Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa (raw, json)
Hash identifier:          6434efLrcQuTcr4Kr9hHIrVCRbO0Y4o5WDr6ueH0rao=
Subject key identifier:   88:60:0B:AF:B4:74:CA:DE:EB:13:9E:E0:DD:03:63:FE:CD:CB:A6:FE
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       3AA57E667440F254970FE5872AC963C35BE49E5B
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa
Signing time:             Sun 28 Jan 2024 02:01:13 +0000
ROA not before:           Sun 28 Jan 2024 01:56:13 +0000
ROA not after:            Sun 26 Jan 2025 02:01:13 +0000
asID:                     52873
IP address blocks:        138.219.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:7e:66:74:40:f2:54:97:0f:e5:87:2a:c9:63:c3:5b:e4:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 28 01:56:13 2024 GMT
            Not After : Jan 26 02:01:13 2025 GMT
        Subject: CN=88600BAFB474CADEEB139EE0DD0363FECDCBA6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:b0:82:d8:e3:fa:c1:51:70:61:84:95:bf:
                    64:44:26:dc:4e:56:28:00:30:d2:de:ab:a3:12:df:
                    72:9e:cd:25:f7:6f:b9:3e:31:f0:33:f6:da:0b:06:
                    6c:17:38:b2:e9:e7:59:42:55:53:9a:2b:b2:19:c3:
                    a5:7c:f4:ce:7c:73:84:7d:37:c6:96:1c:4d:9b:5d:
                    04:b2:43:00:9b:17:a0:7d:9d:14:9d:52:4d:ed:81:
                    cb:52:a3:a6:db:2f:44:9d:e4:04:66:76:3d:7a:dd:
                    ea:a1:2e:aa:9f:0e:84:24:8a:d0:fb:65:dd:93:9e:
                    77:1c:57:35:3a:63:ba:5a:44:b8:4f:81:22:4f:00:
                    3d:2d:60:9e:49:87:31:2e:1a:d1:5d:6e:77:f9:2c:
                    63:11:84:8b:cc:18:fc:50:91:7c:8a:29:53:97:8d:
                    ba:b2:d5:b1:58:cc:44:b8:cd:e6:05:f9:0c:3b:de:
                    84:c9:c4:bf:b4:35:5c:1a:25:ea:74:5c:57:e1:1e:
                    e2:d9:5c:b5:b6:af:fe:70:c4:3d:b7:f8:53:04:c4:
                    0a:d8:7d:cf:e4:01:28:4c:f7:0c:66:7b:90:c6:e8:
                    ab:26:58:e3:a2:9d:da:22:be:17:a3:10:e6:be:dd:
                    2b:44:ed:47:d9:56:3f:f0:da:2c:13:82:39:ee:b1:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:60:0B:AF:B4:74:CA:DE:EB:13:9E:E0:DD:03:63:FE:CD:CB:A6:FE
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:98:73:c2:e4:4b:13:89:2f:ca:5c:b3:87:35:fc:50:3e:
         f1:d0:3e:d5:e7:e1:59:70:3f:41:80:0c:1a:7a:18:12:8f:1f:
         c6:a9:5a:f9:da:90:38:bd:b1:81:b0:80:cd:fa:98:3d:14:32:
         f9:4c:9b:3b:07:26:7f:50:bf:8b:e4:98:b6:41:f1:f8:c8:0c:
         c3:e7:81:b2:ae:c6:a3:38:99:29:0d:76:1a:71:25:83:a6:fb:
         e3:64:87:38:f4:07:b6:e2:89:e3:9f:42:a6:72:c8:3a:cf:0f:
         9d:9d:3e:f7:31:11:b6:ce:22:c6:6c:dd:a3:e5:73:96:3a:24:
         85:bd:c9:17:93:3a:98:41:75:ff:5b:77:a8:45:10:5e:e6:a3:
         d0:1c:7b:e1:f8:7d:ad:f4:2b:e7:1c:1b:50:b4:70:cb:ec:19:
         13:9f:9a:0e:20:7c:6a:c8:a8:72:7e:39:f3:8b:92:eb:fe:a6:
         04:30:e6:0a:a3:ff:53:ec:00:ff:57:fe:2c:06:ac:be:59:39:
         31:34:d8:58:56:07:5f:06:df:90:f1:39:ab:2c:3d:97:db:e4:
         bf:71:6e:d0:12:9f:c7:8a:aa:83:ab:6f:50:55:22:99:c0:37:
         1d:50:aa:52:46:0d:c9:61:d9:74:74:12:bd:8b:94:91:ba:8c:
         eb:7b:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org