Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234332e302f32342d3234203d3e20323633393133.roa
File:                     3133382e3230342e3234332e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          qh/zZrl0ZuPO7TW6NLs9OjV3bGlzQV64Gu8MtN98t+Q=
Subject key identifier:   E5:D9:EC:62:EC:FC:D5:89:61:33:C3:B4:62:DF:D6:40:B0:5B:9E:13
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       23FEE6A524D9FBF8D7530006868E2B5B7366FE06
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234332e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:03 +0000
ROA not before:           Wed 30 Aug 2023 16:55:03 +0000
ROA not after:            Wed 28 Aug 2024 17:00:03 +0000
asID:                     263913
IP address blocks:        138.204.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fe:e6:a5:24:d9:fb:f8:d7:53:00:06:86:8e:2b:5b:73:66:fe:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:03 2023 GMT
            Not After : Aug 28 17:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:47:0e:71:58:fa:91:6b:3a:ab:47:d3:8c:dc:
                    10:b3:9e:31:c5:e6:1a:72:07:46:fa:0a:59:94:5f:
                    ae:0a:e8:a2:6d:cb:c8:db:8e:c1:7c:47:42:e1:10:
                    08:18:3b:f2:71:da:cc:40:d7:d3:22:96:74:1d:4c:
                    d0:ea:53:40:a2:69:04:de:2e:0f:0c:ff:f7:20:54:
                    32:ae:7a:c1:1a:0d:c2:b7:01:c9:4a:35:9c:24:85:
                    28:5f:5a:a8:b1:6a:53:c6:1c:7c:af:b8:95:05:18:
                    f1:b1:bc:8e:cb:b5:41:89:a5:ab:b1:28:cf:25:19:
                    9d:d8:53:4b:f5:19:c6:9d:63:6b:79:9a:0d:79:e1:
                    77:c1:b0:08:0c:c4:a7:45:69:d6:60:86:04:20:8c:
                    65:25:02:31:8c:06:ed:2c:4d:c3:7f:d5:1a:5e:01:
                    93:ff:19:52:8f:15:be:c9:e4:95:39:74:0e:6a:a2:
                    b5:e9:cf:d8:18:a8:65:ad:5e:b8:14:62:4f:d9:32:
                    a5:8c:ad:72:a1:ce:eb:f6:a4:59:5f:5b:a8:4b:c5:
                    db:16:ad:a1:29:8b:ff:f8:8a:b6:d7:c5:fc:d5:51:
                    3b:c9:a0:81:51:69:4d:47:28:fd:91:af:c3:a6:65:
                    0f:0a:4d:59:61:c1:95:f4:fa:de:ef:e1:e7:e5:cc:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:EC:62:EC:FC:D5:89:61:33:C3:B4:62:DF:D6:40:B0:5B:9E:13
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234332e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:80:9b:e2:76:ad:f9:6e:fb:e7:27:7e:82:61:3f:b0:18:78:
         2e:bc:89:98:ec:a4:1f:cc:f6:fa:5c:74:c6:2b:c8:3e:b0:e4:
         69:a3:51:db:0d:f3:3e:ee:84:f9:14:03:13:91:1d:ce:fb:40:
         7c:db:c7:f9:83:d2:8d:56:39:e6:d8:b1:1f:20:cc:b6:19:f5:
         5e:1d:e3:c6:6f:89:e3:3e:7d:39:0a:23:bf:67:b3:b6:4b:28:
         a3:4c:35:aa:15:c7:4c:50:60:de:e4:fc:07:bd:0d:55:e2:8d:
         cd:ca:a8:ea:52:e6:7a:a6:89:ac:aa:35:11:1b:e8:58:2e:67:
         d8:29:1c:72:9f:98:f9:1d:32:f0:8a:6c:49:5f:22:d1:b1:99:
         4e:cf:52:c8:12:7e:f3:3e:c9:c3:72:70:e5:98:b0:11:1d:a7:
         73:f1:67:cf:05:6e:c5:3b:64:72:f5:e0:0a:f3:43:2c:61:39:
         c0:69:fd:82:98:87:9b:e8:e4:83:34:0e:96:c6:93:7b:e8:ef:
         eb:74:42:f6:f0:1a:41:b9:55:7c:fd:dc:59:bc:8c:84:77:e9:
         02:f5:3c:b9:42:c8:f6:29:23:05:16:c2:09:3b:f8:1f:e3:c1:
         92:a0:97:47:8d:21:55:2f:58:16:08:5a:62:2c:b3:be:7f:38:
         e9:bf:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org