Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32332d3233203d3e20323634333031.roa
File:                     3133382e3132312e3139382e302f32332d3233203d3e20323634333031.roa (raw, json)
Hash identifier:          0eVKVqwHxBhV4V7j759zI42ppfn+7KTPw+73YG1r1/8=
Subject key identifier:   7A:06:C8:6B:E2:8C:52:9C:87:A4:04:BB:EA:E9:0A:05:5F:26:91:2D
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       03B47F61405F7D20B9ADD58C23BFB6E662B370C1
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32332d3233203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:08:23 +0000
ROA not before:           Sat 08 Apr 2023 03:03:23 +0000
ROA not after:            Sat 06 Apr 2024 03:08:23 +0000
asID:                     264301
IP address blocks:        138.121.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b4:7f:61:40:5f:7d:20:b9:ad:d5:8c:23:bf:b6:e6:62:b3:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:03:23 2023 GMT
            Not After : Apr  6 03:08:23 2024 GMT
        Subject: CN=7A06C86BE28C529C87A404BBEAE90A055F26912D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:3f:d4:82:eb:7d:3f:6f:82:08:56:cd:51:
                    0a:24:95:a2:84:89:d6:65:43:2b:19:3d:de:54:73:
                    61:66:8c:6d:38:14:5f:7a:88:4c:d2:e5:6d:31:74:
                    95:d9:57:18:ec:b7:26:73:7b:4f:b9:29:07:68:a5:
                    0c:09:8a:42:0b:57:bb:be:84:40:68:ae:ba:ba:27:
                    76:5d:0e:bd:d9:9b:00:d4:a7:56:5f:6c:5f:72:58:
                    5d:a2:e3:73:e9:6a:16:58:70:54:1f:e4:1e:38:31:
                    a2:f4:77:bb:39:45:1d:55:22:fc:66:16:d1:69:25:
                    f4:0f:de:61:bf:c1:d9:9d:61:36:17:48:e5:47:d3:
                    6e:e7:cd:95:24:d0:1d:fa:1b:33:1d:f2:72:70:a5:
                    1f:53:5a:c2:15:94:e7:ba:6f:52:b6:01:ab:1e:01:
                    ea:60:36:56:91:57:ed:f8:53:15:5f:09:53:1a:ca:
                    b6:2e:b3:b9:f4:9d:5d:5f:40:6a:d5:5c:58:9e:4b:
                    ac:3d:6d:e8:4e:80:f9:73:0b:18:09:ef:b9:70:ca:
                    2d:ed:93:ef:51:61:4d:3a:09:fa:07:6a:60:04:33:
                    db:3f:9e:0e:26:ac:28:ec:13:af:02:2a:30:fc:a0:
                    87:fb:2c:72:fc:ea:91:bb:5c:82:71:e9:a9:ba:f9:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:C8:6B:E2:8C:52:9C:87:A4:04:BB:EA:E9:0A:05:5F:26:91:2D
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32332d3233203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:53:ef:be:a7:52:5d:e2:79:30:cd:e1:05:e7:71:40:2e:
         ce:b7:0f:ec:0b:22:f8:67:04:44:1f:1f:e7:c4:6d:b7:54:13:
         3e:75:cd:28:dc:c7:a6:04:f7:f3:10:a7:0b:8e:c2:06:80:1b:
         a3:4c:91:2e:37:24:e4:b5:7c:b1:db:8c:87:fa:37:37:5f:d2:
         03:92:3e:80:3d:47:88:8f:c8:d0:9a:12:46:68:f5:96:d4:55:
         02:c5:88:e7:1f:c0:fc:98:2d:4a:b7:19:9e:38:ec:da:ad:44:
         63:4f:dc:15:a5:f9:e4:a1:74:ee:9d:4f:07:07:b1:e6:9a:9e:
         e9:1b:3a:15:bd:15:f4:da:a5:7c:63:a1:d7:a6:a2:62:9d:55:
         71:32:20:3f:40:24:03:c7:fa:fb:41:41:f5:b2:09:b5:ec:47:
         1a:5d:71:75:2b:23:1f:89:0f:fd:72:71:ea:92:bc:70:59:38:
         f9:1c:92:d0:58:37:be:0d:39:34:7f:3a:eb:8a:50:39:6f:8b:
         c5:08:67:51:c7:62:29:e2:82:a4:0d:fc:91:3d:7c:84:cb:63:
         12:5e:5b:d9:9d:c8:ae:5c:e4:58:b0:dd:db:a3:59:a7:01:ff:
         e6:42:09:c6:ef:c2:63:a6:24:96:ac:60:6c:40:04:a4:d4:88:
         d1:e3:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org