Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          eXSaAEwHslHuYoDeOTapuj+GwthbbwOFDboagE+tkcw=
Subject key identifier:   B7:E8:B1:E9:43:D0:E2:FB:D0:9A:B8:3C:98:33:D4:CE:7B:2D:54:75
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       2E1C22F46FCF3B14C198721900E580CBC2074879
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:18:30 +0000
ROA not before:           Wed 27 Mar 2024 21:13:30 +0000
ROA not after:            Wed 26 Mar 2025 21:18:30 +0000
asID:                     264550
IP address blocks:        138.0.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1c:22:f4:6f:cf:3b:14:c1:98:72:19:00:e5:80:cb:c2:07:48:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:13:30 2024 GMT
            Not After : Mar 26 21:18:30 2025 GMT
        Subject: CN=B7E8B1E943D0E2FBD09AB83C9833D4CE7B2D5475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:35:80:a7:28:99:a5:36:24:b9:4a:d1:e3:
                    9b:67:42:48:e5:9a:db:ea:8f:16:16:ca:c3:39:72:
                    c6:f0:5f:b3:53:26:5f:25:37:29:8b:b2:af:af:c9:
                    2e:b0:44:6c:72:01:14:37:4f:1b:85:cf:ea:54:4d:
                    ad:65:63:a1:29:00:ed:f6:66:8e:53:a5:c7:48:47:
                    8d:2c:45:b4:bb:0f:58:37:70:a0:07:71:bb:5a:7c:
                    bc:44:d4:3d:92:29:dd:51:eb:22:08:21:b5:ad:a5:
                    a6:65:5e:62:6d:1d:0f:b1:ce:48:2f:90:42:a3:b4:
                    d6:09:9d:b1:2e:c0:bd:c0:a4:5d:ab:75:3c:27:cf:
                    3e:0c:03:95:cf:5a:6d:8a:31:bd:69:20:1b:c7:36:
                    f0:4a:a4:a9:83:78:45:e1:aa:75:47:83:84:34:ea:
                    b2:50:5b:49:79:f7:ac:c7:76:f0:a0:0d:5f:c6:cf:
                    24:62:75:8f:e7:a3:3a:1e:47:9c:bc:12:b8:cd:5c:
                    99:cc:0d:ab:5c:a8:46:ad:45:2f:e8:bb:f0:dc:72:
                    2f:19:54:d0:a0:1c:f9:09:90:37:09:2a:12:74:dd:
                    b6:7a:cc:e2:bd:19:bc:69:f8:86:bf:67:34:24:3f:
                    bf:88:93:47:59:b8:08:8d:e6:f7:de:77:b5:17:b5:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:B1:E9:43:D0:E2:FB:D0:9A:B8:3C:98:33:D4:CE:7B:2D:54:75
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:a5:ee:ed:b7:e5:ed:14:3f:ac:d7:02:4f:57:a3:0a:7c:
         43:65:a7:48:87:7a:7f:9d:64:4d:71:3e:31:36:18:98:f5:d2:
         5f:0b:ec:d1:71:07:03:e6:99:3f:43:a0:ad:45:bf:3c:64:b1:
         fa:c5:65:02:96:ff:7c:dd:72:1d:c7:52:89:47:68:8d:8a:47:
         09:91:87:4b:4f:a3:0f:c1:5f:bd:b0:8a:8e:90:07:28:fb:aa:
         cc:8a:4d:ec:45:c2:ec:29:71:9d:6b:12:e4:66:43:94:68:4f:
         9d:0c:3b:1c:92:20:a8:b3:bd:c0:cb:73:e1:c2:52:19:e6:78:
         bd:3d:64:b3:e2:f4:1f:16:8f:7d:a2:fe:0e:f4:3a:34:16:dd:
         ec:c4:00:b7:e4:5e:0f:69:70:9d:21:21:35:e3:bc:a2:8e:c3:
         c7:9a:b7:c9:a6:69:50:97:d4:2b:fc:83:28:2f:82:38:d0:07:
         a4:01:f7:51:0d:d4:41:f9:14:25:ef:54:fa:24:3d:c2:c8:9c:
         89:ca:11:71:91:3f:bc:7d:cf:1f:57:6c:7a:9d:3f:83:a3:f7:
         cc:f3:cb:cb:ab:4e:6b:2b:ee:cb:6b:05:de:f0:fc:52:d1:dc:
         40:f0:e4:0c:ed:6e:05:e4:09:4e:7a:92:f6:5f:a5:a9:14:fc:
         d7:b6:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org