Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
File:                     3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          aZk1AEJCL1/tni7YMeYKC1rX/LazKsQ4uCpES2HTu6M=
Subject key identifier:   59:8F:94:2C:73:A1:D1:27:2B:33:27:92:A8:C1:16:FD:A1:2A:C2:1B
Certificate issuer:       /CN=B33C25921027247BC1670F9F632C29DCD8B421BB
Certificate serial:       31F00D54D7FA024CDB8F68CA9810397E7C54A3FB
Authority key identifier: B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
Signing time:             Mon 25 Dec 2023 05:32:57 +0000
ROA not before:           Mon 25 Dec 2023 05:27:57 +0000
ROA not after:            Mon 23 Dec 2024 05:32:57 +0000
asID:                     267220
IP address blocks:        138.219.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f0:0d:54:d7:fa:02:4c:db:8f:68:ca:98:10:39:7e:7c:54:a3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B33C25921027247BC1670F9F632C29DCD8B421BB
        Validity
            Not Before: Dec 25 05:27:57 2023 GMT
            Not After : Dec 23 05:32:57 2024 GMT
        Subject: CN=3082010A0282010100B3EA221F2D9F064AAB013658B9BA3A616045A66C5D62CF759E21B73C18216F1C24442A88C5F4FD2649A7438008117182585BACF73650810529A96267EB6BFA8C924A86C59A3FE914BA4FDF78D3A7CF506F011A2D6AAF5C991D2DA9744BCD2C94CE14081A4169D13EF008E75AAA1257CCA1D218A24E683833AA24B97BF7AB0B1524AA4BBD82E4AD02994114528E14735877DE65152407B1720FFDB57BD4C7A8A3DE3653C05478AE51CE7DEFDCE89B96ABBFD216DEE75223450800F18079E8E7E4518E0BD1E826BA6500109353F3AC725BB829E0E8B08B2A7216854853FD8752A9CF6B86A051BE5229CCDED08EF33AEF87581405F44A3666B16FFEC28801FF7E950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:22:1f:2d:9f:06:4a:ab:01:36:58:b9:ba:
                    3a:61:60:45:a6:6c:5d:62:cf:75:9e:21:b7:3c:18:
                    21:6f:1c:24:44:2a:88:c5:f4:fd:26:49:a7:43:80:
                    08:11:71:82:58:5b:ac:f7:36:50:81:05:29:a9:62:
                    67:eb:6b:fa:8c:92:4a:86:c5:9a:3f:e9:14:ba:4f:
                    df:78:d3:a7:cf:50:6f:01:1a:2d:6a:af:5c:99:1d:
                    2d:a9:74:4b:cd:2c:94:ce:14:08:1a:41:69:d1:3e:
                    f0:08:e7:5a:aa:12:57:cc:a1:d2:18:a2:4e:68:38:
                    33:aa:24:b9:7b:f7:ab:0b:15:24:aa:4b:bd:82:e4:
                    ad:02:99:41:14:52:8e:14:73:58:77:de:65:15:24:
                    07:b1:72:0f:fd:b5:7b:d4:c7:a8:a3:de:36:53:c0:
                    54:78:ae:51:ce:7d:ef:dc:e8:9b:96:ab:bf:d2:16:
                    de:e7:52:23:45:08:00:f1:80:79:e8:e7:e4:51:8e:
                    0b:d1:e8:26:ba:65:00:10:93:53:f3:ac:72:5b:b8:
                    29:e0:e8:b0:8b:2a:72:16:85:48:53:fd:87:52:a9:
                    cf:6b:86:a0:51:be:52:29:cc:de:d0:8e:f3:3a:ef:
                    87:58:14:05:f4:4a:36:66:b1:6f:fe:c2:88:01:ff:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:94:2C:73:A1:D1:27:2B:33:27:92:A8:C1:16:FD:A1:2A:C2:1B
            X509v3 Authority Key Identifier:
                keyid:B3:3C:25:92:10:27:24:7B:C1:67:0F:9F:63:2C:29:DC:D8:B4:21:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B33C25921027247BC1670F9F632C29DCD8B421BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/0/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:7e:c7:7c:40:6d:13:cc:dd:72:04:61:c6:62:43:b1:74:
         a6:92:5d:5b:89:b1:94:a1:7d:f4:04:d7:25:f6:e5:d9:88:48:
         26:e2:9a:25:e2:27:0e:2e:ec:0f:2f:23:58:1b:81:ca:38:de:
         59:0a:34:a0:3c:a5:cd:13:fc:f4:44:f9:79:49:1b:91:8a:05:
         d1:4b:8c:c0:c4:2e:38:dc:ef:78:1d:14:18:ba:e9:81:6e:1f:
         b7:c1:d2:cb:d8:b9:28:68:54:3e:49:24:d8:e4:fc:84:b0:81:
         25:d1:f4:67:9b:91:9c:9b:aa:2c:5e:89:91:90:d3:9e:1f:20:
         f0:6c:d5:5e:0d:af:dd:e5:eb:f0:6c:64:e3:7f:86:05:82:2e:
         65:b5:91:34:a4:1b:16:70:69:c1:5a:34:0a:a2:46:e9:41:1e:
         e5:69:1a:51:6b:db:ad:25:76:2f:af:f2:92:36:28:ca:de:df:
         89:56:40:7d:f7:5c:41:58:d8:41:28:ef:55:e3:c3:04:a8:d0:
         ff:9e:97:01:e6:69:ed:15:4d:24:fc:41:56:7d:c6:38:b9:21:
         2d:24:4a:2d:25:48:bf:b9:7d:23:f6:17:f4:0d:77:c1:8b:fe:
         b5:7b:51:39:0e:21:d7:56:9a:32:62:e9:10:5e:ed:39:29:c4:
         78:d2:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org