Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234362e302f32332d3233203d3e203532383733.roa
File:                     3133382e3231392e3234362e302f32332d3233203d3e203532383733.roa (raw, json)
Hash identifier:          fPUYeXO7uGjesx9Asv+lqiSvhivufVNC1wtr9bTLowo=
Subject key identifier:   91:E3:23:CB:9A:4A:24:84:B9:BA:BB:25:88:96:31:97:64:36:F8:01
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       462A851136619CB978E08A9FFDA9B9710ABD73D5
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234362e302f32332d3233203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:42 +0000
ROA not before:           Sat 27 Jan 2024 23:05:42 +0000
ROA not after:            Sat 25 Jan 2025 23:10:42 +0000
asID:                     52873
IP address blocks:        138.219.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2a:85:11:36:61:9c:b9:78:e0:8a:9f:fd:a9:b9:71:0a:bd:73:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:42 2024 GMT
            Not After : Jan 25 23:10:42 2025 GMT
        Subject: CN=91E323CB9A4A2484B9BABB25889631976436F801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ef:e4:8b:d2:65:2c:a4:2a:fc:2a:6a:79:74:
                    f3:2e:56:5f:24:e8:8a:39:03:35:0d:e1:28:a4:50:
                    2a:17:b8:ae:fa:f2:e4:b9:57:04:6d:3c:fb:8d:a3:
                    3f:69:5c:d3:34:24:64:1a:b7:09:ba:4d:1f:35:d9:
                    34:8d:e2:7b:a3:7d:00:99:48:2f:34:82:10:58:51:
                    53:d1:a0:19:48:53:2d:67:06:6a:ad:02:91:a7:6e:
                    08:b1:14:81:a9:57:71:52:39:a5:b7:9d:5b:23:40:
                    1e:c0:ab:59:99:20:29:ff:85:bc:d2:b2:ba:80:d6:
                    7a:e0:93:72:b9:f1:f5:99:fc:a1:3a:f1:a4:9c:94:
                    16:3d:74:81:ba:df:80:6e:3b:ab:2d:db:3d:79:82:
                    1f:87:8a:84:0e:79:da:b9:97:e0:7c:4e:4e:62:06:
                    d3:b4:6b:9f:7e:28:33:5d:fe:fa:76:11:86:72:64:
                    02:42:5e:f4:10:16:31:1b:d9:9a:bc:aa:af:78:5c:
                    17:dd:29:6d:e5:70:79:ef:45:f4:36:aa:e7:af:1a:
                    f7:92:99:ac:de:f6:1a:92:b6:7c:9e:c3:12:00:ef:
                    1c:c7:e4:1e:a3:1a:5d:ef:f9:ed:2e:28:a5:c2:09:
                    d4:5c:bb:b8:df:4c:cb:79:c1:e9:01:24:37:c5:0c:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:23:CB:9A:4A:24:84:B9:BA:BB:25:88:96:31:97:64:36:F8:01
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234362e302f32332d3233203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:38:b5:a9:d6:52:a5:84:5d:b8:59:5b:9c:5c:9b:68:28:58:
         16:21:82:5e:84:59:82:33:a4:ee:aa:fa:d0:34:d1:5a:5a:5a:
         e2:e4:2c:2e:b7:36:55:4e:0d:3b:90:4f:8b:62:37:b8:d2:b7:
         28:06:37:c3:5e:33:b0:dc:e4:6b:53:ce:75:6b:45:4a:f6:b3:
         cd:f7:27:41:5d:12:af:42:ee:b8:84:00:c0:df:94:06:68:89:
         83:47:f0:83:d9:f8:ea:51:56:c0:40:90:81:93:58:09:23:ce:
         28:61:49:c6:0c:fe:cc:c4:87:62:a3:08:73:21:ac:ff:7b:ee:
         2f:fe:1f:63:52:99:5d:7f:a0:26:6f:16:63:22:7a:fc:e0:7a:
         17:7a:de:69:64:bc:1d:f3:2a:c3:e9:f7:f2:5e:d7:f3:9a:3e:
         fb:5e:8d:fd:08:e9:8d:8f:34:cf:9c:61:9e:40:35:49:a6:8d:
         db:ee:c4:67:07:5d:01:70:37:fc:fb:77:2f:84:71:a2:06:0f:
         d4:27:5a:39:10:17:f7:90:2f:37:d7:1a:12:74:df:13:be:cc:
         1f:e4:bd:68:03:6d:d0:72:5b:60:37:d8:fb:15:8b:e9:bd:3b:
         bd:b5:03:6c:d2:44:c4:0a:e2:47:e0:1c:f4:1b:04:bb:b7:f4:
         07:0e:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org