Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa
File:                     3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa (raw, json)
Hash identifier:          B54V/jVLAZpJ75CsL/EViP8kzXmWWg0Wo3/q1dFCuR4=
Subject key identifier:   6D:16:2C:AE:9C:94:99:5B:70:D5:04:EC:58:D2:DD:6C:2E:7A:1C:3F
Certificate issuer:       /CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
Certificate serial:       2FAE6ACCF87A4B6DC9B9FDFD484AD4D7FC9CD2D8
Authority key identifier: 28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa
Signing time:             Wed 03 Apr 2024 21:34:18 +0000
ROA not before:           Wed 03 Apr 2024 21:29:18 +0000
ROA not after:            Wed 02 Apr 2025 21:34:18 +0000
asID:                     28638
IP address blocks:        138.118.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ae:6a:cc:f8:7a:4b:6d:c9:b9:fd:fd:48:4a:d4:d7:fc:9c:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284234ECF3BE74B4E46419CC5F459F26BF9A5B5E
        Validity
            Not Before: Apr  3 21:29:18 2024 GMT
            Not After : Apr  2 21:34:18 2025 GMT
        Subject: CN=6D162CAE9C94995B70D504EC58D2DD6C2E7A1C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:ef:d2:f9:f4:eb:77:1c:5a:96:d3:df:59:
                    68:93:bc:89:ee:3a:37:4d:22:06:10:e4:67:cd:84:
                    fb:8d:ba:6d:f7:dc:40:2b:1d:f4:fc:73:d9:6a:49:
                    5a:28:1f:be:fa:db:da:b4:11:f7:b7:19:6c:3d:80:
                    a4:db:fb:1a:3f:b6:54:25:69:5c:b2:b1:60:a5:84:
                    ca:7d:50:44:ad:ef:fb:dd:9a:02:2b:44:6d:3d:5b:
                    b7:ca:ff:d6:e3:4c:c7:0b:cf:6b:15:65:54:24:5a:
                    e3:66:c6:fd:15:64:e2:2d:b7:9b:8a:80:d6:1e:92:
                    37:4c:4c:50:27:b3:d2:ab:98:23:2b:86:fd:c5:42:
                    b4:0d:a6:85:03:6f:33:43:2f:f3:30:86:5f:18:5d:
                    cb:f0:cf:55:53:68:f3:7a:5c:7f:4c:26:17:3e:9e:
                    d1:4f:c7:ca:0a:f1:62:20:5f:dd:92:80:1e:a8:27:
                    cb:12:cd:c0:56:f9:91:01:0a:8f:88:f3:9a:64:36:
                    3e:c8:94:7d:c5:3d:65:26:31:ad:b6:71:83:06:f1:
                    40:bd:a3:5b:0a:df:fa:11:85:a0:ca:b4:dc:c9:22:
                    fc:e9:d3:cb:8b:4d:54:b3:ce:04:8c:81:f1:e6:f7:
                    26:f3:62:19:2a:16:21:ed:87:83:fe:89:0b:09:9b:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:2C:AE:9C:94:99:5B:70:D5:04:EC:58:D2:DD:6C:2E:7A:1C:3F
            X509v3 Authority Key Identifier:
                keyid:28:42:34:EC:F3:BE:74:B4:E4:64:19:CC:5F:45:9F:26:BF:9A:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284234ECF3BE74B4E46419CC5F459F26BF9A5B5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26U6RmiXfc5YF1dJJs2Jr2mb1ibXvxzBGtiyJJAo6a8g/1/3133382e3131382e3136302e302f32322d3234203d3e203238363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:11:bb:2a:1f:82:a4:99:eb:96:24:48:dd:04:c5:d6:70:36:
         4d:ba:a6:1e:ac:64:94:c4:b5:22:1d:41:ae:62:90:f9:5f:90:
         28:70:11:7b:8e:59:5e:23:21:ee:bb:7e:5a:27:bc:60:58:c3:
         d5:cc:cd:20:b4:6b:3e:8d:0c:40:6d:a6:40:8e:c0:31:fe:2b:
         c6:9c:76:2c:c8:ee:ef:26:b8:55:f8:72:85:34:0d:9a:bf:94:
         76:33:2a:8d:7f:f7:ce:f0:f3:2a:6e:a0:10:24:3a:45:a1:8a:
         ec:09:91:76:c0:9a:58:f6:77:44:cf:22:bf:a7:af:25:af:60:
         73:ff:90:16:be:5a:7e:73:87:33:2b:43:99:a4:39:58:b5:f3:
         94:07:64:24:78:02:58:e9:35:f7:1e:66:0d:44:d6:9b:9f:9d:
         77:5e:dc:d4:97:6a:70:e8:ac:0e:54:ed:18:d6:04:b7:2a:e9:
         10:5d:79:2b:6a:2c:37:c9:7f:96:a8:8b:8a:f5:99:fd:88:51:
         3e:17:47:ea:bc:c8:22:09:ed:94:6c:88:79:96:ff:d9:33:e4:
         f4:04:11:4c:94:77:c3:74:8b:19:05:66:0a:dd:46:00:e6:66:
         b4:23:a4:91:01:46:76:d3:fe:9d:63:60:aa:1a:7c:00:c7:ac:
         8e:27:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 20:17:13 2024 by rpki-client on console-fra.rpki-client.org