Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa
File:                     3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier:          Ft8MVCLS0NGSaHYhV01Ri9t4cQLp2MK0tsZ6JuKxsWs=
Subject key identifier:   90:F8:81:19:AB:6D:E4:F0:84:06:1D:C3:63:06:4A:AA:E3:6A:14:B5
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       623F3656801DCBD7742DE474177C5AE27D8C99F5
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa
Signing time:             Thu 10 Nov 2022 18:35:24 +0000
ROA not before:           Thu 10 Nov 2022 18:30:24 +0000
ROA not after:            Thu 09 Nov 2023 18:35:24 +0000
asID:                     264215
IP address blocks:        138.99.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:36:56:80:1d:cb:d7:74:2d:e4:74:17:7c:5a:e2:7d:8c:99:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Nov 10 18:30:24 2022 GMT
            Not After : Nov  9 18:35:24 2023 GMT
        Subject: CN=90F88119AB6DE4F084061DC363064AAAE36A14B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:76:60:9f:9f:19:d2:07:ca:14:ad:fa:17:
                    c4:f9:a9:a2:ce:7f:51:b8:72:32:b6:dd:83:f5:b8:
                    47:8f:11:52:40:ca:41:56:86:6c:47:0b:45:27:e5:
                    60:49:6e:16:08:e1:7f:36:11:03:c3:22:5e:74:3b:
                    5b:55:3a:b0:61:ec:4e:8d:52:c2:fd:a9:60:66:7c:
                    a5:7e:10:3e:53:9a:8b:23:5d:91:ef:97:a9:7e:09:
                    d4:b7:b8:82:ba:e7:d3:81:d5:99:d5:f5:c9:bf:46:
                    8f:33:93:a0:f7:f7:39:b4:e3:aa:67:0a:57:bf:4a:
                    2d:ad:dd:eb:ab:5f:19:03:29:1d:05:17:86:cb:71:
                    88:fd:52:6c:34:4d:c6:6e:9e:cb:5a:11:10:31:50:
                    9a:7c:b0:fa:6b:aa:9c:dd:50:14:d6:2f:c2:a9:e1:
                    01:5d:89:34:d2:27:6d:ad:d9:85:82:86:f9:ba:04:
                    00:82:59:af:f8:17:52:ce:8a:69:e4:29:54:76:6c:
                    e0:95:cd:35:af:a4:8a:d1:b6:a2:d6:48:a9:36:ba:
                    11:b5:cf:39:4f:8d:dc:23:db:30:3b:26:dc:52:be:
                    a7:79:82:8a:30:c4:8c:a1:8d:45:54:ba:5d:59:f5:
                    0b:21:ba:fd:30:31:79:73:bb:da:d4:c1:08:38:fc:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:81:19:AB:6D:E4:F0:84:06:1D:C3:63:06:4A:AA:E3:6A:14:B5
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133332e302f32342d3234203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:3b:ce:6b:36:5d:27:fb:14:1f:12:93:ad:a5:5c:2f:45:b6:
         d9:7c:3e:0f:29:c9:2a:eb:ea:63:47:4c:29:c6:5a:b8:cd:74:
         64:53:dc:c5:a3:01:9e:93:0f:7e:32:c8:c2:2b:59:68:58:c8:
         2d:74:77:f8:7a:79:2a:b0:2e:98:d5:4e:6b:08:97:85:c0:77:
         a9:68:dc:5f:85:5d:91:a2:e2:fe:9d:3e:10:0a:4d:fa:d6:87:
         6e:bf:98:cc:c2:95:8a:2d:cb:f3:74:e2:0a:a4:7c:9f:47:8a:
         61:49:ff:71:c4:97:85:ad:d8:c6:b2:d1:e9:06:d0:84:e3:7e:
         67:e2:8f:60:82:f6:d9:41:fa:f5:c5:62:84:9c:89:60:f4:d7:
         de:53:8a:47:c0:e7:73:b3:0d:1b:0d:a1:d0:d4:d9:e7:e5:d5:
         c9:16:95:70:a0:b9:7b:78:0b:94:33:f4:b5:4b:fd:d8:e3:e2:
         37:61:01:17:55:08:89:99:f9:e6:fe:74:88:f0:b4:1b:df:e3:
         cd:38:39:ef:ab:78:5a:be:08:c1:01:2e:93:e6:08:e4:9f:57:
         75:34:45:82:36:a0:b5:cb:db:48:b5:31:79:38:5c:74:b7:32:
         63:a2:1a:3e:2a:cd:8c:f5:9c:37:92:fa:9e:5e:07:2f:82:8e:
         95:0d:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org