Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32332d3234203d3e20323634323639.roa
File:                     3133382e3131382e3234382e302f32332d3234203d3e20323634323639.roa (raw, json)
Hash identifier:          13uSL9jjRoYTPtxdem5yJ0CtvV+kl1BBS0wrv29h2qA=
Subject key identifier:   1D:E8:E7:63:F7:E6:F7:B4:B8:FC:53:84:C7:47:DB:67:10:15:D7:B9
Certificate issuer:       /CN=3B343946F3FD21D5939F0642FCE83BCD3BDC05CE
Certificate serial:       525F282339C1A66DBC4DE6C821C51875EE57B978
Authority key identifier: 3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32332d3234203d3e20323634323639.roa
Signing time:             Wed 25 Oct 2023 15:10:18 +0000
ROA not before:           Wed 25 Oct 2023 15:05:18 +0000
ROA not after:            Wed 23 Oct 2024 15:10:18 +0000
asID:                     264269
IP address blocks:        138.118.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5f:28:23:39:c1:a6:6d:bc:4d:e6:c8:21:c5:18:75:ee:57:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B343946F3FD21D5939F0642FCE83BCD3BDC05CE
        Validity
            Not Before: Oct 25 15:05:18 2023 GMT
            Not After : Oct 23 15:10:18 2024 GMT
        Subject: CN=1DE8E763F7E6F7B4B8FC5384C747DB671015D7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:ea:5f:bb:2c:28:17:de:56:a5:dd:05:8d:
                    5b:56:13:5e:2b:13:8c:9b:07:92:7e:e7:cf:db:72:
                    78:23:da:6e:aa:a7:4d:44:71:6d:e6:10:a8:b5:dc:
                    41:eb:34:8d:ef:2d:d1:f9:63:e6:13:25:93:66:27:
                    88:2c:22:60:a3:eb:d5:cd:34:d7:d4:a8:54:a5:df:
                    60:f2:ab:16:73:54:99:d0:40:f6:ad:b0:64:40:99:
                    8e:8a:c3:29:d4:96:27:4b:42:1d:a3:e7:42:a4:54:
                    7b:91:29:a5:6c:86:06:55:8e:40:1e:09:44:39:d0:
                    34:3c:ba:96:d6:cf:b7:90:69:1b:7e:2e:04:4e:62:
                    f5:cc:34:d8:e5:5f:c9:54:58:03:87:65:05:5d:42:
                    7b:bb:50:6a:cb:44:f0:36:62:ea:6f:6f:4c:da:8f:
                    54:36:ab:9d:a6:df:a5:2f:c1:16:2c:96:89:91:d9:
                    ed:c0:31:87:ec:23:3f:52:80:5a:e8:b3:4a:a5:88:
                    07:1c:57:ef:89:6b:92:c1:e4:80:df:43:d3:3b:cf:
                    f4:0a:41:b3:11:be:9c:4c:ec:4e:b9:21:d9:33:73:
                    9a:0d:0a:93:5c:b1:d2:12:10:6c:b3:30:ce:83:cc:
                    cf:5d:fa:92:6b:46:67:8a:55:f8:b5:75:54:f6:0a:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E8:E7:63:F7:E6:F7:B4:B8:FC:53:84:C7:47:DB:67:10:15:D7:B9
            X509v3 Authority Key Identifier:
                keyid:3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3234382e302f32332d3234203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:75:af:df:7d:cc:25:1a:75:af:05:78:23:78:f6:fa:7d:
         ac:41:0c:41:99:13:dd:73:be:de:1b:b7:7a:3a:80:06:7b:9a:
         9b:b2:5b:15:9f:2a:68:80:e5:95:99:80:6b:51:79:3f:8e:30:
         22:61:3f:8c:19:a4:d9:3f:ec:a9:59:39:f1:95:92:29:92:60:
         3e:dd:e2:02:77:95:fe:96:ff:dc:70:1a:a9:a5:76:75:a4:91:
         a3:41:d3:07:ba:d6:3b:70:c1:55:35:bf:ef:03:27:36:fa:fc:
         aa:6b:55:2f:68:fd:cc:51:b2:46:08:9b:d5:cb:12:2b:7d:09:
         8f:11:02:de:61:81:9f:e0:59:63:e8:57:fb:61:1e:cf:ec:5a:
         03:ac:92:51:9c:be:ba:63:2c:29:dd:fa:22:a5:cb:7b:be:0c:
         54:6e:a5:0e:4e:cb:1e:a7:b1:14:74:80:f9:7f:f8:10:e7:e7:
         f7:2b:aa:cf:f2:c5:4c:a7:25:af:00:f3:e1:1a:f9:2d:78:ff:
         97:58:75:ee:0f:0c:02:36:30:dc:ab:08:98:45:3f:22:a1:96:
         7c:1d:db:29:66:34:ed:9d:7c:a0:f3:cd:88:12:ee:8f:fb:7c:
         73:51:e1:b0:d5:d8:50:51:e4:a0:16:89:2b:8c:ff:79:ba:46:
         71:ad:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org