Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32332d3233203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32332d3233203d3e20323633393133.roa (raw, json)
Hash identifier:          2WY0+CWOOlxcu5JMGThLZ8XQudZlyKh2Kmwtdhn+1+M=
Subject key identifier:   66:A7:AB:54:D5:93:2A:C6:63:2F:31:C8:70:CF:18:10:31:F7:4A:D2
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       2B8542CFED0D8EB3C92B7617A56830254177ACE5
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32332d3233203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:02 +0000
ROA not before:           Wed 30 Aug 2023 16:55:02 +0000
ROA not after:            Wed 28 Aug 2024 17:00:02 +0000
asID:                     263913
IP address blocks:        138.204.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:85:42:cf:ed:0d:8e:b3:c9:2b:76:17:a5:68:30:25:41:77:ac:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:02 2023 GMT
            Not After : Aug 28 17:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:d3:68:1c:57:be:c1:f2:85:64:a4:a1:41:
                    eb:7e:8b:e3:c7:d9:d6:ad:56:0d:70:fd:b1:e4:c5:
                    f7:30:4c:5f:5c:7b:38:58:7a:c1:ab:99:63:05:5e:
                    6b:12:a9:1c:83:9c:a4:32:33:08:74:42:9b:19:78:
                    c7:95:43:ca:f3:7d:d3:08:dc:ea:0b:17:ed:b9:ed:
                    be:2c:ef:96:83:bf:cd:d0:2a:ed:4a:1e:d8:36:0d:
                    56:51:c3:0c:96:19:79:b9:1c:c8:62:84:11:85:d9:
                    d4:d4:b7:cd:90:28:95:9a:ec:15:ae:d5:ae:ff:b2:
                    c5:02:1a:a0:7c:81:8f:33:b9:7c:2f:12:5c:c3:c8:
                    8f:58:f4:51:5b:77:86:15:c4:c5:07:15:c6:57:1f:
                    7a:d1:34:a0:f4:77:69:8c:95:19:6c:46:64:c0:95:
                    41:55:b0:6d:f7:b0:85:5e:d4:ae:a3:5a:d1:3e:86:
                    e6:5e:cd:97:31:fe:d4:21:d5:28:df:4a:82:f4:4d:
                    cc:bb:3c:8c:d1:b8:a1:d2:57:6d:cb:9a:62:a5:dc:
                    ad:3f:04:4d:3d:b8:fd:dc:c1:45:8a:d7:b0:68:80:
                    33:70:6c:4f:ce:77:19:87:7b:25:74:32:fb:9c:06:
                    b1:9c:69:bd:9b:64:91:0f:bb:cd:e2:99:a0:e1:38:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:AB:54:D5:93:2A:C6:63:2F:31:C8:70:CF:18:10:31:F7:4A:D2
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32332d3233203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:7f:ba:bc:24:f1:58:1e:87:92:0d:08:fa:91:43:f9:d2:
         c9:2b:6d:02:cb:4b:73:6c:61:17:9e:9b:f2:84:50:37:57:50:
         c7:20:ea:39:c9:99:d3:b5:b4:53:6a:4a:7b:b8:11:eb:22:95:
         88:29:e1:dc:22:11:98:04:3a:4b:71:af:49:cc:96:f8:aa:c8:
         ef:f3:1d:29:79:50:03:4f:6a:44:b6:56:e9:59:99:bd:27:b6:
         33:01:95:b2:31:24:93:dd:2c:aa:b2:65:41:ad:a6:b2:47:8e:
         94:ae:80:54:dd:d0:e4:c1:fb:ea:96:cf:85:0c:74:02:09:e7:
         b0:08:2d:b3:01:99:46:6b:16:fd:e4:a8:8e:0f:bf:57:37:60:
         41:d8:1a:9c:10:65:00:20:50:cc:b2:fc:7f:dc:87:9a:a4:82:
         84:1c:ea:49:a3:bf:2d:55:b9:dc:db:93:af:f6:bc:64:95:8f:
         5d:ef:5b:51:91:eb:25:3d:1b:f1:62:be:00:6e:41:c0:dd:12:
         b3:a6:45:30:a1:48:6e:35:9f:7c:c4:95:4f:18:07:cb:67:46:
         b7:23:e7:ee:27:f3:31:58:b6:e4:3b:d3:36:c1:fd:14:55:4c:
         4a:8f:4d:d0:20:ab:cd:12:d9:6e:a1:25:bc:fc:8e:a7:49:c6:
         a6:46:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:16 2024 by rpki-client on console-ams.rpki-client.org