Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
File:                     3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa (raw, json)
Hash identifier:          isg6zwt0ag2mA3sL2p62XcWgbiIzbF114V76kMqW694=
Subject key identifier:   84:05:69:F5:AD:14:4C:B2:1C:DD:C6:35:A5:BC:E9:CC:D9:5D:13:B9
Certificate issuer:       /CN=32F120628961E91749A1239DA4FFA744369562E2
Certificate serial:       4BD359F8059507434098DA3ED656F78F4A69A8D3
Authority key identifier: 32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
Signing time:             Thu 21 Dec 2023 18:53:03 +0000
ROA not before:           Thu 21 Dec 2023 18:48:03 +0000
ROA not after:            Thu 19 Dec 2024 18:53:03 +0000
asID:                     263970
IP address blocks:        138.255.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d3:59:f8:05:95:07:43:40:98:da:3e:d6:56:f7:8f:4a:69:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F120628961E91749A1239DA4FFA744369562E2
        Validity
            Not Before: Dec 21 18:48:03 2023 GMT
            Not After : Dec 19 18:53:03 2024 GMT
        Subject: CN=840569F5AD144CB21CDDC635A5BCE9CCD95D13B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:72:08:10:51:44:e0:59:07:4f:a1:4b:0a:
                    78:06:33:b1:a9:a5:eb:e0:aa:4a:ae:f7:62:63:d9:
                    4b:d9:0e:3f:93:ec:46:22:45:94:b4:df:1c:79:7d:
                    03:67:06:bf:70:57:f3:fb:da:50:7f:7f:d2:bf:ca:
                    fd:c7:c2:a9:89:3c:49:7b:8f:b2:52:82:85:ec:99:
                    f5:25:20:d5:04:26:d2:c5:66:67:96:00:9a:44:9f:
                    de:4d:f3:2a:0d:f9:e9:26:46:55:17:75:96:f1:f9:
                    25:a6:15:c3:c0:32:bf:c8:02:a0:e8:06:99:02:b3:
                    f1:3b:01:e6:d6:89:c7:01:50:7f:de:31:b0:33:b8:
                    d1:32:89:1d:82:90:88:04:1c:db:c2:ff:2e:86:8e:
                    9f:96:2d:89:ff:de:11:55:66:72:e6:34:7f:62:73:
                    92:50:e4:79:85:c4:d9:25:4d:7c:7d:6b:9d:f3:33:
                    3e:fd:f2:1b:fb:c4:c8:cc:de:6e:f8:d5:62:2a:62:
                    5e:e5:a2:19:56:23:9c:5e:7b:67:de:e9:5c:4e:93:
                    6f:59:ac:af:30:eb:a6:88:15:56:ad:db:ab:e2:26:
                    bf:5d:81:2a:18:09:f9:b6:05:fa:63:06:00:03:20:
                    8e:ce:3f:67:61:9c:84:15:8e:f5:f0:9e:1c:a1:a9:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:05:69:F5:AD:14:4C:B2:1C:DD:C6:35:A5:BC:E9:CC:D9:5D:13:B9
            X509v3 Authority Key Identifier:
                keyid:32:F1:20:62:89:61:E9:17:49:A1:23:9D:A4:FF:A7:44:36:95:62:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/32F120628961E91749A1239DA4FFA744369562E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32F120628961E91749A1239DA4FFA744369562E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:79:0a:02:8c:12:25:81:76:d0:7b:d9:11:87:ea:c2:bc:
         5c:8c:ef:d9:2f:fb:e0:6e:a8:41:33:93:47:dd:5f:86:73:f7:
         85:86:26:f7:26:4c:9e:f8:87:bd:a8:96:c8:5f:7c:fb:a3:35:
         91:fb:e3:e5:12:09:c9:8d:08:eb:4c:68:59:0a:9b:62:d6:87:
         43:8d:da:a9:a3:1a:3b:62:46:10:a0:64:de:fa:48:a9:e3:c7:
         c8:2b:ae:17:85:7f:30:c3:db:0c:e4:14:4d:8f:ef:06:6b:bc:
         40:87:b6:fa:29:be:64:09:2e:06:fc:ed:59:40:2b:c6:ab:ff:
         d1:1d:05:5e:46:a4:23:89:6f:16:ce:a3:56:29:a0:57:9e:f7:
         4e:25:91:95:73:b4:1e:78:2c:88:94:66:86:49:13:86:09:1d:
         70:37:ff:b2:23:31:7b:8e:d1:a4:24:91:f5:9c:cb:af:29:9f:
         3f:3c:73:4d:94:b0:60:3f:22:37:be:1e:27:09:15:0b:5e:ab:
         6a:05:1d:a8:ec:a1:8e:55:4d:5d:25:86:83:03:81:6e:d0:90:
         19:98:75:f9:b2:87:b1:e1:f4:b4:40:cc:1f:35:e7:2b:fa:e6:
         d1:dc:81:a8:97:66:58:3d:83:7b:bf:03:92:3c:d3:8e:98:d6:
         61:f1:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org