Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32322d3232203d3e20323634323135.roa
File:                     3133382e39392e3133322e302f32322d3232203d3e20323634323135.roa (raw, json)
Hash identifier:          D17lPOFvqKaCV7UcGnAPNPn0dY48ymhn/4idRywJWOs=
Subject key identifier:   B9:FB:7A:96:AB:AC:F1:1A:B9:1B:72:21:26:53:9D:30:FD:C1:A0:0A
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       72B3CE8B8DE32EE480F10ABBF09B8EE051E47A8A
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32322d3232203d3e20323634323135.roa
Signing time:             Thu 10 Nov 2022 18:35:14 +0000
ROA not before:           Thu 10 Nov 2022 18:30:14 +0000
ROA not after:            Thu 09 Nov 2023 18:35:14 +0000
asID:                     264215
IP address blocks:        138.99.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b3:ce:8b:8d:e3:2e:e4:80:f1:0a:bb:f0:9b:8e:e0:51:e4:7a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Nov 10 18:30:14 2022 GMT
            Not After : Nov  9 18:35:14 2023 GMT
        Subject: CN=B9FB7A96ABACF11AB91B722126539D30FDC1A00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:12:a2:a9:8f:30:e3:00:4c:88:a8:57:40:
                    42:79:02:02:5c:ff:f3:f7:c7:a8:67:1d:bd:21:fa:
                    b3:a6:a8:bf:4b:c1:09:2f:9e:11:09:f2:14:93:68:
                    e8:8c:b5:8f:d8:d3:9a:f4:92:f2:62:b6:30:8f:25:
                    e2:09:a6:06:30:58:02:f0:f8:51:c6:6e:f7:3f:72:
                    31:38:86:d0:0d:a0:97:2c:e6:d1:9b:da:d3:05:b8:
                    1c:97:6b:f1:c4:e3:0d:87:98:51:27:16:15:a7:58:
                    7c:5f:ad:ae:91:a5:2c:0b:ed:7b:07:b3:a0:18:77:
                    d6:fc:72:85:fc:93:b9:03:fc:d4:7d:ef:6d:fd:94:
                    97:35:68:b8:b1:55:36:d4:a0:52:a3:5a:d7:05:5f:
                    55:49:02:dd:73:2c:30:7b:94:67:f9:4a:d0:d9:25:
                    89:44:3b:ec:f8:ea:d2:bb:5d:eb:46:e4:42:e0:44:
                    c7:83:4f:ed:e3:b8:e5:83:25:90:e9:d2:24:a7:f0:
                    af:37:b1:fc:7b:d0:73:6c:7a:2b:12:f0:ed:02:77:
                    88:5a:04:82:8f:fc:04:84:7e:6f:65:aa:47:99:d9:
                    c3:a3:ad:c1:8d:7d:5e:45:b4:b5:b6:50:3a:d0:ee:
                    ce:57:d6:f5:b7:b0:7b:af:f0:2b:da:79:72:13:b8:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:7A:96:AB:AC:F1:1A:B9:1B:72:21:26:53:9D:30:FD:C1:A0:0A
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32322d3232203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:74:d9:da:55:3f:1b:03:09:c8:c7:fc:f4:c1:1b:2e:29:
         08:ff:1e:7c:1c:dd:cb:f0:2f:55:7c:19:77:53:82:5a:9a:30:
         1a:eb:a1:e3:f2:0a:02:43:0f:82:d9:16:5f:1b:04:d5:48:02:
         71:66:6b:91:40:1d:7c:ed:6b:05:ad:f1:a2:1d:15:79:dc:81:
         4e:16:91:be:e3:df:53:96:35:40:da:ee:9e:65:50:ab:1a:e0:
         f8:e1:2c:08:d8:93:93:3f:7c:55:22:3a:0b:3d:64:23:64:6c:
         74:79:04:03:a5:5d:2e:40:27:0f:85:8f:a8:06:3b:0d:2a:31:
         c0:78:a7:b5:f6:4c:87:c0:bd:a0:69:1b:85:d4:c7:8a:63:98:
         68:33:92:b1:cf:43:64:06:bf:57:b5:44:86:cb:b1:cc:20:8e:
         92:05:9a:79:bf:d0:d1:9a:89:49:cd:70:f3:01:f6:2e:c7:7a:
         18:bf:43:e6:90:3a:d9:83:ba:c9:b8:d4:b0:6c:a7:f0:ff:f4:
         c6:f6:75:d0:48:c0:1b:67:bb:dc:8d:e1:06:8e:42:71:85:8e:
         05:c0:40:f0:42:bc:9c:64:53:b2:25:9b:d7:ba:c3:e3:0f:04:
         45:ce:ac:c8:7a:d7:44:56:15:9a:27:63:71:8f:aa:3a:69:93:
         16:97:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org