Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234312e302f32342d3234203d3e20323633393133.roa
File:                     3133382e3230342e3234312e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          asS7hbZt0F5zIS2t6WRap4vLJ7G5rwtEfvC1DpQNdNc=
Subject key identifier:   4C:C4:76:E6:86:9F:84:63:F4:E4:09:23:AE:5E:7C:5E:FD:59:01:59
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       61CE676446AD3A0DA4FB76FD6CC25A0D829D9077
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234312e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:02 +0000
ROA not before:           Wed 30 Aug 2023 16:55:02 +0000
ROA not after:            Wed 28 Aug 2024 17:00:02 +0000
asID:                     263913
IP address blocks:        138.204.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ce:67:64:46:ad:3a:0d:a4:fb:76:fd:6c:c2:5a:0d:82:9d:90:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:02 2023 GMT
            Not After : Aug 28 17:00:02 2024 GMT
        Subject: CN=3082010A0282010100B7B1A35BABB9E398C627E1FCB547E807C5F11FA9153DC20EF3C3D4A1C5A5A815481E6FC94CB1F26572471A8174F9D0FF879BFB9C77E1304BC6F6A354C39EF39C262D5141EAC0432A1985079594166D6D6DC253CF47B6894CFD1FBEB41E73C2C987BE78DE58D8D3C6DCAE2538B9EB28B755BA8F176B223DFAE9B8BC517D6A30E7F88794D65F281C16694A0B0BA01A1B6149F7AACE67E32C085212FF7AF4B8EB203D89828E40E49362ADBBB6A5023D8EDAD6A60E2E698C1BE843DFA8148BC881BC0962B531BAE08207813583C0E48F0E9D4B4E24138ACB8D7C01AECDCB0852B99B2751755AE74A789BC2947C83A09D0F51AADEB8F27E96FC716B36C6E58A5651BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:a3:5b:ab:b9:e3:98:c6:27:e1:fc:b5:47:
                    e8:07:c5:f1:1f:a9:15:3d:c2:0e:f3:c3:d4:a1:c5:
                    a5:a8:15:48:1e:6f:c9:4c:b1:f2:65:72:47:1a:81:
                    74:f9:d0:ff:87:9b:fb:9c:77:e1:30:4b:c6:f6:a3:
                    54:c3:9e:f3:9c:26:2d:51:41:ea:c0:43:2a:19:85:
                    07:95:94:16:6d:6d:6d:c2:53:cf:47:b6:89:4c:fd:
                    1f:be:b4:1e:73:c2:c9:87:be:78:de:58:d8:d3:c6:
                    dc:ae:25:38:b9:eb:28:b7:55:ba:8f:17:6b:22:3d:
                    fa:e9:b8:bc:51:7d:6a:30:e7:f8:87:94:d6:5f:28:
                    1c:16:69:4a:0b:0b:a0:1a:1b:61:49:f7:aa:ce:67:
                    e3:2c:08:52:12:ff:7a:f4:b8:eb:20:3d:89:82:8e:
                    40:e4:93:62:ad:bb:b6:a5:02:3d:8e:da:d6:a6:0e:
                    2e:69:8c:1b:e8:43:df:a8:14:8b:c8:81:bc:09:62:
                    b5:31:ba:e0:82:07:81:35:83:c0:e4:8f:0e:9d:4b:
                    4e:24:13:8a:cb:8d:7c:01:ae:cd:cb:08:52:b9:9b:
                    27:51:75:5a:e7:4a:78:9b:c2:94:7c:83:a0:9d:0f:
                    51:aa:de:b8:f2:7e:96:fc:71:6b:36:c6:e5:8a:56:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:76:E6:86:9F:84:63:F4:E4:09:23:AE:5E:7C:5E:FD:59:01:59
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234312e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:89:5f:07:c5:28:96:c9:71:8d:4e:95:d9:1d:42:6d:e4:8a:
         2d:71:68:15:88:4a:10:67:70:3b:3b:ec:db:f6:99:b2:59:a5:
         3e:7f:b1:a6:e3:65:52:b9:49:cd:06:1f:1a:db:a8:b4:07:47:
         0b:d4:da:b2:76:05:cf:77:77:26:ba:21:e5:9d:3a:41:90:c5:
         55:01:68:1d:c3:ea:2e:76:7b:3e:30:c3:4b:0f:c6:a6:cb:9f:
         cc:c7:68:20:8c:1f:23:04:98:7a:02:79:b7:31:fe:07:d0:62:
         b4:02:db:bf:c1:7a:a3:9b:ac:bf:a8:7a:6f:a6:c2:da:7e:54:
         39:26:88:09:3e:14:5e:14:ae:82:a5:c4:d3:cf:f8:da:c3:8e:
         87:ca:e9:be:9f:29:39:3f:5e:67:a0:26:d5:84:d6:28:90:59:
         64:ee:ac:42:06:83:c8:b2:5f:c2:5c:4a:90:3e:55:eb:ae:55:
         c8:7b:3c:40:01:aa:86:6b:e2:ae:48:42:ef:63:a6:57:08:bf:
         75:f9:99:f7:e5:2c:d7:ac:1b:77:6c:2c:f7:6e:f7:16:fd:1d:
         83:19:c7:88:9c:5c:3e:98:ba:54:d2:b6:fa:72:9c:3b:81:8f:
         60:f7:d2:04:e3:0b:2d:74:19:f6:f6:51:13:11:eb:69:1a:3b:
         46:b9:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:16 2024 by rpki-client on console-ams.rpki-client.org