Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          GLKbfgylYsIHclQqrdki9mY3B0tnlDXWLuQ9H+zDOnk=
Subject key identifier:   4E:62:FD:57:C4:D7:DF:8A:94:8A:6D:67:68:8C:84:7B:90:C1:FE:2A
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       343384DBA63167B41683181FA627BB0AECADA98A
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa
Signing time:             Thu 26 Jan 2023 07:02:51 +0000
ROA not before:           Thu 26 Jan 2023 06:57:51 +0000
ROA not after:            Thu 25 Jan 2024 07:02:51 +0000
asID:                     264242
IP address blocks:        138.117.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:84:db:a6:31:67:b4:16:83:18:1f:a6:27:bb:0a:ec:ad:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Jan 26 06:57:51 2023 GMT
            Not After : Jan 25 07:02:51 2024 GMT
        Subject: CN=4E62FD57C4D7DF8A948A6D67688C847B90C1FE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:cc:37:f7:59:e8:98:44:99:d1:95:5d:70:
                    d7:19:85:03:3a:6d:85:45:e1:e1:b9:c5:9e:a0:5c:
                    6c:d5:11:ba:39:f3:24:6c:e2:65:11:4a:df:0e:a4:
                    00:3c:fa:b1:d4:fd:99:06:3c:50:3d:25:97:b7:06:
                    2d:8e:1c:0b:98:98:7d:41:91:b7:b5:51:76:93:a0:
                    b6:93:1a:09:da:8a:38:53:69:f9:cf:9a:13:6b:a5:
                    cc:67:c8:5f:6d:fc:f9:50:ea:c6:09:52:39:a6:28:
                    c1:26:13:38:53:ae:a3:c3:c9:4d:be:0a:4f:20:5f:
                    36:7d:30:57:36:fd:b5:bd:70:4e:07:f0:56:f5:0f:
                    3f:43:14:09:f4:53:2d:aa:2b:89:7d:69:84:94:1b:
                    cb:3d:d9:70:dc:65:36:fc:10:c6:8e:3b:50:43:3c:
                    68:cd:6f:f1:14:35:ff:82:c6:af:83:2e:00:a8:eb:
                    11:66:07:d0:f9:73:7d:e8:7b:ac:26:be:2e:7b:6c:
                    25:0d:91:2c:fe:55:c7:e6:39:db:e5:dd:29:3d:69:
                    14:ac:d2:f7:fd:bc:b1:49:6c:73:f6:0f:79:65:c7:
                    d2:e8:b0:f4:e9:74:23:2d:b5:86:35:71:9e:db:14:
                    cb:f4:3d:64:a9:e2:d9:a9:30:d8:46:e9:b2:7e:ad:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:FD:57:C4:D7:DF:8A:94:8A:6D:67:68:8C:84:7B:90:C1:FE:2A
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32322d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:23:ea:2e:5f:5d:df:f9:d7:f9:bb:81:57:88:1a:f1:2b:04:
         e5:50:71:22:c9:92:a9:e7:04:b9:95:38:eb:fa:e6:50:a8:b5:
         54:62:f2:46:52:b7:06:e2:2e:85:ba:8f:bc:5b:62:65:39:70:
         e5:1f:b3:e3:b1:48:0f:3d:58:7f:e7:1b:e0:30:58:15:4a:ec:
         da:74:a6:ce:ee:f2:d0:57:3f:eb:f9:54:87:98:bc:0f:94:09:
         37:5e:50:7a:4b:91:39:ca:a8:be:d1:a5:41:22:3f:b7:d5:aa:
         63:9d:ed:77:d5:a5:06:9c:43:49:90:81:ce:5c:59:cc:e4:97:
         ab:a8:27:d4:ce:d1:d9:14:8a:02:c0:c9:54:db:3b:98:f9:0a:
         34:ca:5d:2a:7e:ee:f7:7f:c9:dd:1e:2c:d9:07:8e:cc:45:23:
         5c:6a:84:86:c0:8e:ac:b7:31:2a:22:25:78:7a:f8:30:00:06:
         0b:a8:00:ab:35:05:34:04:14:79:93:9b:4e:1a:87:2a:19:3d:
         c1:bf:fb:e7:02:ab:97:fb:0a:92:2f:1b:57:e6:e1:f9:76:fa:
         77:9f:fa:ea:de:39:e9:25:73:10:fc:af:86:2e:0b:26:9b:e9:
         9a:26:84:2b:97:16:73:e0:11:22:1b:94:c8:b6:ae:a9:00:5f:
         31:7c:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org