Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          q9tHMckrIQmXX8G5gBZf+a0cjXNgcvpP9YplvHIO8nI=
Subject key identifier:   11:BD:A2:61:09:B9:F0:9B:A3:EA:64:2A:8E:9D:8E:67:6B:18:96:27
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       64DAB5566F5BEB9AE07665FE2AAFBD735BA54C99
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 12:00:00 +0000
ROA not before:           Fri 08 Sep 2023 11:55:00 +0000
ROA not after:            Fri 06 Sep 2024 12:00:00 +0000
asID:                     264311
IP address blocks:        138.122.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:da:b5:56:6f:5b:eb:9a:e0:76:65:fe:2a:af:bd:73:5b:a5:4c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 11:55:00 2023 GMT
            Not After : Sep  6 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:63:ff:d7:e8:d0:61:b4:e9:8e:ad:ce:22:
                    22:dc:3b:fd:78:e9:fd:5a:91:db:61:79:68:c4:c0:
                    79:98:66:47:d8:97:a1:14:2f:65:29:87:4b:8c:f9:
                    e6:74:ec:62:83:b1:df:5a:d1:3c:01:4a:d4:d9:78:
                    c3:a5:47:e8:10:e0:ba:c2:81:2a:20:ef:47:c9:a4:
                    35:57:03:af:62:af:ba:02:6c:d6:d5:4c:e6:fb:01:
                    ec:1c:eb:6b:f3:f2:f7:2d:43:25:7c:c1:3b:ba:0b:
                    7d:21:6f:2c:17:58:94:ce:46:cd:f4:e6:dd:0d:4f:
                    1e:46:7d:8e:1c:ae:8e:a8:b8:fa:c9:54:7b:a3:48:
                    d8:66:c6:1b:51:b7:c6:31:08:ab:76:fc:37:14:2f:
                    95:92:f5:06:57:54:e0:07:57:48:09:1d:d8:34:71:
                    2d:df:0c:74:72:57:04:a7:a9:5c:5a:3a:81:58:f1:
                    22:64:a8:f2:8b:f6:a5:15:b5:3a:95:00:e3:f3:14:
                    c0:17:87:3c:0e:21:b0:0e:4e:0a:8f:de:d6:dc:04:
                    a2:19:60:b2:86:73:af:e9:e0:63:f7:2c:90:c4:7e:
                    ae:67:45:68:f9:0a:3e:9e:c2:3d:17:52:da:5b:21:
                    c0:e8:81:f6:13:69:d9:7d:8d:21:04:f3:20:58:ba:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:A2:61:09:B9:F0:9B:A3:EA:64:2A:8E:9D:8E:67:6B:18:96:27
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130302e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:60:5a:50:e8:7b:aa:c6:39:6c:50:e1:b1:84:82:d2:c3:4f:
         11:00:c9:77:97:c3:b8:49:24:e6:4e:05:9c:58:2d:10:2b:0a:
         d0:52:15:0e:50:71:15:68:f9:12:cf:54:c9:87:9a:a6:45:62:
         c9:41:72:0b:cf:bf:e3:ad:60:b3:f7:9f:9e:c2:6c:dd:09:ea:
         1f:19:01:80:f1:6a:21:8c:e7:88:8a:96:e2:4c:3f:f0:70:85:
         7c:20:7e:55:e5:44:29:be:e0:88:bc:14:75:aa:70:16:a1:d6:
         5c:04:01:ad:8a:f0:79:f4:f2:39:e9:29:c4:d8:36:39:08:5a:
         43:e5:8c:f6:e2:87:02:1f:33:09:dc:ca:8a:4c:ed:24:0d:5d:
         cb:e3:b3:2d:db:03:bb:9f:4b:8e:fe:ca:ba:3f:42:ae:ce:28:
         0e:d1:7f:d4:43:c1:cf:e3:82:9b:f6:0d:71:64:a6:39:f6:9c:
         27:5b:f9:2d:3f:06:33:fb:0d:f2:f5:67:2d:62:95:83:2b:35:
         0f:93:64:f3:b0:ba:01:23:0c:3e:29:ef:61:49:90:be:f5:3d:
         16:80:5c:6b:e9:27:d8:7a:27:b0:3c:25:99:68:56:6e:16:0b:
         55:26:0a:b2:96:a0:17:33:2f:b0:0c:e2:f0:52:20:7c:81:ef:
         07:0e:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org