Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139332e302f32342d3234203d3e20323633393336.roa
File:                     3133382e3231392e3139332e302f32342d3234203d3e20323633393336.roa (raw, json)
Hash identifier:          +8eKKYX9X8qQamMEJ+jVo6P67/cJj3fpgg05TjXYxws=
Subject key identifier:   55:DD:72:44:BD:8D:4F:23:55:CA:F7:DF:EC:A9:A6:F0:99:41:F9:19
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       22CD2CC49BB2EDC6A1C2D2E15A22CF1F0D423A95
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139332e302f32342d3234203d3e20323633393336.roa
Signing time:             Fri 13 Oct 2023 17:09:28 +0000
ROA not before:           Fri 13 Oct 2023 17:04:28 +0000
ROA not after:            Fri 11 Oct 2024 17:09:28 +0000
asID:                     263936
IP address blocks:        138.219.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cd:2c:c4:9b:b2:ed:c6:a1:c2:d2:e1:5a:22:cf:1f:0d:42:3a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:04:28 2023 GMT
            Not After : Oct 11 17:09:28 2024 GMT
        Subject: CN=55DD7244BD8D4F2355CAF7DFECA9A6F09941F919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:2a:d6:a2:af:34:32:ec:90:08:cf:b7:c8:
                    7c:17:4e:c4:25:88:8b:d1:95:40:16:14:24:0e:66:
                    c7:8e:01:fb:db:33:dc:10:1c:2e:a0:e9:cd:ca:da:
                    f4:be:b8:3e:ab:e3:56:7d:e0:b3:41:2d:74:74:43:
                    a6:37:ff:e9:1e:fb:f1:80:23:0e:ac:69:37:f1:98:
                    c9:82:32:bc:44:ac:06:da:b8:bf:f7:37:0d:07:e9:
                    11:63:6e:50:3b:b6:f5:2f:6b:2c:dc:41:16:87:9e:
                    1f:65:43:d9:c2:a3:16:bd:12:84:32:29:79:9a:50:
                    2e:c6:47:09:ae:5a:bb:55:d8:e0:b3:84:c8:64:e7:
                    36:0a:64:e7:de:93:c8:fb:93:ad:3a:4e:88:43:eb:
                    84:81:0f:4c:b0:07:e1:93:99:43:1c:c5:4e:ab:92:
                    b7:91:f2:67:4c:bf:68:bb:7a:03:af:60:33:ff:96:
                    00:ef:ad:3b:d9:70:5c:32:11:61:5f:dc:2f:67:c4:
                    fc:4c:2b:77:e7:0a:05:1c:de:b3:fc:0f:16:87:7a:
                    09:67:ea:d9:d4:b6:4e:ae:da:e1:74:93:19:41:76:
                    20:74:3f:c3:9c:88:c8:99:eb:d7:5c:b5:cb:63:8c:
                    a5:c7:cb:bc:6b:3a:43:76:c0:8e:ac:c3:cd:ca:46:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:72:44:BD:8D:4F:23:55:CA:F7:DF:EC:A9:A6:F0:99:41:F9:19
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139332e302f32342d3234203d3e20323633393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a1:22:a2:f3:5f:f9:14:98:9a:df:5b:7e:13:4c:80:64:58:
         e3:fc:f2:90:89:fa:e2:f5:1a:21:6f:c1:ac:ab:21:cd:13:55:
         a1:9a:76:71:5a:e0:af:ef:fa:b2:8c:7b:79:f2:1a:9d:7b:c8:
         9e:10:10:2b:d8:3d:da:88:62:f2:ff:77:83:83:cd:26:e0:47:
         d7:23:ff:33:77:9e:e5:57:9d:be:66:74:d7:6d:77:21:8e:18:
         cd:b8:2c:7c:5b:7d:75:24:85:a9:46:3b:64:69:32:3a:36:d6:
         9a:db:e6:16:70:e3:dc:09:bb:ec:9b:86:8f:e7:4e:71:1e:0f:
         73:93:fa:2e:4c:56:1b:9e:2c:62:47:24:22:d7:19:86:a3:28:
         4d:c8:16:f5:da:da:ae:90:67:f4:fd:3e:56:43:84:d4:e6:f2:
         9d:d2:78:78:96:4f:29:8b:b0:d2:93:fd:64:d9:7a:2e:4f:66:
         0b:42:3e:ae:4f:d8:7a:b1:44:d0:19:2a:b2:ba:45:27:a7:6d:
         dc:0a:25:25:ef:6b:bc:d6:4e:c4:84:77:f8:9d:0f:de:a2:8d:
         f1:2b:88:61:a3:28:c5:eb:52:02:77:0c:08:25:1c:ef:c0:23:
         8c:ee:ec:12:f6:ff:76:b2:6f:4d:ef:d7:e7:19:08:b1:97:08:
         27:0c:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org