Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32342d3234203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          2sVl5+/6s4WSqDHBChAvsqfOwV73McQGrlOJtL8IdNQ=
Subject key identifier:   68:26:02:DB:DE:7E:2A:D3:A0:2F:E0:E4:76:F9:BB:39:73:23:4E:C8
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       147D2FB953B1E6218F6FA10B10FF9A9DA8B62DA8
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:03 +0000
ROA not before:           Wed 30 Aug 2023 16:55:03 +0000
ROA not after:            Wed 28 Aug 2024 17:00:03 +0000
asID:                     263913
IP address blocks:        138.204.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:2f:b9:53:b1:e6:21:8f:6f:a1:0b:10:ff:9a:9d:a8:b6:2d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:03 2023 GMT
            Not After : Aug 28 17:00:03 2024 GMT
        Subject: CN=3082010A0282010100B0C7C915E182440C37C9A556D1AC840151CBD152C6B2C9B38EB5C0CD5FA52A4B76F4366F6DBB52CB8A63F1E8FE9D8A2FA9935993B4D0B452E0412DA8E8E8569E3B84FE5F0EE6A36F8A8A8ECF4406B9311EEBBAC9E670742FBDC5E6C1A75D8FAD044D621755FBC4B8F47EBB55EE0A3D43BDFAFD0E12B6427A16F0B5487368C17889E8757F8A013A504B08CED71C775CC947E2E2F0F8F21A3507885DE4D34FDF9349140FF59F6288F6A901D82A8247BE2F122C48A7EEE6542B1EE1954140A9B8D76F52DBD052E526490A2216814B5EC080351FB50112C47DDB9D120AA63E6E572DDAB8D0E7BC2466617BFB2C8D8BF0A002EBF5B7F034D58934A61D936C352FD7130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:c9:15:e1:82:44:0c:37:c9:a5:56:d1:ac:
                    84:01:51:cb:d1:52:c6:b2:c9:b3:8e:b5:c0:cd:5f:
                    a5:2a:4b:76:f4:36:6f:6d:bb:52:cb:8a:63:f1:e8:
                    fe:9d:8a:2f:a9:93:59:93:b4:d0:b4:52:e0:41:2d:
                    a8:e8:e8:56:9e:3b:84:fe:5f:0e:e6:a3:6f:8a:8a:
                    8e:cf:44:06:b9:31:1e:eb:ba:c9:e6:70:74:2f:bd:
                    c5:e6:c1:a7:5d:8f:ad:04:4d:62:17:55:fb:c4:b8:
                    f4:7e:bb:55:ee:0a:3d:43:bd:fa:fd:0e:12:b6:42:
                    7a:16:f0:b5:48:73:68:c1:78:89:e8:75:7f:8a:01:
                    3a:50:4b:08:ce:d7:1c:77:5c:c9:47:e2:e2:f0:f8:
                    f2:1a:35:07:88:5d:e4:d3:4f:df:93:49:14:0f:f5:
                    9f:62:88:f6:a9:01:d8:2a:82:47:be:2f:12:2c:48:
                    a7:ee:e6:54:2b:1e:e1:95:41:40:a9:b8:d7:6f:52:
                    db:d0:52:e5:26:49:0a:22:16:81:4b:5e:c0:80:35:
                    1f:b5:01:12:c4:7d:db:9d:12:0a:a6:3e:6e:57:2d:
                    da:b8:d0:e7:bc:24:66:61:7b:fb:2c:8d:8b:f0:a0:
                    02:eb:f5:b7:f0:34:d5:89:34:a6:1d:93:6c:35:2f:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:02:DB:DE:7E:2A:D3:A0:2F:E0:E4:76:F9:BB:39:73:23:4E:C8
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:93:da:53:cb:5d:41:bd:d1:28:8d:9d:9b:14:28:13:88:
         d5:e5:5c:d8:d5:c9:19:f2:9f:a9:5a:0e:8d:ce:42:ca:2e:61:
         7d:93:bf:6f:d7:0f:ec:7a:23:5b:76:94:fd:5c:75:69:2c:b3:
         69:bb:54:0e:70:eb:19:bc:e8:2d:d5:1d:de:bc:1d:6c:d9:e7:
         ad:50:0e:5f:a1:5a:10:1c:53:93:31:0c:e2:b0:5b:24:f7:75:
         45:e6:ff:12:1f:41:87:2a:6b:b8:18:00:e8:27:31:c4:28:d9:
         58:39:df:26:3a:05:52:46:90:58:23:cb:02:2f:27:6b:c2:51:
         11:e3:75:c2:8d:25:d5:19:37:3e:3c:f4:d8:90:09:4e:1c:6b:
         28:fc:3a:7b:7f:7e:09:53:1a:ff:72:eb:54:c1:44:68:da:b9:
         65:ff:ca:dd:6d:43:0d:05:27:32:37:16:c2:af:51:59:c9:78:
         a3:21:0c:71:f2:91:d8:54:ac:f1:9f:5e:61:f5:08:75:11:19:
         65:f5:45:1f:ef:26:64:76:b1:33:56:75:57:52:d8:70:19:d8:
         6a:f7:e6:af:c3:61:d2:74:25:2b:26:d2:f1:c9:25:e7:bc:83:
         71:65:2b:8f:03:39:6c:e7:0b:a8:2c:e7:d7:ec:ec:7a:9d:cf:
         d7:5a:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 17:21:35 2023 by rpki-client on console-ams.rpki-client.org