Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa
File:                     3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          g5O0719vVm0bL7cC1uxXl3e7EOzA2LfLt06St1AW0AU=
Subject key identifier:   03:9F:8B:50:CD:2B:60:39:3C:BC:38:FC:33:44:1A:6D:61:94:E1:E7
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       28B1AB3710D7EC15BF0B036D089C163D4DC1164F
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 20:52:50 +0000
ROA not before:           Wed 12 Jul 2023 20:47:50 +0000
ROA not after:            Wed 10 Jul 2024 20:52:50 +0000
asID:                     263880
IP address blocks:        138.118.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b1:ab:37:10:d7:ec:15:bf:0b:03:6d:08:9c:16:3d:4d:c1:16:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:47:50 2023 GMT
            Not After : Jul 10 20:52:50 2024 GMT
        Subject: CN=039F8B50CD2B60393CBC38FC33441A6D6194E1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:3d:c9:71:f8:72:67:e1:7e:08:1d:50:68:
                    7b:ad:41:cb:65:1d:e2:09:9a:f9:3f:62:28:88:50:
                    91:58:8a:20:83:a6:b5:ed:b1:9d:23:43:0b:00:45:
                    16:cc:4d:83:5a:4c:95:eb:86:16:ef:e8:ca:81:7c:
                    f8:69:1d:b8:17:3d:d7:28:f2:71:f6:68:3b:34:33:
                    ae:3c:c1:03:50:d8:38:c2:91:87:6a:07:ea:46:60:
                    9e:7c:bd:72:fc:92:fe:62:0b:0c:b3:6b:3f:65:96:
                    24:c6:e2:14:5d:9e:bc:35:24:14:e1:a3:c5:0f:57:
                    0d:b8:6f:0a:a8:52:7a:49:28:00:12:81:c3:1b:d8:
                    eb:6e:ef:10:58:f8:44:a7:fa:c0:8b:fc:ff:4d:cf:
                    a7:24:8a:86:8b:38:98:bb:f7:45:5a:81:cd:02:32:
                    35:ce:de:4f:5d:49:58:81:21:6e:fe:9b:d2:b3:48:
                    6f:37:fa:a9:28:c3:5a:f6:e5:4c:fd:82:28:47:6a:
                    fb:48:e4:c6:02:36:cb:f2:75:dc:89:dc:d6:98:d8:
                    bb:05:db:07:0b:a7:93:04:00:1b:c0:49:4a:51:44:
                    e0:23:c3:4d:44:b2:08:ce:8e:8f:0c:76:1d:45:1a:
                    2d:df:91:2d:42:5c:b0:2c:03:27:7f:ef:46:ba:fb:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:8B:50:CD:2B:60:39:3C:BC:38:FC:33:44:1A:6D:61:94:E1:E7
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:9e:a0:e6:c9:6b:1e:7b:d7:c1:dc:78:a9:15:b1:27:6d:
         81:16:65:27:b7:57:c4:6e:53:ac:c8:35:ae:93:95:bf:b9:7a:
         ad:a3:49:2e:21:17:97:7a:2a:f5:a7:e2:9f:c8:3a:a0:cd:59:
         bc:01:b2:7b:32:21:76:31:03:03:87:d5:f3:a6:bc:f8:a6:b6:
         8a:06:a3:b2:74:c6:d7:68:a3:c1:33:ac:83:7d:57:c5:b3:74:
         80:29:78:9f:e6:2d:76:3d:a0:6a:c2:6e:6b:c2:da:5b:bf:58:
         53:1b:35:59:3c:eb:b7:d5:cf:0a:29:06:1e:e3:0a:01:72:e5:
         99:4c:8f:53:71:9b:65:53:05:55:a3:c2:99:74:66:4e:cc:f0:
         8a:99:d7:9d:dc:44:15:06:0b:1b:5f:08:65:e9:00:96:8c:73:
         61:28:fe:47:e9:5a:fb:e0:fc:07:ea:ba:3f:07:54:a6:c1:1b:
         cc:22:b0:9f:66:4b:8b:b8:31:1f:9a:b8:71:c8:8e:fc:4d:e8:
         88:51:ac:3f:02:2b:27:1c:62:0f:ea:19:ce:55:1d:7b:09:a9:
         22:e3:ce:ea:03:92:38:59:b2:1d:5a:5e:b9:e8:59:17:63:8c:
         5a:b3:76:49:b0:80:c9:d6:5a:18:d5:7e:2c:1f:59:60:be:e1:
         9c:05:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org