Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130312e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130312e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          ZwFJcN5lz6Imc1MpUX3c/8RMSPqax380ct9RH1XYmcU=
Subject key identifier:   78:99:A2:CF:66:AE:2F:4C:A1:97:2B:8F:A7:41:94:58:1E:2C:D2:9D
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       40ADC5ED98097E060D8A9EDBF55E39F60B0DDA02
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130312e302f32342d3234203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:00 +0000
ROA not before:           Fri 08 Sep 2023 12:55:00 +0000
ROA not after:            Fri 06 Sep 2024 13:00:00 +0000
asID:                     264311
IP address blocks:        138.122.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:c5:ed:98:09:7e:06:0d:8a:9e:db:f5:5e:39:f6:0b:0d:da:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:00 2023 GMT
            Not After : Sep  6 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:63:e6:de:31:74:b1:10:09:cf:a5:1e:9d:
                    aa:e1:66:b5:a0:bb:a4:92:d1:67:a6:8c:74:34:a6:
                    63:65:cd:21:eb:d8:5b:7e:c6:90:58:c7:e2:4d:80:
                    a0:98:27:0c:b1:6f:f9:7c:f2:68:48:09:f5:36:0b:
                    cb:6c:da:28:90:03:26:7d:49:03:cb:24:ce:94:9a:
                    a0:08:c9:00:81:e0:f9:6d:ea:3c:b8:76:66:84:8c:
                    36:94:65:75:3f:b5:8a:58:18:56:dc:7b:ef:12:1c:
                    d9:34:0a:60:bb:ac:2c:af:f4:78:92:8e:49:74:b8:
                    d6:6d:f3:64:16:b0:07:38:e0:65:9c:f0:f0:fd:ed:
                    37:69:19:92:38:c7:6e:26:a2:3b:5e:08:f6:74:26:
                    90:06:5c:12:05:31:02:6f:a9:fb:97:e9:ac:90:3f:
                    4d:59:b0:d2:73:6d:0e:4f:85:fc:7b:4b:3a:df:91:
                    0c:f3:70:60:61:35:b1:3c:88:01:26:a5:1a:09:01:
                    af:1c:12:02:88:12:08:9e:0a:e6:73:4b:69:ce:75:
                    54:dd:79:4d:e0:ec:44:01:3b:85:63:da:0d:d3:06:
                    0c:9e:bb:08:d9:cb:76:c0:9f:f0:40:e2:43:a9:ff:
                    4f:ff:56:af:b5:6b:01:fd:1c:26:eb:cc:86:f3:08:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:A2:CF:66:AE:2F:4C:A1:97:2B:8F:A7:41:94:58:1E:2C:D2:9D
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/3133382e3132322e3130312e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:bb:77:70:dc:d7:8b:39:6b:04:66:2a:20:6e:4c:42:c4:
         8d:63:54:0e:0d:ff:cd:5e:d6:cd:cf:b3:ec:84:24:aa:ce:5b:
         6d:47:60:8a:9b:0f:6f:d6:53:20:37:7f:2b:4c:79:22:d9:b0:
         45:4c:ce:40:8b:04:8a:a6:0e:27:cc:f8:ec:c5:83:85:e5:0c:
         0f:f9:66:fc:4e:21:48:9b:92:b7:2e:82:22:05:07:1e:9a:e1:
         ad:9c:df:c9:91:b9:cd:17:ad:ff:06:1e:20:cb:3b:1e:06:24:
         24:7f:f3:05:ce:fb:a6:fd:19:3b:a1:3a:cb:38:18:57:74:9d:
         f4:9d:5a:39:1b:c3:fb:af:5d:cb:4f:0b:0d:be:e6:3e:88:9d:
         cb:b7:c1:62:61:44:e8:62:54:da:e9:60:6d:34:68:12:30:67:
         37:3c:bb:65:47:ce:86:90:82:36:26:08:58:a3:4f:1c:62:fc:
         8d:48:f8:d6:9b:e8:e1:29:37:da:e0:5d:1a:fb:a7:82:30:d3:
         01:d0:0e:94:e4:4f:84:aa:cf:86:3e:94:7c:53:87:f5:11:4e:
         6d:fa:e8:fe:ae:a0:56:06:ea:f2:0a:99:ff:6c:02:a0:bf:f0:
         48:4e:54:f3:94:d8:ad:36:7a:59:45:40:51:09:0e:20:3f:6f:
         48:36:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org