Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131332e302f32342d3234203d3e20323634313633.roa
File:                     3133382e39372e3131332e302f32342d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          effw3qhmMJL3vn5bJTMhqnFr5bihzC8CM9mQoj1weIU=
Subject key identifier:   3D:CB:C6:9F:B4:B7:9F:01:16:4E:7A:E7:6E:56:28:3B:0F:5D:64:76
Certificate issuer:       /CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
Certificate serial:       6A228A5C977E7D79304DF6F8E3485466CB8B0A8A
Authority key identifier: FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131332e302f32342d3234203d3e20323634313633.roa
Signing time:             Mon 27 Mar 2023 13:10:52 +0000
ROA not before:           Mon 27 Mar 2023 13:05:52 +0000
ROA not after:            Mon 25 Mar 2024 13:10:52 +0000
asID:                     264163
IP address blocks:        138.97.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:8a:5c:97:7e:7d:79:30:4d:f6:f8:e3:48:54:66:cb:8b:0a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Validity
            Not Before: Mar 27 13:05:52 2023 GMT
            Not After : Mar 25 13:10:52 2024 GMT
        Subject: CN=3DCBC69FB4B79F01164E7AE76E56283B0F5D6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:bd:4c:43:f5:0d:36:48:15:ad:ad:94:7b:
                    4d:fb:32:f0:09:f1:d0:37:87:75:31:c7:3e:ab:ec:
                    0a:0a:36:8a:dd:e5:b3:74:1a:ba:a4:27:f0:76:f9:
                    9f:54:95:a4:60:ef:62:40:32:fe:3c:e3:ae:4d:8c:
                    98:5f:b0:c6:b3:41:e7:72:c2:d0:aa:c1:b1:b0:d2:
                    39:ea:c0:29:6f:6d:67:a1:99:85:87:0d:35:61:d6:
                    cc:ba:27:0e:ae:3c:4e:52:b0:eb:69:11:6f:f0:b6:
                    b9:3d:19:1b:ab:b9:58:d8:ba:d9:eb:ee:19:8e:6f:
                    a4:35:14:38:0b:58:ae:27:20:bb:23:28:e3:d4:8b:
                    ba:b2:ef:fe:50:c2:7a:35:f4:4c:3f:10:c4:3c:f9:
                    12:35:fe:f2:f3:61:9a:d8:ef:03:67:cc:9e:36:9a:
                    04:c8:90:33:7b:81:d1:4e:4a:52:a2:1a:ca:e6:30:
                    08:98:83:3b:12:ff:14:2d:56:42:7d:e3:71:f2:90:
                    35:7e:78:22:dc:5f:9a:85:3e:e3:36:7b:3b:61:16:
                    12:74:31:37:77:b2:97:c7:52:9b:4e:a5:7e:e9:42:
                    15:83:c8:1b:21:38:51:6c:0f:34:d4:e2:5c:30:04:
                    e7:53:d0:d3:ba:79:d0:f0:eb:10:33:d1:cb:fa:5b:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:C6:9F:B4:B7:9F:01:16:4E:7A:E7:6E:56:28:3B:0F:5D:64:76
            X509v3 Authority Key Identifier:
                keyid:FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131332e302f32342d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:82:08:d2:c9:cd:03:82:d0:82:72:48:50:72:d4:5e:8f:b3:
         32:a6:2a:47:17:53:c4:3e:92:92:db:b6:a1:5f:10:b5:64:f3:
         3f:3a:4f:36:7f:17:e2:cc:35:4e:dc:fa:03:13:57:47:3c:a9:
         fe:5c:92:f0:02:63:a5:2b:c5:53:4c:97:c1:4e:7d:1b:cb:14:
         01:e2:88:e5:0d:28:b2:19:c0:da:16:85:97:1f:a0:02:7b:7a:
         c5:2e:92:1e:4c:80:f5:96:4b:88:fb:00:71:c8:d7:23:4f:e4:
         3d:49:9a:54:fc:5f:7b:a0:1a:03:d5:97:d4:4b:c3:23:9f:fd:
         aa:a5:74:55:06:5e:76:a7:00:0c:84:d7:fd:88:37:da:8d:6e:
         54:b9:a2:9e:45:db:49:f4:2f:dc:8f:fd:18:ec:0c:d8:26:de:
         02:27:6c:b5:55:45:75:7a:37:25:7b:0b:a9:48:53:a1:96:94:
         4d:29:b2:58:e9:f6:44:ce:a8:b6:c9:53:30:0a:3b:d9:e3:e7:
         92:af:ff:f8:e1:b0:fd:8b:4a:97:a5:95:99:aa:cb:36:f2:32:
         fa:8a:03:7f:37:ee:a0:da:00:d7:32:2b:f4:30:1c:7b:a6:44:
         21:17:04:c6:d2:f9:45:06:8f:b5:bd:0d:5c:ac:71:06:09:37:
         00:5e:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org