Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          sdwhep3FP6phflkkyYzf0m+sXVmpqJ0WwP13fvtsn/8=
Subject key identifier:   B8:96:5B:90:04:22:D1:BC:76:CD:52:CC:80:B5:1E:65:00:B5:34:3E
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       75BCC3E8D5D67371F2E496BF0C8AE99166916D1C
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:40 +0000
ROA not before:           Sat 24 Sep 2022 00:41:40 +0000
ROA not after:            Sat 23 Sep 2023 00:46:40 +0000
asID:                     264242
IP address blocks:        138.117.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:c3:e8:d5:d6:73:71:f2:e4:96:bf:0c:8a:e9:91:66:91:6d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:40 2022 GMT
            Not After : Sep 23 00:46:40 2023 GMT
        Subject: CN=B8965B900422D1BC76CD52CC80B51E6500B5343E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:85:e7:e0:c3:92:d9:e9:4f:77:b5:3f:af:
                    c1:73:3b:b6:b4:05:82:61:3c:d4:71:0f:27:2d:89:
                    98:64:5b:d5:73:a7:41:b9:5b:58:6a:8f:4a:71:79:
                    cd:cc:58:40:ee:b1:15:db:ab:aa:3d:48:5c:47:08:
                    1f:35:46:c2:8e:3e:17:fd:f3:a8:6c:17:f4:5e:c6:
                    52:49:6b:0f:5d:88:c5:d1:a2:5d:a3:73:c9:15:4c:
                    52:52:94:c2:c5:31:f5:8d:6b:05:04:18:fe:d8:49:
                    8a:a6:85:31:4f:a5:f6:19:97:44:82:ba:ba:ed:57:
                    1d:05:8e:0d:31:d0:d3:ea:40:9c:b3:02:1e:19:a6:
                    f9:15:c1:3e:fb:80:6a:fc:1d:16:af:71:45:d7:d1:
                    e8:f1:94:a1:3f:21:2a:71:d4:f6:2a:8e:ec:70:7e:
                    97:ec:3c:a3:5d:94:ac:80:8f:0a:ee:47:0f:d7:ae:
                    75:46:df:a4:5e:bd:cf:fa:b5:03:89:b7:03:b8:3b:
                    61:93:78:bc:44:7d:d5:28:e5:6c:e3:1e:1e:ad:22:
                    8b:b6:15:c3:40:7c:c5:2e:c5:44:cc:7e:32:51:b7:
                    ee:eb:9c:a1:dd:ba:6c:e4:8b:48:19:1b:a1:10:aa:
                    7a:24:33:80:dd:5a:bb:bb:30:8c:f8:a7:ac:86:09:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:96:5B:90:04:22:D1:BC:76:CD:52:CC:80:B5:1E:65:00:B5:34:3E
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:bf:f9:eb:2d:8b:62:29:27:d9:1c:02:f7:8a:bb:b6:50:35:
         ba:28:e0:05:14:d1:1c:0c:1c:4c:d3:1e:30:a7:9d:a5:de:4e:
         d4:ce:41:51:7f:25:b8:cd:b8:22:9f:07:6f:bd:97:b1:ac:f5:
         89:af:ff:4e:67:cd:84:ca:23:a2:95:b7:ca:40:3c:0e:35:e1:
         be:95:fa:08:d2:b6:da:09:07:de:a1:78:b7:5e:24:66:08:93:
         c4:27:12:3b:e4:fd:43:a0:b5:f8:c4:51:82:3d:0a:62:f2:74:
         25:0a:12:ae:36:cf:f6:17:0c:4b:66:1e:d1:e8:c4:e5:1c:bf:
         41:2e:2e:c5:81:43:fa:ea:58:61:04:05:88:9e:10:7d:ff:31:
         f4:81:8a:f5:c9:b0:1e:48:90:c0:12:49:b3:9c:e5:ca:28:54:
         0e:8d:7c:e4:1d:73:92:3c:05:c2:97:11:82:ca:73:88:a1:4f:
         d0:0e:32:f5:89:af:35:d5:b2:6e:4d:42:b6:19:57:4f:97:0f:
         11:f2:85:e0:f7:a0:6f:a3:d3:90:51:fe:43:3e:0f:3c:9c:07:
         50:01:51:4d:1e:78:81:15:83:0c:56:a5:73:09:f6:9d:a1:f3:
         59:e0:f4:f8:70:b9:ea:29:d1:b5:81:fb:98:5e:bb:90:ac:bd:
         12:42:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org