Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          x9SOB9QqgDyqyMzztBcpz1GLvwQK40Q2Jqp5Vw7jNSc=
Subject key identifier:   F3:0E:F6:61:27:D3:14:CA:B2:49:81:79:3A:F2:6B:69:96:E9:4D:6F
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       7163F2C1E4BB815770220277ABB85FCB7A74BCD6
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        138.219.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:63:f2:c1:e4:bb:81:57:70:22:02:77:ab:b8:5f:cb:7a:74:bc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=F30EF66127D314CAB24981793AF26B6996E94D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:51:e0:36:ed:5a:fb:9b:5d:a7:48:75:88:
                    71:ae:8f:ca:19:55:e1:fb:81:63:e0:ac:fd:81:0b:
                    d2:a5:cf:32:ec:e5:18:f6:b5:79:f7:52:59:56:86:
                    7d:3d:fe:49:9d:6b:66:03:cb:84:2f:40:be:31:65:
                    04:90:56:12:9e:86:de:df:49:35:22:e7:59:5e:33:
                    19:a4:15:a1:49:11:4f:89:1e:bf:ce:e9:ce:68:9b:
                    0f:7a:be:7d:61:21:83:fd:c8:17:6b:6b:06:6f:30:
                    79:50:3d:41:57:17:af:b4:e7:64:8b:b6:fb:79:2b:
                    b6:ce:83:b0:d7:d2:f3:9c:96:2b:29:24:bd:c8:32:
                    f7:cc:f2:b7:c9:5d:39:25:c3:29:fd:1a:a4:9f:45:
                    3a:d4:2b:66:08:36:df:78:1f:e4:9b:ba:48:69:eb:
                    f1:e9:f9:1b:34:b1:0e:ac:d9:0b:be:2d:d1:98:e3:
                    bf:b2:5a:6d:a2:53:50:2b:46:2e:8e:53:23:b8:0d:
                    20:d4:9c:3a:4d:8a:56:93:ad:fe:2b:2a:8b:46:4d:
                    d8:2b:05:c7:e1:e3:6f:98:a7:30:28:ee:b5:d0:bb:
                    8e:c0:c7:2f:00:24:bb:32:f8:91:76:1a:85:38:0b:
                    21:08:45:6d:7f:31:cb:9d:a6:37:e7:af:74:c7:33:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0E:F6:61:27:D3:14:CA:B2:49:81:79:3A:F2:6B:69:96:E9:4D:6F
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:02:05:ca:57:a0:34:c4:c1:93:fe:bb:15:35:3b:e2:9f:
         29:1c:cc:8c:5a:18:ec:12:37:82:27:59:40:27:f2:83:a0:a4:
         fa:54:b8:d6:f4:2b:99:fc:af:fe:2a:60:c2:e9:26:b9:bb:45:
         5a:d8:39:5d:c1:6e:f0:5d:a6:3c:8c:e1:f9:0b:95:fd:b9:a1:
         e7:a7:bc:3c:53:a9:3c:77:35:46:21:12:b6:e9:96:38:f1:4f:
         d3:6d:d9:81:77:b4:de:7b:54:78:14:1d:dc:c3:4d:93:3b:94:
         0e:39:9f:fa:54:8a:0f:d0:c6:0f:f5:ba:40:a0:1a:45:22:9d:
         6e:86:c0:26:08:08:2c:2c:a5:3c:26:08:8c:c4:a5:e8:3a:95:
         10:4f:a5:67:93:0e:46:81:b8:3f:09:ba:b1:d9:a8:35:bb:4d:
         b3:31:0c:8d:93:29:aa:5b:56:61:28:33:41:cd:1a:ee:81:38:
         0b:66:02:40:ad:a7:54:7a:ef:c1:79:36:40:94:03:8e:a4:15:
         cb:5a:5d:d8:98:36:43:02:cb:7b:b2:08:89:44:a2:02:b1:1a:
         31:61:6c:88:df:15:8f:fe:57:10:ff:6b:44:18:40:e0:38:31:
         d3:aa:25:ea:13:3a:c7:89:92:91:31:9b:d3:53:55:cd:bd:c3:
         d7:3a:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org