject key identifier:   2E:F9:12:B4:E7:91:84:C8:B8:EC:1C:17:89:26:03:DD:42:40:A0:FB
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       03F00880E5C5A13C7E22DFF359E6049AFF4B67C3
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131312e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:38 +0000
ROA not before:           Tue 02 Jan 2024 21:11:38 +0000
ROA not after:            Tue 31 Dec 2024 21:16:38 +0000
asID:                     262293
IP address blocks:        138.94.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:08:80:e5:c5:a1:3c:7e:22:df:f3:59:e6:04:9a:ff:4b:67:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:38 2024 GMT
            Not After : Dec 31 21:16:38 2024 GMT
        Subject: CN=2EF912B4E79184C8B8EC1C17892603DD4240A0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:a4:30:3f:f4:89:cf:53:d8:2f:53:ea:11:
                    e3:9b:eb:60:7f:1d:c6:d0:4f:dd:3d:46:75:90:e6:
                    83:87:d9:1e:9a:d4:2e:2a:bd:3f:c4:31:3f:39:09:
                    5f:5a:dd:04:cb:4d:50:47:de:ca:3a:5a:bc:c7:2d:
                    58:eb:76:92:03:67:99:6b:49:87:d3:be:ea:6c:bc:
                    3e:80:8e:5b:18:aa:f9:06:22:c6:c3:15:90:b4:23:
                    fd:da:3c:75:a1:3f:9d:48:e2:67:2f:6f:e6:98:8c:
                    ea:ea:b8:ae:ba:8f:3b:13:6a:6a:37:7d:05:0c:ac:
                    26:ac:be:83:db:c0:90:cb:5a:e3:9a:02:5b:96:85:
                    22:be:90:d6:be:0c:0d:b6:b6:37:75:cd:51:3e:0e:
                    d7:b1:65:6a:71:18:f7:49:5c:77:9e:11:53:c4:99:
                    c6:ab:8e:ea:70:db:b7:7d:0d:d2:5e:91:b3:4a:e3:
                    c0:fe:b8:f6:96:93:97:2b:ad:40:85:ec:bb:99:5d:
                    4e:bd:e9:6d:90:8f:f7:2b:f2:59:41:52:b0:e4:2e:
                    f9:d3:53:43:6b:27:de:1e:eb:13:32:aa:81:3f:0c:
                    2d:50:e3:fe:85:7d:4f:0c:f9:f7:cb:38:3f:e6:9a:
                    a9:3c:9b:3e:24:d7:26:cd:62:78:7a:a9:4b:a3:58:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:12:B4:E7:91:84:C8:B8:EC:1C:17:89:26:03:DD:42:40:A0:FB
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131312e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:27:14:e8:17:73:80:ee:fb:a5:1a:09:c6:d1:82:1f:a0:
         74:bc:97:11:f5:69:88:3c:93:46:0a:c9:f5:5b:58:37:72:b6:
         b6:f8:cf:51:9b:41:56:21:dd:c5:e5:0d:b0:b8:74:a8:e2:65:
         2f:a9:f3:eb:97:fb:0d:c4:52:44:26:44:fe:8f:2a:d3:3d:8f:
         3e:bb:0a:70:86:bc:76:02:a9:36:e3:a8:86:5d:7c:6b:0e:3c:
         1c:35:8c:3e:2a:e2:1e:72:36:98:2a:c9:d7:26:59:d1:a2:eb:
         5b:6e:37:7b:06:0c:6e:c6:90:31:3f:f6:5f:3f:68:28:3d:01:
         16:58:ae:33:8a:a5:0d:9e:4e:fe:43:92:73:4b:66:bf:c2:5e:
         60:c5:75:83:2e:a7:68:86:0e:e2:ea:aa:f9:f1:7e:f8:58:59:
         74:3a:e9:db:4f:1d:1f:e2:70:94:f0:58:61:a2:7c:ac:21:d5:
         81:db:09:71:f7:bb:4e:4a:ba:a3:75:82:dc:9a:e5:8f:54:1e:
         1f:8d:97:ef:e3:00:a1:43:d6:7f:d6:ee:1b:08:3f:ea:f8:66:
         1d:33:20:ba:a8:d2:bd:bb:23:53:4a:6b:49:6e:df:9c:b5:4d:
         d4:a8:6e:b4:be:c4:ee:e5:47:0b:69:d9:80:5d:85:ed:92:6f:
         1f:38:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org