Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3232203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32322d3232203d3e20323633393133.roa (raw, json)
Hash identifier:          3h4Rk4u4zR+KOpPwm4fpZG7DMudu6CyUBJJteQ3UWxM=
Subject key identifier:   D5:4A:DC:E6:2A:CC:6D:17:13:47:29:77:C9:9A:52:90:2A:B8:C0:EA
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       23C91927F87CD0B9FD128C9679F664C4D79F9A9B
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3232203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:04 +0000
ROA not before:           Wed 30 Aug 2023 16:55:04 +0000
ROA not after:            Wed 28 Aug 2024 17:00:04 +0000
asID:                     263913
IP address blocks:        138.204.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:19:27:f8:7c:d0:b9:fd:12:8c:96:79:f6:64:c4:d7:9f:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:04 2023 GMT
            Not After : Aug 28 17:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:77:6b:34:f5:c2:9f:b5:46:b5:98:52:04:
                    32:37:a5:dc:a4:03:e9:4d:c2:b6:aa:dc:5d:dd:2a:
                    77:ae:0e:69:07:d1:81:87:74:e2:f5:5c:b9:fd:98:
                    bd:08:c7:1d:c3:0f:20:c4:e7:7a:1d:17:b6:b6:9a:
                    1b:14:7c:6e:34:d7:2d:dd:2c:c6:f7:d9:14:b2:c4:
                    d2:89:4f:f1:31:93:ff:0d:25:89:49:81:e4:79:50:
                    10:da:77:ec:fe:b1:83:e2:cd:d9:7b:97:36:65:be:
                    44:34:f4:3c:11:a1:3a:6c:d9:d4:82:69:f4:a9:f3:
                    0c:64:2d:10:80:15:68:f8:36:49:7d:4b:c8:a8:7b:
                    36:ea:6f:64:7b:22:b6:9c:8f:e3:a4:87:8c:65:22:
                    e4:d2:fc:35:73:19:a6:42:1a:94:7b:34:e5:ea:28:
                    96:df:b0:75:5d:1e:7e:b8:d8:35:d4:aa:a2:96:6e:
                    35:c9:2d:e6:23:b1:63:0c:f2:30:1a:cb:f1:20:32:
                    df:81:76:67:56:5b:82:0c:a5:47:e8:7c:e6:59:50:
                    e0:42:26:c7:64:de:aa:90:c7:07:0a:ce:89:b3:f5:
                    76:fd:03:66:43:70:5e:83:8d:ce:cf:9f:94:6d:04:
                    e8:50:14:e9:bf:33:f5:20:ec:4e:15:c9:bb:8d:75:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:DC:E6:2A:CC:6D:17:13:47:29:77:C9:9A:52:90:2A:B8:C0:EA
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3232203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:54:20:fe:87:89:83:a1:7a:f9:c2:21:14:f9:a8:1e:d1:63:
         1d:6b:17:05:b7:7a:04:90:bb:10:8b:74:1c:40:dc:5b:c2:1d:
         59:55:06:26:18:7b:79:a8:2d:df:39:d3:91:b0:47:8a:fa:ec:
         15:df:9a:e8:8c:76:0a:3a:6d:1d:46:47:6f:ef:10:21:f0:98:
         c9:ba:47:7d:9d:54:77:ff:62:4a:5d:02:91:e8:a0:1d:53:a0:
         84:cc:82:96:98:f7:aa:b1:da:f1:5a:bb:ca:08:8a:03:0b:ee:
         b9:6b:88:c0:93:81:df:e4:0e:e1:91:f2:da:b1:95:ac:3e:56:
         ac:52:00:81:d0:94:e4:6f:8f:ef:22:cb:5c:18:77:07:d7:1a:
         31:7f:9d:bc:47:0f:a4:d3:69:97:60:aa:a6:11:54:81:84:79:
         e8:7b:f2:67:0a:cc:8e:60:e8:d0:9d:73:43:0b:58:a7:5e:8d:
         18:2f:12:e6:2e:6d:6d:02:74:65:2b:f2:30:78:11:81:2e:78:
         63:23:6c:f7:15:01:0f:01:7d:76:95:ac:7f:51:b8:a2:ec:46:
         32:48:cd:d3:f2:1a:07:4f:fe:35:fc:32:02:6a:dc:25:1f:5c:
         45:f7:85:70:56:02:19:e6:76:d6:66:2b:b2:45:88:60:77:12:
         94:86:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:16 2024 by rpki-client on console-ams.rpki-client.org