Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3332203d3e20323633383931.roa
File:                     3133382e3230342e34382e302f32322d3332203d3e20323633383931.roa (raw, json)
Hash identifier:          PRyM7rp4iOVXQIlJtTe3QVEiVdMkBGQ+wYqoCwmW4iQ=
Subject key identifier:   88:20:15:FF:BD:B9:88:E7:85:89:26:C5:60:F3:F7:26:D9:60:14:13
Certificate issuer:       /CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
Certificate serial:       085BA7E00617FD9B31080B3D633CBBF406A19CD4
Authority key identifier: 2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3332203d3e20323633383931.roa
Signing time:             Thu 27 Jun 2024 15:40:51 +0000
ROA not before:           Thu 27 Jun 2024 15:35:51 +0000
ROA not after:            Thu 26 Jun 2025 15:40:51 +0000
asID:                     263891
IP address blocks:        138.204.48.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5b:a7:e0:06:17:fd:9b:31:08:0b:3d:63:3c:bb:f4:06:a1:9c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99
        Validity
            Not Before: Jun 27 15:35:51 2024 GMT
            Not After : Jun 26 15:40:51 2025 GMT
        Subject: CN=882015FFBDB988E7858926C560F3F726D9601413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:12:19:e5:1a:f8:c5:47:af:bd:ec:85:f4:
                    cb:69:69:3c:23:eb:78:ba:f6:11:43:92:f3:bf:51:
                    af:fd:66:8b:f6:4f:58:8d:0f:09:60:06:be:83:7b:
                    e1:5b:af:ad:c7:a3:87:d1:01:0c:fe:27:fc:c6:b5:
                    5d:fe:d4:f8:08:f9:bd:a5:7f:d4:82:cd:5d:b3:11:
                    d1:ba:1e:04:21:0d:89:22:cf:f3:67:2c:a8:4a:00:
                    e7:27:8c:37:34:87:0d:17:0c:8f:26:fb:02:f5:34:
                    08:d0:0d:9c:33:25:9b:ca:4c:17:86:57:4c:83:89:
                    22:b6:78:01:88:76:dc:d6:6b:eb:7b:f1:ad:f5:eb:
                    9b:28:57:ed:d9:d8:6d:41:86:95:17:c8:6c:4b:7b:
                    43:3d:3e:96:74:20:9d:03:6a:d7:2c:fe:4b:14:3d:
                    03:aa:04:8b:46:c5:25:66:c2:29:e9:9f:32:f0:ad:
                    87:f1:e2:c1:ad:c0:6d:7c:f3:3b:21:1a:fc:bd:72:
                    40:99:42:67:8e:ca:82:c9:ca:fb:1c:23:7f:e3:80:
                    b4:01:bb:83:7f:2a:63:19:b9:44:66:32:22:a6:84:
                    07:d3:91:5b:a3:87:cb:c9:c6:93:2c:76:c2:b9:21:
                    cd:a9:8d:ee:9b:c4:0a:ae:85:ed:2f:ac:ab:54:e9:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:20:15:FF:BD:B9:88:E7:85:89:26:C5:60:F3:F7:26:D9:60:14:13
            X509v3 Authority Key Identifier:
                keyid:2A:33:1F:F1:DB:9B:9F:1C:7A:D2:7A:FE:FD:FD:15:6E:6B:B2:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A331FF1DB9B9F1C7AD27AFEFDFD156E6BB24D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3133382e3230342e34382e302f32322d3332203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:19:03:13:ce:e4:48:e3:8b:f4:dd:5b:39:87:d9:88:d0:2e:
         5c:dc:25:55:a4:2a:f4:7c:cc:8b:d7:66:fc:9a:a8:24:29:e5:
         18:de:d1:c9:39:ab:b2:9b:d9:31:9f:2a:f2:11:88:28:a0:9e:
         5d:19:81:5f:5c:aa:00:d6:fc:39:44:82:8f:6a:f7:38:01:e2:
         6b:ea:cc:5f:43:fe:c4:6c:e5:c6:2b:c3:e5:01:17:db:43:41:
         30:f9:39:30:c7:a7:42:1f:86:5b:11:92:03:f8:8d:11:7a:7c:
         27:05:11:ef:1c:77:c2:9b:ed:61:27:89:ad:74:a1:e6:3b:51:
         0d:1c:36:3b:80:f8:13:62:7d:f0:1e:73:5f:66:c9:b8:b9:8a:
         73:4a:39:f6:7e:c9:93:68:04:22:ec:96:d0:57:d3:ea:13:89:
         05:0a:b6:b0:b4:28:f3:1f:26:3f:fc:ec:9b:36:aa:b4:57:aa:
         72:cf:92:0d:ef:b6:08:d5:4e:43:96:6b:e2:0f:eb:61:90:5d:
         84:97:9a:d8:10:d9:1d:a6:96:93:b1:df:7a:17:be:cc:1e:9e:
         04:8e:67:ac:68:e8:d9:65:8d:a8:00:64:fd:81:f7:22:f4:0d:
         a0:fe:80:fa:5b:a7:f3:b1:b5:f1:b9:f0:be:90:16:10:f9:0d:
         6d:60:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org