Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3234203d3e20323633303733.roa
File:                     3133382e3231392e3234302e302f32322d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          Ub4txBe/8FH8cTa3dtpiIuXZDgxj3CPCfNbHJV5pKOY=
Subject key identifier:   01:79:A7:D6:FD:CF:1C:3C:84:9E:1B:ED:48:FE:18:F2:15:8A:78:3E
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       514E281E6FAB0767FCD39358051A96FC696A8CEC
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3234203d3e20323633303733.roa
Signing time:             Sat 23 Apr 2022 13:53:21 +0000
ROA not before:           Sat 23 Apr 2022 13:48:21 +0000
ROA not after:            Sat 22 Apr 2023 13:53:21 +0000
asID:                     263073
IP address blocks:        138.219.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4e:28:1e:6f:ab:07:67:fc:d3:93:58:05:1a:96:fc:69:6a:8c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 23 13:48:21 2022 GMT
            Not After : Apr 22 13:53:21 2023 GMT
        Subject: CN=0179A7D6FDCF1C3C849E1BED48FE18F2158A783E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:73:e2:48:08:03:44:d1:96:92:91:11:ea:
                    dd:7d:56:e2:3e:a1:c3:23:51:e4:19:f2:ab:38:5a:
                    8c:e6:b1:76:58:f1:be:ea:bd:af:68:4b:02:7e:ad:
                    bf:f1:9a:52:14:c5:56:40:20:7e:bf:4a:e4:a8:15:
                    e0:bf:a9:e8:94:d3:9c:2f:83:c2:3f:4f:e0:63:da:
                    fe:67:41:64:a3:28:99:02:81:30:08:eb:bb:cf:50:
                    94:2e:82:ee:34:85:ce:12:56:2e:e9:52:e3:3d:74:
                    1b:3e:06:92:05:f6:83:8f:93:c9:3c:6f:00:d4:14:
                    d0:13:bd:fc:04:23:11:e4:51:ef:39:97:60:f6:e3:
                    fe:6b:eb:40:db:0f:1d:d5:91:05:8e:40:aa:d7:13:
                    52:b4:a2:f6:39:0b:8f:fa:b8:de:d3:f7:28:e9:8d:
                    1a:99:34:76:6d:38:0f:ac:d0:b8:72:9d:f7:84:ab:
                    9b:6a:0c:22:b2:a0:df:70:09:d4:c5:65:89:e9:7c:
                    9a:07:b1:3f:c0:72:0f:98:e8:c7:1c:e3:07:3a:bd:
                    bc:d0:84:fe:55:d5:b2:48:82:fd:8b:bb:45:5f:c4:
                    55:f2:99:7f:25:db:0a:e0:fa:8e:ff:51:db:33:bd:
                    96:af:fb:2a:a1:f4:e3:f9:82:0d:4a:dc:bc:5a:19:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:A7:D6:FD:CF:1C:3C:84:9E:1B:ED:48:FE:18:F2:15:8A:78:3E
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/3133382e3231392e3234302e302f32322d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:24:b2:16:13:54:67:24:2e:f4:0f:b1:9d:8e:66:1a:4e:75:
         5a:32:3f:88:ee:bc:24:92:00:c0:30:50:c9:33:c8:fc:d3:9c:
         85:f0:fc:d2:fb:f6:e4:76:ce:fd:31:98:92:c6:27:7a:c9:77:
         b2:ac:60:57:32:31:a3:b4:d8:eb:3b:d3:d7:71:2f:e6:44:87:
         aa:62:e6:d0:ab:d2:91:38:f0:24:c7:47:e8:84:37:d0:a4:c1:
         a2:fd:78:2f:1f:4c:e1:e8:a9:3e:bd:f7:aa:57:2c:6f:21:84:
         c3:35:8d:61:38:4f:c7:aa:cb:62:bb:22:e3:69:7e:fb:63:19:
         66:11:71:2b:c9:d9:dd:c9:83:23:61:02:dd:54:c3:eb:47:87:
         a5:42:7e:80:fc:81:6b:b9:ae:69:7f:7a:a2:36:75:38:8e:0a:
         45:c2:84:76:91:66:1e:0c:f2:f8:24:48:68:29:45:7a:e1:07:
         55:e7:1f:d2:f5:75:15:40:16:13:8b:6e:df:89:b9:28:15:fa:
         f2:a0:bc:5b:53:e2:59:44:96:6e:20:ee:bc:c7:de:05:0a:1c:
         ea:a6:ca:9f:ff:5f:0e:5c:bf:f0:17:9c:af:75:1a:c5:d3:1f:
         6f:b3:7a:c9:2c:26:30:16:a4:24:b6:82:67:f5:a8:29:c4:80:
         ec:39:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:14 2023 by rpki-client on console-fra.rpki-client.org