Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          5APwMVqn8CNh4feGWgTDR2gTLdlC2whAQWu4UI54aE4=
Subject key identifier:   86:A4:11:52:AA:79:C5:A3:9F:DB:4B:76:C4:36:55:BB:1E:62:F4:BC
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       06B3B9E29119AC6BE2173CE7D74432D859FEAD25
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:43 +0000
ROA not before:           Sat 27 Jan 2024 23:05:43 +0000
ROA not after:            Sat 25 Jan 2025 23:10:43 +0000
asID:                     52873
IP address blocks:        138.219.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:b9:e2:91:19:ac:6b:e2:17:3c:e7:d7:44:32:d8:59:fe:ad:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:43 2024 GMT
            Not After : Jan 25 23:10:43 2025 GMT
        Subject: CN=86A41152AA79C5A39FDB4B76C43655BB1E62F4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:95:2f:29:8f:43:0f:99:67:d4:90:50:af:
                    54:dd:fd:f2:e4:1b:04:71:09:ff:e1:e6:ff:f6:dd:
                    f5:5c:63:aa:3a:7c:75:2d:a3:5b:09:ad:e9:53:f5:
                    c0:6c:79:81:3e:68:a9:9e:12:12:3c:31:55:b1:f0:
                    17:d9:12:9d:fd:9a:f2:92:c0:98:16:3b:87:13:ab:
                    4c:b5:13:8d:99:6b:1c:11:8a:b8:4a:27:a3:f5:a8:
                    b0:ba:61:d5:a0:c7:93:47:11:f7:1d:6b:89:d8:77:
                    8a:21:2c:02:07:06:cb:b2:03:3b:d3:b1:2e:76:2a:
                    74:87:4f:49:20:21:b4:d1:9e:7a:13:8c:3c:b4:d9:
                    aa:22:77:47:43:9d:a6:70:33:67:c4:c2:d3:f1:ba:
                    bb:8a:67:11:09:c0:f2:8e:27:bd:86:fa:54:e7:55:
                    f3:e0:88:ac:0b:56:2b:85:87:5c:cb:cb:3d:08:da:
                    c1:a2:e1:4f:d0:6f:9d:0f:8a:c6:2f:a1:19:2b:50:
                    77:b4:1b:dc:72:05:59:ae:92:59:aa:ba:a3:57:68:
                    96:2b:7d:4c:ee:cc:4f:9f:31:62:81:d6:17:2b:83:
                    a7:8c:f8:fd:a5:6f:e1:04:3c:07:35:59:8a:0b:fb:
                    56:c6:ca:03:80:66:ef:83:77:9a:48:a9:13:cd:48:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:11:52:AA:79:C5:A3:9F:DB:4B:76:C4:36:55:BB:1E:62:F4:BC
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:7f:24:f6:22:36:af:c9:18:75:4e:c5:c3:10:4e:bd:30:
         04:cc:0b:fd:ca:c0:05:22:68:10:a7:b3:4a:c8:c8:80:dd:9b:
         46:f4:2a:b4:6e:4c:fd:66:af:e8:59:0e:d8:d6:a1:17:12:f5:
         76:df:4e:65:93:a2:37:5d:5f:60:ee:a5:7f:61:b5:bd:ef:60:
         56:8a:d0:99:b4:24:43:65:e8:95:e8:79:3b:0c:08:fa:84:23:
         96:48:a8:fe:ba:44:bb:37:14:64:be:f3:1b:f9:1e:98:1b:f7:
         c9:dc:07:f2:44:47:dd:5d:a5:38:a3:83:ed:91:39:7f:4a:0d:
         58:e9:44:c8:2a:95:bd:81:1c:e7:98:d8:f2:21:70:84:24:6b:
         f6:62:ac:c0:b8:fc:af:31:07:fc:28:af:fc:fd:a4:10:a2:37:
         01:4e:d3:06:05:94:09:76:6c:86:6f:3c:97:79:13:6c:e8:f5:
         1f:da:09:35:8d:9d:ec:c9:82:3d:29:54:e0:9f:a4:64:a7:78:
         c2:61:eb:bf:0b:8f:70:9b:77:37:ba:ac:4c:c1:95:0d:9c:fd:
         68:15:c3:c7:7e:f4:57:6f:e5:05:15:a1:e0:de:66:4d:a1:03:
         d6:a2:6e:5c:a8:16:b7:b6:ea:40:6c:b6:7a:e4:d7:48:59:dd:
         65:4e:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org