Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
File:                     3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          BD3FCzSH9eVOHaBQrGlfvRqtqAP3aunmi0vpb7GyPIY=
Subject key identifier:   1A:F4:97:2D:32:CE:9F:4F:B2:97:6E:F6:82:F2:39:7A:63:E2:23:A1
Certificate issuer:       /CN=62BD461875786A00B21F073E8D02ACCE9BC15828
Certificate serial:       5FA8DA8E5C998D3A3B7F9B2511D8F6CD63A7AC5C
Authority key identifier: 62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
Signing time:             Mon 17 Jul 2023 14:36:00 +0000
ROA not before:           Mon 17 Jul 2023 14:31:00 +0000
ROA not after:            Mon 15 Jul 2024 14:36:00 +0000
asID:                     28130
IP address blocks:        138.99.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a8:da:8e:5c:99:8d:3a:3b:7f:9b:25:11:d8:f6:cd:63:a7:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Validity
            Not Before: Jul 17 14:31:00 2023 GMT
            Not After : Jul 15 14:36:00 2024 GMT
        Subject: CN=1AF4972D32CE9F4FB2976EF682F2397A63E223A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:b6:26:cf:f0:b4:fe:b6:5a:d9:21:77:68:
                    6f:ff:51:e2:3f:55:2c:95:17:3e:60:8d:f4:da:f0:
                    ff:d5:ac:82:0b:03:17:22:c0:ba:80:fa:f3:7a:b6:
                    85:0c:0f:13:b2:d4:da:da:d7:ff:57:db:79:df:85:
                    6e:08:de:52:0c:c4:e3:eb:7f:fc:2f:37:c7:66:08:
                    cd:01:3f:6e:1e:46:cf:25:15:48:fc:bf:74:f5:36:
                    73:2a:e7:8f:5d:01:29:07:83:45:4b:0b:c3:87:eb:
                    8b:7c:52:e9:7b:5f:ed:44:50:13:db:d4:8b:5d:81:
                    74:03:c2:e6:89:53:a3:82:65:0d:89:8b:f1:17:72:
                    c9:45:9e:f9:85:12:0b:c1:03:d1:e3:1d:24:3b:77:
                    90:87:c0:7e:3c:77:a2:bd:50:f6:73:9c:12:c2:15:
                    e6:55:74:6d:d2:78:8c:19:37:2b:95:62:e0:7f:01:
                    a4:07:2e:5e:ad:ee:37:fe:98:89:8b:e4:94:de:29:
                    9a:66:79:8c:a7:cd:8a:df:bf:09:32:46:d4:15:71:
                    cf:9c:f9:1d:41:62:af:df:2b:8b:b3:54:dd:85:66:
                    8f:55:50:5f:f3:65:73:d0:84:22:ad:50:be:80:70:
                    8a:4b:4e:98:bb:38:de:4f:ab:eb:56:ba:9b:d0:f3:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:97:2D:32:CE:9F:4F:B2:97:6E:F6:82:F2:39:7A:63:E2:23:A1
            X509v3 Authority Key Identifier:
                keyid:62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:b1:23:c0:7e:25:be:71:0a:dc:6f:2c:29:4c:03:ad:86:ad:
         87:48:70:25:4b:ea:26:41:01:5b:47:2f:29:29:c9:25:64:6f:
         fb:7d:62:26:2f:3d:89:ef:34:e1:de:cf:e6:b0:b3:5f:03:ec:
         91:3c:48:44:53:66:0d:d7:29:7f:49:44:1e:70:7f:38:43:12:
         ce:64:3e:81:02:f8:f7:14:3d:da:04:94:88:ee:bb:67:b8:07:
         12:88:5c:33:43:68:d4:96:37:e2:c8:f3:d0:45:9e:d0:7d:07:
         88:ee:fc:f5:4d:e5:df:1b:52:a3:5b:3a:92:69:e6:c1:02:08:
         2b:78:33:e3:ca:75:76:8a:9b:2a:4b:e4:48:d3:57:8f:d8:ee:
         af:95:54:87:2c:b2:fa:c3:a4:98:9a:c3:86:d1:10:07:5b:19:
         c8:d5:24:95:65:5b:af:c5:74:7e:f2:b1:4b:5f:c2:db:91:30:
         0a:1d:3c:f5:bd:74:5b:1a:e5:8d:50:24:fb:62:f8:87:e6:f4:
         73:87:b0:21:3e:08:dd:c6:c3:9f:39:50:b0:3d:e1:fd:4f:c8:
         35:9a:2a:21:db:53:f8:a8:27:30:29:e3:82:1c:c2:77:c5:e4:
         ab:8a:24:28:e4:3a:bf:1c:23:c6:2e:13:e5:43:8b:c5:4d:36:
         9c:f8:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org