Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa
File:                     3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa (raw, json)
Hash identifier:          X5w1PvpZTDdttYUOAZn+SHm0PHiG3ytHZfj7pTF2EFA=
Subject key identifier:   49:51:29:13:BD:FA:1E:55:A3:4E:13:0D:CC:6B:E8:97:F9:37:54:DF
Certificate issuer:       /CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
Certificate serial:       69A9C159CE87632814C935F38159EC4C7712EFDE
Authority key identifier: 16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa
Signing time:             Tue 25 Oct 2022 14:00:00 +0000
ROA not before:           Tue 25 Oct 2022 13:55:00 +0000
ROA not after:            Tue 24 Oct 2023 14:00:00 +0000
asID:                     262638
IP address blocks:        138.118.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a9:c1:59:ce:87:63:28:14:c9:35:f3:81:59:ec:4c:77:12:ef:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
        Validity
            Not Before: Oct 25 13:55:00 2022 GMT
            Not After : Oct 24 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:4d:db:46:a6:a4:53:5a:26:6a:fb:8c:ec:
                    45:d6:db:a5:31:5f:61:25:22:f5:b1:43:c2:8a:a1:
                    16:6e:30:83:d2:9e:05:b0:e0:e3:a1:a1:c4:ba:5d:
                    4d:03:af:90:74:b0:e2:9d:2c:2f:89:c8:c7:98:3a:
                    13:b9:f8:cb:fe:d6:01:d3:a4:3d:3a:ab:ee:05:ac:
                    f7:d9:01:e6:b9:97:2b:44:28:2b:80:7f:18:41:95:
                    f8:27:f2:e3:e0:ad:cc:4a:56:93:d1:dd:31:7b:0a:
                    e7:5d:d4:e2:ee:1b:d5:fd:96:e4:8b:7c:2d:6b:50:
                    6b:7d:1c:13:5e:54:85:9e:33:a9:ec:a4:86:bb:ae:
                    3a:b1:d9:05:60:6c:b5:2a:4c:bb:7b:05:b7:15:54:
                    9c:3a:c1:2b:05:45:cc:3c:61:b0:98:75:5e:c5:59:
                    fb:13:97:fa:6c:5f:11:c1:70:05:08:3e:7f:a4:fd:
                    3d:34:19:5f:a2:b6:5e:78:92:0b:28:e2:42:dc:4c:
                    23:a6:c0:99:ca:f6:6d:ba:e6:63:46:6b:5f:3a:6d:
                    6e:4b:d9:1e:d4:0c:57:75:5d:cf:0d:b9:06:9d:ce:
                    4f:21:8e:8e:75:b1:63:09:d8:41:e7:ab:b3:9c:4e:
                    03:53:b7:40:bc:01:0b:e1:c3:ef:79:f8:26:f0:b4:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:29:13:BD:FA:1E:55:A3:4E:13:0D:CC:6B:E8:97:F9:37:54:DF
            X509v3 Authority Key Identifier:
                keyid:16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3133382e3131382e3133322e302f32322d3234203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:2a:63:5b:96:bd:91:bd:7f:f4:1f:ac:21:a9:37:75:75:
         62:75:4e:91:2a:f6:7f:43:92:b7:63:b6:94:46:45:da:60:dc:
         0c:11:65:04:45:49:ec:7c:8c:ca:78:71:60:c3:f6:35:dd:b8:
         fb:ef:f1:64:77:e3:85:2c:e0:44:89:54:9d:08:48:08:9d:ee:
         7a:19:8a:4d:4d:a0:dd:bd:ed:b1:93:ef:ff:9f:eb:e4:66:2a:
         3d:99:91:57:43:d6:70:c1:d4:dc:7d:c9:05:29:58:4a:03:91:
         c8:3d:90:fb:08:16:0b:ab:96:2a:e8:f7:c7:d1:b5:37:90:96:
         08:92:7a:a1:41:88:90:e6:14:08:82:ba:99:d1:97:2e:11:ea:
         41:7e:54:e0:e9:fd:01:ba:bb:c4:b3:a8:9f:a4:11:aa:aa:11:
         f0:d7:e5:69:7c:26:e7:96:cd:1a:9d:f9:d4:f7:c6:01:8c:9e:
         28:0f:8a:73:3c:cf:85:a3:b8:1a:ad:db:ec:9c:cc:d6:bb:ba:
         3f:1e:88:a0:8b:42:77:19:02:fc:5c:16:27:6c:d0:0b:ff:a6:
         d8:3f:28:e0:f4:21:c5:ab:91:b9:77:c0:74:67:da:36:75:c2:
         01:ae:bd:25:e2:36:30:8a:54:76:48:33:ec:3d:86:7a:d6:d6:
         cd:ed:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org