Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa
File:                     3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa (raw, json)
Hash identifier:          faVBvZcx2CklFfW0LuI7Ds0u43BL3FTv8SouBXsFFv8=
Subject key identifier:   E8:EA:7A:46:19:16:D4:14:B1:43:D1:21:86:1F:7D:A8:FF:21:60:66
Certificate issuer:       /CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
Certificate serial:       1ABE911FD4BF30A4C4A47AF6E1358733B6E3D935
Authority key identifier: 4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa
Signing time:             Thu 21 Dec 2023 17:07:35 +0000
ROA not before:           Thu 21 Dec 2023 17:02:35 +0000
ROA not after:            Thu 19 Dec 2024 17:07:35 +0000
asID:                     263866
IP address blocks:        138.186.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:be:91:1f:d4:bf:30:a4:c4:a4:7a:f6:e1:35:87:33:b6:e3:d9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
        Validity
            Not Before: Dec 21 17:02:35 2023 GMT
            Not After : Dec 19 17:07:35 2024 GMT
        Subject: CN=E8EA7A461916D414B143D121861F7DA8FF216066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:79:ea:27:77:cb:34:47:ee:b5:07:bd:72:
                    b7:0f:c4:9a:06:4e:c3:e0:73:10:96:c6:6e:22:b1:
                    e3:18:c1:f2:fb:86:8f:fb:4a:4f:dc:99:33:f7:97:
                    37:80:b4:89:25:7c:dd:01:89:57:3e:18:2e:73:ba:
                    5f:78:64:fc:e3:9a:71:dd:54:b0:73:4c:a4:72:de:
                    d7:dc:db:0a:bd:7a:44:39:b8:cc:38:3f:e9:a2:d4:
                    f0:5d:32:c2:44:21:e2:a2:88:b5:36:b9:a8:0d:ad:
                    8e:09:51:bf:c6:d6:4c:bb:40:9b:1f:c7:f4:e8:86:
                    7d:a1:63:7d:57:f6:54:21:5c:c9:06:59:52:d0:6c:
                    c6:be:50:a6:b6:01:c9:e9:9c:b0:95:8e:73:57:87:
                    5d:69:b3:81:37:9e:74:47:1a:67:43:7c:2e:ce:32:
                    61:9f:1e:fd:c3:27:54:db:17:46:21:a6:82:1d:08:
                    ea:2a:8d:19:a4:5f:28:a9:29:4a:e5:95:b6:a0:09:
                    bc:f3:9a:fd:82:68:d6:cf:cf:a6:f8:94:80:18:ba:
                    9e:05:f5:0e:93:a8:37:5d:0b:35:23:6e:c2:3e:d2:
                    49:eb:9d:7a:71:74:b2:5e:ef:02:be:8d:94:93:8b:
                    45:c4:f9:8a:ad:de:dc:84:92:49:e9:6f:5a:47:82:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EA:7A:46:19:16:D4:14:B1:43:D1:21:86:1F:7D:A8:FF:21:60:66
            X509v3 Authority Key Identifier:
                keyid:4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3234203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:3d:87:58:ea:2f:bd:bc:3f:ce:c6:92:c1:09:b2:e7:2f:1b:
         e2:7c:58:6a:dd:39:0b:55:05:63:b6:2f:5d:00:d9:41:7f:60:
         d0:d3:c4:cd:9a:53:e4:4b:40:40:0e:b2:a0:c6:33:c7:b0:f2:
         09:df:a4:c0:18:5f:58:43:07:92:b7:ff:ba:97:12:d9:f9:8e:
         39:25:03:eb:55:da:73:26:9d:67:96:59:a5:37:ad:1d:16:2b:
         cd:13:b1:ba:42:7d:dc:8f:e0:77:f6:b7:98:96:db:e3:b4:4d:
         14:02:d1:aa:03:d1:bb:4b:1a:b1:ea:e3:cc:0d:54:ea:e7:36:
         bd:25:21:93:94:e0:0c:c7:bb:64:ea:be:ec:3d:cb:c8:a5:c1:
         b5:ce:17:38:a3:8d:d8:cf:ad:40:c8:68:0f:8f:4f:a0:55:31:
         90:0b:46:67:d3:ff:5f:32:f0:b6:7e:53:70:cc:93:28:4a:14:
         80:a7:bc:4e:91:91:f6:01:c4:8a:1b:ec:f9:ad:78:cc:25:93:
         f7:cd:f6:d9:e9:78:23:4e:a9:51:9a:55:cf:90:97:53:5c:66:
         62:32:b0:7b:57:e4:f4:e1:c0:3b:65:54:cc:c0:26:13:9c:79:
         e9:ad:d8:01:3c:3f:1a:c2:a4:e2:f5:ea:7c:21:b3:15:8c:ec:
         04:16:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org