Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
File:                     3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa (raw, json)
Hash identifier:          mADVS/GnfTG3a2kkhvJbqnNWlvr7vhqurcMGReJ6v5Y=
Subject key identifier:   7F:E5:D6:19:B1:C1:DF:83:C1:3B:33:73:89:8F:4B:08:56:C9:57:37
Certificate issuer:       /CN=D734736DE25120E6797606BF75F2DB44E938B286
Certificate serial:       056B240342F1C56CF61872078275B30CD074EE38
Authority key identifier: D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
Signing time:             Fri 22 Mar 2024 17:44:46 +0000
ROA not before:           Fri 22 Mar 2024 17:39:46 +0000
ROA not after:            Fri 21 Mar 2025 17:44:46 +0000
asID:                     264197
IP address blocks:        138.97.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6b:24:03:42:f1:c5:6c:f6:18:72:07:82:75:b3:0c:d0:74:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734736DE25120E6797606BF75F2DB44E938B286
        Validity
            Not Before: Mar 22 17:39:46 2024 GMT
            Not After : Mar 21 17:44:46 2025 GMT
        Subject: CN=7FE5D619B1C1DF83C13B3373898F4B0856C95737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:5e:a6:1d:3e:0b:ee:f9:de:90:79:a8:8b:
                    95:50:09:2a:20:ad:7b:56:f9:19:26:b9:9f:60:47:
                    a9:dd:ed:f4:ca:eb:1f:9b:90:d9:6b:6f:34:82:be:
                    eb:3f:42:ae:82:ee:9f:b3:89:94:90:30:83:19:2d:
                    22:5d:28:2b:02:a6:7c:b2:eb:f9:a1:c0:a2:df:87:
                    78:45:e8:03:69:dd:0a:99:07:f6:1d:b8:03:28:4a:
                    a3:8e:d7:c7:a4:56:bd:9a:5a:1f:fa:bc:64:da:7b:
                    67:3a:a3:41:81:b9:a0:04:13:5a:e9:11:1e:51:9b:
                    b1:86:19:cf:a9:e7:77:23:bd:53:c6:d4:29:98:91:
                    80:b2:5d:6c:c4:5f:f0:5d:d0:ed:9a:71:63:ee:13:
                    cf:ec:2f:84:a8:eb:e3:6a:71:45:4c:7b:36:d8:c4:
                    e7:b4:c5:2e:e3:ae:80:a5:27:48:5e:4c:c7:fc:95:
                    67:40:fb:45:74:8c:7f:00:77:16:83:78:e9:fb:d0:
                    1e:33:c1:87:21:19:d2:96:c9:97:41:f3:30:23:a4:
                    bc:88:6f:0e:a5:c2:48:f1:a9:23:1d:ab:54:72:ab:
                    05:43:42:f9:65:22:cf:e5:ee:79:3d:f2:0e:de:bd:
                    c4:1c:9d:25:24:00:4c:89:e0:6a:b0:3f:ec:ed:59:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E5:D6:19:B1:C1:DF:83:C1:3B:33:73:89:8F:4B:08:56:C9:57:37
            X509v3 Authority Key Identifier:
                keyid:D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:ce:82:15:7c:9d:1c:4c:6f:2e:17:7f:06:10:96:4c:ad:
         fd:82:3f:26:9b:eb:c0:b0:53:dc:e4:f6:51:24:ff:7f:43:0b:
         be:b9:de:c9:7b:5a:fe:44:e9:44:2e:d5:3c:39:ea:d9:5f:5e:
         98:94:3c:8d:c4:3e:a8:22:0e:ed:7b:c8:d9:c1:7b:7e:97:be:
         66:f6:41:ba:1c:b9:a2:1f:93:3c:99:b1:75:06:27:0a:c6:7b:
         11:30:a9:e6:cd:4f:60:6e:47:33:d2:fe:d8:38:a4:28:e7:39:
         f1:78:e5:39:b9:1d:1f:6a:97:9a:28:d5:c9:5c:cd:53:09:34:
         7a:be:d4:0a:ca:2d:39:30:3b:59:16:95:99:7d:db:fd:ff:28:
         5d:27:c2:f6:b6:4f:c4:bb:ef:7f:6f:81:d3:80:48:26:39:39:
         34:2d:ef:a7:fc:5e:40:c7:1a:92:45:38:4e:9e:0a:bd:35:9a:
         f1:53:8e:24:12:03:aa:bb:af:5e:7c:b8:b9:95:5b:16:f6:7e:
         47:06:7c:07:bc:f1:ba:66:ff:27:75:5f:bc:72:d5:75:35:f0:
         d8:e0:f7:95:9c:cc:8f:9d:db:76:4a:20:8e:96:50:59:d5:26:
         fc:a1:65:d0:6a:58:e3:dc:61:69:a4:9c:04:24:73:72:f3:ba:
         3c:c0:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org