Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          wQlEJfuuZkLhENwZmZm7ZvWN1+1KbQT6GFzegYmrLMs=
Subject key identifier:   14:18:C3:AA:CD:CB:54:65:CB:EA:0B:6D:1E:43:E8:47:3A:10:D4:D1
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       17D21566B7545DEF76038A02DC4184D1F30C7C6B
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:40 +0000
ROA not before:           Sat 24 Sep 2022 00:41:40 +0000
ROA not after:            Sat 23 Sep 2023 00:46:40 +0000
asID:                     264242
IP address blocks:        138.117.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d2:15:66:b7:54:5d:ef:76:03:8a:02:dc:41:84:d1:f3:0c:7c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:40 2022 GMT
            Not After : Sep 23 00:46:40 2023 GMT
        Subject: CN=1418C3AACDCB5465CBEA0B6D1E43E8473A10D4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:39:fe:21:0c:60:c4:7e:bf:72:07:8c:d5:
                    67:bd:d3:15:2e:20:bf:14:04:98:e9:52:4b:7a:0e:
                    60:57:68:50:88:1a:46:7e:f6:06:a6:a9:f0:78:bd:
                    3c:a2:a4:3e:ed:a7:79:97:1d:e9:11:b0:16:86:69:
                    2c:e0:eb:23:bb:9d:62:da:78:90:e7:1a:f3:03:08:
                    26:74:a6:31:85:c7:c6:b8:12:87:4c:dc:7e:2e:03:
                    dd:79:0e:94:1a:18:27:e2:2c:b2:a6:57:7a:e7:96:
                    7d:d6:62:c9:27:03:65:38:94:59:84:1f:d8:36:7c:
                    54:fc:fc:c5:82:c2:4f:08:c5:84:74:ad:84:e2:d5:
                    47:d4:40:da:91:6a:ac:34:c6:bd:2e:f6:43:7a:ff:
                    a5:db:b8:6e:0c:b9:05:9d:74:5c:69:3b:ab:11:6d:
                    8a:87:d7:8c:df:b3:dc:92:40:56:27:e8:d5:9b:40:
                    68:11:20:ba:ba:d5:f9:61:89:74:13:d8:c8:db:25:
                    8c:f0:70:60:7e:a7:2c:3c:59:44:35:10:5a:34:49:
                    9b:78:9e:11:f8:7f:d2:6a:0c:c5:da:91:ba:9c:23:
                    d9:7c:a8:d0:2e:34:29:2b:08:08:90:85:82:0b:e7:
                    90:bd:31:39:d3:68:cf:12:43:ac:c3:77:c7:84:2e:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:C3:AA:CD:CB:54:65:CB:EA:0B:6D:1E:43:E8:47:3A:10:D4:D1
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/3133382e3131372e3134362e302f32342d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:ed:66:ff:9e:59:51:2e:f3:86:1d:98:f5:56:72:e7:86:
         44:aa:a7:ea:92:26:5a:1b:ff:e8:b7:a8:8a:b2:ad:a8:37:2c:
         03:cd:b1:a6:db:27:71:33:40:6c:63:0b:f7:e7:8c:ff:61:3b:
         cd:0c:49:d7:85:40:6b:a9:59:8c:f9:ba:27:38:e7:e6:75:3a:
         b7:e4:92:67:21:11:b7:e6:eb:aa:83:42:8f:56:dc:10:43:48:
         ca:ad:89:0a:b3:f0:17:30:6d:67:46:47:2d:1b:01:5e:04:e6:
         70:ca:8c:3e:3f:60:9f:1e:77:98:19:c3:7a:54:cd:31:3c:0a:
         32:2c:ed:53:35:c4:9b:86:d3:0d:d7:d9:b6:02:f0:13:a0:46:
         c6:7e:d1:b8:6c:4c:92:23:71:81:99:ea:f9:6f:ea:82:0e:0f:
         5c:2e:9b:3e:ee:41:b4:0b:c2:95:f9:b8:92:c8:a9:eb:fc:fb:
         e5:bb:b8:91:dc:a3:3f:92:7f:44:36:97:68:8a:b3:de:df:d2:
         0b:a2:17:03:4c:59:5f:ec:fa:e0:65:ce:00:e9:f4:d5:4f:46:
         7a:9d:76:10:d9:8f:4f:cd:8d:17:4d:2b:c6:ed:66:8b:db:5c:
         a3:52:52:84:33:f6:ec:48:35:9e:0b:b7:6b:ef:dd:ee:be:20:
         fe:21:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org