Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
File:                     3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (raw, json)
Hash identifier:          9tgewc5V5YSBFDBoR2Po1nsMY1IC5xKkBbvFAPvLs+g=
Subject key identifier:   2C:E9:37:59:A7:D4:67:A8:80:FB:E0:EB:D8:94:74:7B:1E:8A:BA:A7
Certificate issuer:       /CN=18F05335DD8EFAA613957AA5D82CBFE6D5E13608
Certificate serial:       72DC54A353DD9614511FD78798965CE7B74D4D73
Authority key identifier: 18:F0:53:35:DD:8E:FA:A6:13:95:7A:A5:D8:2C:BF:E6:D5:E1:36:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
Signing time:             Mon 18 Dec 2023 18:00:00 +0000
ROA not before:           Mon 18 Dec 2023 17:55:00 +0000
ROA not after:            Mon 16 Dec 2024 18:00:00 +0000
asID:                     264152
IP address blocks:        138.94.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dc:54:a3:53:dd:96:14:51:1f:d7:87:98:96:5c:e7:b7:4d:4d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18F05335DD8EFAA613957AA5D82CBFE6D5E13608
        Validity
            Not Before: Dec 18 17:55:00 2023 GMT
            Not After : Dec 16 18:00:00 2024 GMT
        Subject: CN=3082010A0282010100BDB6FF9718C2EACA5237EC2A6B67636277600456E769753F00333C8C846CFB061C1A07A6D242108F78CF4D93FA34B9A20B23D5E27B3F358C7B5BA984EFCB162C43879AAED364AD259646726E50D07C8E417B42EEC16450A55E804DC9BDF6BB63E490EB8A3A718EF73116FAF1BDF82A6105AEE3C9DD07B746FBE64086D80EAECA1C9C407BA9313A8FCD8C4F7BB41BEBBAE283CF6ADA7F75120EE1992996CA4A2133E1069397A3E2E7C36D7B35803F71F4E47C0CBCBF0C3BE402F8D2CC47493FF4A8ED97EDCBCFF8531ACE30A3DA924592BFC70B8CB32486036CBBDE89864BFF7122B2008090210C52B742717E64ED4B08CEFBD83FA4D10A836C015AEE34A459970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:ff:97:18:c2:ea:ca:52:37:ec:2a:6b:67:
                    63:62:77:60:04:56:e7:69:75:3f:00:33:3c:8c:84:
                    6c:fb:06:1c:1a:07:a6:d2:42:10:8f:78:cf:4d:93:
                    fa:34:b9:a2:0b:23:d5:e2:7b:3f:35:8c:7b:5b:a9:
                    84:ef:cb:16:2c:43:87:9a:ae:d3:64:ad:25:96:46:
                    72:6e:50:d0:7c:8e:41:7b:42:ee:c1:64:50:a5:5e:
                    80:4d:c9:bd:f6:bb:63:e4:90:eb:8a:3a:71:8e:f7:
                    31:16:fa:f1:bd:f8:2a:61:05:ae:e3:c9:dd:07:b7:
                    46:fb:e6:40:86:d8:0e:ae:ca:1c:9c:40:7b:a9:31:
                    3a:8f:cd:8c:4f:7b:b4:1b:eb:ba:e2:83:cf:6a:da:
                    7f:75:12:0e:e1:99:29:96:ca:4a:21:33:e1:06:93:
                    97:a3:e2:e7:c3:6d:7b:35:80:3f:71:f4:e4:7c:0c:
                    bc:bf:0c:3b:e4:02:f8:d2:cc:47:49:3f:f4:a8:ed:
                    97:ed:cb:cf:f8:53:1a:ce:30:a3:da:92:45:92:bf:
                    c7:0b:8c:b3:24:86:03:6c:bb:de:89:86:4b:ff:71:
                    22:b2:00:80:90:21:0c:52:b7:42:71:7e:64:ed:4b:
                    08:ce:fb:d8:3f:a4:d1:0a:83:6c:01:5a:ee:34:a4:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:37:59:A7:D4:67:A8:80:FB:E0:EB:D8:94:74:7B:1E:8A:BA:A7
            X509v3 Authority Key Identifier:
                keyid:18:F0:53:35:DD:8E:FA:A6:13:95:7A:A5:D8:2C:BF:E6:D5:E1:36:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18F05335DD8EFAA613957AA5D82CBFE6D5E13608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/0/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:6a:a7:df:84:4c:83:9d:f4:10:b4:ec:c1:0f:e9:38:04:
         a5:63:22:58:8b:5b:16:6e:1b:da:5f:58:8f:4c:41:78:3c:a1:
         db:b8:52:37:2a:d0:2b:4d:ce:9c:e8:e5:d6:f3:08:5d:1d:14:
         b7:c3:a3:70:a5:a7:4c:e1:9b:fa:70:38:c9:68:b9:71:14:89:
         d9:11:46:d8:ab:80:ec:98:f7:f8:1a:ae:e1:5a:ce:49:23:2c:
         f6:07:74:d9:b6:aa:ba:03:60:9b:15:f4:d1:ad:c9:f4:26:ba:
         40:e3:bd:0c:3a:d0:fa:9a:6f:5f:cf:e6:43:76:73:ea:f5:0b:
         7d:18:a3:31:45:3e:b4:52:ba:e6:8c:5a:38:4f:81:6a:7b:9c:
         89:7f:d8:a6:93:f5:8e:09:51:cd:af:ae:6e:8f:58:07:e4:67:
         dd:ce:10:b6:ff:ab:7f:5e:d6:98:2e:0e:1c:3a:03:15:27:75:
         cf:80:16:1f:1e:ff:52:39:82:e6:1b:57:53:8f:d0:7b:73:43:
         33:b6:66:9d:0b:1b:56:b5:a1:7c:5b:5d:11:ed:a6:88:be:1f:
         b7:20:46:e6:b1:80:1d:76:29:67:22:98:45:c5:8c:50:ac:68:
         15:d0:19:a9:a2:cf:6f:c8:86:d0:18:7b:70:91:b8:6b:04:6e:
         61:19:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org