Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3232203d3e20323634323039.roa
File:                     3133382e39372e3232302e302f32322d3232203d3e20323634323039.roa (raw, json)
Hash identifier:          1ZMB80cdWVVWvkD1q4K++7MjmrkjU7Ylc1GhoQRiW14=
Subject key identifier:   4D:B0:7F:7D:49:EB:91:59:AE:53:F7:23:DB:05:DC:69:1E:08:8A:97
Certificate issuer:       /CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
Certificate serial:       6DA42786BA907FB97FBBBE48CF6190A935EA3B55
Authority key identifier: 12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3232203d3e20323634323039.roa
Signing time:             Wed 17 May 2023 21:32:41 +0000
ROA not before:           Wed 17 May 2023 21:27:41 +0000
ROA not after:            Wed 15 May 2024 21:32:41 +0000
asID:                     264209
IP address blocks:        138.97.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a4:27:86:ba:90:7f:b9:7f:bb:be:48:cf:61:90:a9:35:ea:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
        Validity
            Not Before: May 17 21:27:41 2023 GMT
            Not After : May 15 21:32:41 2024 GMT
        Subject: CN=4DB07F7D49EB9159AE53F723DB05DC691E088A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:66:73:a5:23:05:3e:12:25:b8:1b:7d:5f:
                    4b:f7:8c:e2:44:ea:c6:83:27:da:1e:94:d1:7f:52:
                    61:3f:a0:ad:0f:ee:d1:ed:19:45:8e:28:40:9c:6a:
                    79:9b:60:be:4a:39:8e:80:e4:f4:76:c9:e8:8d:23:
                    83:a1:7a:28:e3:b3:36:25:0a:20:bf:89:9d:79:bb:
                    6c:21:97:43:52:a5:56:8c:44:0b:01:12:08:c7:d3:
                    e1:06:b1:40:f1:2c:2c:1f:8a:41:a3:85:27:ae:d3:
                    fb:63:dd:4d:42:aa:1b:90:e6:39:d2:93:b6:8a:06:
                    29:08:54:08:90:18:fc:cc:9b:42:63:79:11:b9:6f:
                    94:51:c7:29:01:9d:cc:5f:b1:a9:ff:b8:14:ca:9c:
                    ae:a8:00:2a:ac:83:72:3f:d8:42:5b:cb:fc:65:5a:
                    33:45:8f:09:9a:28:c1:a9:40:e7:61:b8:09:64:d1:
                    5c:63:d3:78:90:8f:25:2f:64:11:18:4a:c0:ff:3b:
                    7d:c6:9f:95:0d:ef:87:ef:07:1e:01:9c:4f:84:0f:
                    6c:2d:a5:dc:ab:7f:c3:43:8c:00:de:a5:d5:29:dd:
                    48:6c:8e:b4:8e:4a:8d:51:38:9a:51:90:74:ad:de:
                    1d:a7:24:04:0b:21:74:89:a0:9b:5b:90:06:8e:7f:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B0:7F:7D:49:EB:91:59:AE:53:F7:23:DB:05:DC:69:1E:08:8A:97
            X509v3 Authority Key Identifier:
                keyid:12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3232203d3e20323634323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:68:a5:b6:bd:7b:eb:f3:e1:cc:50:ac:4a:f2:95:bb:b0:
         4c:25:5d:30:a7:bb:3b:99:42:c7:8a:77:1a:be:e5:87:b5:68:
         db:a4:ff:f8:02:c7:3b:d2:fc:1b:79:a0:b4:fa:79:c2:3c:9b:
         7a:9c:48:3d:45:8d:b9:74:0a:46:1b:a8:15:d9:8f:a5:2e:2e:
         89:37:ae:d1:02:25:a1:4d:74:b3:6e:e4:9e:36:c0:97:8f:c8:
         24:e5:17:59:c2:7c:3c:96:73:e9:c2:02:07:46:b2:36:d3:28:
         18:ab:b7:f0:d0:fb:42:51:c4:14:86:e5:f7:c3:d2:ff:b3:92:
         e4:95:44:2b:6c:f6:96:51:e4:f5:69:ee:aa:80:62:fa:93:ff:
         ee:51:10:7f:26:45:3b:10:43:be:93:74:6c:bc:c1:48:ae:a3:
         5f:a1:a3:f8:be:ea:74:b3:06:50:c1:8e:90:30:7c:79:ac:8e:
         22:e8:96:aa:a4:ed:64:0e:e7:31:ef:0b:35:62:1d:34:46:80:
         72:7e:9a:fa:48:47:ec:f7:5b:c7:04:15:6e:ee:02:3c:88:0e:
         01:75:d6:7c:54:07:2a:4a:a7:21:f0:de:76:a7:e8:ec:51:46:
         bb:b6:63:60:0d:64:f7:d1:e0:89:b2:bc:33:f3:47:08:3d:7e:
         c6:6c:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org