Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32342d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32342d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          Qh3ov0KzZqSgz8PcBDTN5gecINqw98Z5yTpZrTJXvPE=
Subject key identifier:   2A:0A:AC:FA:01:A9:52:46:E4:99:80:EB:CD:9B:FA:CE:79:A3:DE:D9
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       0F84330F993D1EDE54CFCA2187CD055F32BEA70B
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32342d3234203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:39 +0000
ROA not before:           Sat 24 Sep 2022 00:41:39 +0000
ROA not after:            Sat 23 Sep 2023 00:46:39 +0000
asID:                     264242
IP address blocks:        138.117.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:84:33:0f:99:3d:1e:de:54:cf:ca:21:87:cd:05:5f:32:be:a7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:39 2022 GMT
            Not After : Sep 23 00:46:39 2023 GMT
        Subject: CN=2A0AACFA01A95246E49980EBCD9BFACE79A3DED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:d0:a0:9d:e5:8a:64:5a:f0:18:82:e6:7e:
                    47:7e:1c:62:8b:a7:fc:12:e9:b7:24:b1:a7:53:f5:
                    48:92:7e:fc:ff:4b:5b:af:65:d8:13:44:e0:77:42:
                    c1:2e:86:f6:13:30:c6:c4:31:7c:a7:2d:42:67:88:
                    d6:b1:17:c8:3e:4e:33:8b:f0:63:55:66:b5:6b:2c:
                    bb:db:bc:46:7d:18:34:b0:d3:0e:5c:c8:4b:b4:b9:
                    39:d2:0d:6f:b9:75:fd:63:8c:63:03:52:d8:33:b1:
                    16:7e:d2:53:0a:ca:57:b5:9b:6a:11:c1:39:3e:bc:
                    0f:2c:26:71:fa:d2:82:36:61:12:05:14:c5:fc:66:
                    c2:5c:d3:cf:30:00:96:10:74:b1:4b:3f:ac:a7:a4:
                    a5:d9:ad:a7:83:d7:e5:ee:97:e3:8e:7c:0c:ea:17:
                    db:80:13:cd:9c:35:ef:0e:d8:f1:f7:11:b6:ab:4a:
                    9f:dd:db:6d:af:f5:1b:55:97:ce:84:41:0d:24:18:
                    20:ed:a9:1d:c8:bb:ee:a3:71:0a:85:40:3f:e7:3a:
                    a1:23:31:e9:e7:65:df:e1:ea:4a:9f:79:cd:db:1e:
                    4d:e9:5c:2e:5f:70:4b:74:c5:1e:da:8f:ed:ad:88:
                    13:35:88:8f:61:39:c8:6d:ee:3f:93:18:17:2d:19:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:AC:FA:01:A9:52:46:E4:99:80:EB:CD:9B:FA:CE:79:A3:DE:D9
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134342e302f32342d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:bd:fb:a5:0f:58:9f:0a:9c:b3:ff:b1:41:d2:6c:bf:b4:
         94:27:0d:71:d2:cc:d6:90:03:f7:33:5f:ce:39:56:e3:1a:e2:
         27:3e:ad:c4:b9:d0:c8:a5:bd:b9:78:3b:e4:7b:2f:7b:11:c9:
         8d:1b:12:00:b5:17:15:c8:28:26:1f:f7:a8:65:86:3a:3d:b8:
         73:00:85:1e:fc:7b:43:16:4b:c5:c8:55:13:a4:74:3b:59:80:
         6e:bd:24:ee:ca:9a:eb:7f:e6:5b:8f:ba:38:f4:7a:29:82:dd:
         82:ba:d8:07:39:ba:22:7c:bd:f3:c0:39:11:38:dc:8d:8e:9d:
         f0:9c:33:36:43:5a:4f:cc:cc:37:90:dd:6e:ad:44:0d:6b:ca:
         fe:25:cd:b5:d8:18:49:c9:d0:10:24:c0:de:74:10:05:50:9c:
         89:7b:50:ef:d5:a2:63:f7:89:f5:8c:05:2a:53:1c:a1:18:29:
         47:1a:ce:17:1c:0a:ca:f7:17:69:f8:71:62:93:81:d3:98:ed:
         db:63:6d:ca:80:29:af:3d:48:47:02:f6:d0:7e:24:32:be:02:
         41:bf:b1:49:6a:63:e6:68:41:b5:75:81:77:00:5d:49:fd:4c:
         ba:13:8b:7f:2e:18:9f:51:80:72:91:4c:cf:72:0e:e4:68:c5:
         65:19:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org