Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa (raw, json)
Hash identifier:          /DXlHpQeve1IjEJK7fTfD3xL3jzwElaLlUJApN5VwYU=
Subject key identifier:   C7:97:3E:73:63:00:05:3B:CB:E1:C7:6C:26:D1:D6:F4:E1:80:4E:4A
Certificate issuer:       /CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
Certificate serial:       06E608A23CD51D10427F70EF7D4CC308FE5023F9
Authority key identifier: 0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
Signing time:             Thu 29 Jun 2023 17:15:08 +0000
ROA not before:           Thu 29 Jun 2023 17:10:08 +0000
ROA not after:            Thu 27 Jun 2024 17:15:08 +0000
asID:                     270876
IP address blocks:        138.94.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e6:08:a2:3c:d5:1d:10:42:7f:70:ef:7d:4c:c3:08:fe:50:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
        Validity
            Not Before: Jun 29 17:10:08 2023 GMT
            Not After : Jun 27 17:15:08 2024 GMT
        Subject: CN=C7973E736300053BCBE1C76C26D1D6F4E1804E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:15:af:44:e3:27:90:a0:6d:30:41:d8:2b:
                    fe:60:41:e8:ea:27:7c:6d:3e:99:15:8d:c6:d0:69:
                    22:2e:0e:a1:4b:32:6e:0b:53:62:56:bf:af:fb:df:
                    50:05:47:a0:dd:28:e3:72:bd:6a:2d:27:34:83:0a:
                    66:1f:11:00:e8:10:35:7e:a2:36:3d:e3:8e:0a:a4:
                    d2:ec:da:11:ab:f0:06:5b:58:4e:8d:52:ff:98:89:
                    2d:d2:34:6b:d2:f7:7c:ac:b4:e3:df:d8:6e:33:1b:
                    61:ec:54:11:71:f7:a2:4f:96:b7:0b:46:20:ab:d8:
                    1f:ce:fe:52:00:59:ca:aa:92:38:0f:52:c5:2e:ff:
                    77:f3:f7:02:bc:9b:6b:94:4b:ac:c9:ad:9d:77:4a:
                    12:09:78:a7:1d:fc:08:fb:9c:17:65:f1:57:1b:e8:
                    7b:f1:01:41:54:6f:56:5e:45:5a:6a:6e:96:02:6e:
                    e3:bd:fc:b7:57:2a:84:fb:64:3f:e1:da:51:84:c7:
                    5d:54:b0:0e:b3:9b:fb:fe:3a:db:4a:46:b7:b1:bd:
                    72:4c:19:c6:05:f7:c4:b4:81:d2:66:d1:01:57:2c:
                    c1:7e:3a:42:87:cf:15:92:90:0a:b9:2d:e4:3b:b1:
                    8b:87:9a:e6:42:1a:a3:c2:fa:26:81:98:7a:f4:a0:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:3E:73:63:00:05:3B:CB:E1:C7:6C:26:D1:D6:F4:E1:80:4E:4A
            X509v3 Authority Key Identifier:
                keyid:0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:56:27:4a:d6:b8:7e:f3:b3:ea:28:b1:09:5c:9a:be:6b:
         44:82:f5:a6:52:e3:46:b4:76:de:59:e9:1b:65:f7:81:d2:ca:
         51:b1:96:21:01:ba:8f:6a:54:8c:96:48:87:ab:3a:94:87:3c:
         c4:45:4c:00:76:36:cd:59:cf:0f:a9:27:5a:98:95:a1:c5:bc:
         75:4a:03:02:73:5d:6d:46:a0:96:6c:70:76:7b:20:55:19:1d:
         f1:2d:f2:fb:11:60:84:a1:84:c4:fd:a0:fa:75:c9:4d:37:b9:
         32:1e:19:51:ce:f8:ed:fe:e7:27:6e:d9:7b:35:40:5a:62:d2:
         55:60:17:8e:57:f4:05:5e:ce:59:dc:b8:8c:9f:21:57:c3:ec:
         2d:b6:41:54:8a:15:33:b2:79:39:44:77:8c:b7:ad:5c:c6:3a:
         30:df:52:40:37:d9:e7:32:3e:24:b8:86:f1:b0:8a:a8:81:36:
         d6:d5:e3:02:e1:56:67:6b:e6:e5:c4:6c:de:8d:7b:c3:96:98:
         21:36:75:5f:43:a0:72:b7:03:0d:20:d4:22:a4:7d:a3:88:81:
         a8:b3:eb:04:25:ed:b9:d7:b8:fc:43:d1:1c:05:3a:dc:c2:ee:
         17:dc:fb:8b:89:f0:12:52:26:9e:c8:6c:c9:d9:eb:99:50:51:
         05:04:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org