Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
File:                     3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (raw, json)
Hash identifier:          Y+XVook9kwH+cSbvdQz7vFVE2g0J4EymB0ThdL4POfg=
Subject key identifier:   9D:7B:2A:2A:34:CE:8C:4D:40:65:02:3D:FF:CE:7B:AB:E9:9F:D5:64
Certificate issuer:       /CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
Certificate serial:       407EE828AD19C43E1778834387765E4365D3640F
Authority key identifier: 60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
Signing time:             Mon 08 Apr 2024 17:09:29 +0000
ROA not before:           Mon 08 Apr 2024 17:04:29 +0000
ROA not after:            Mon 07 Apr 2025 17:09:29 +0000
asID:                     263905
IP address blocks:        138.204.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7e:e8:28:ad:19:c4:3e:17:78:83:43:87:76:5e:43:65:d3:64:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6078711E4D16F976E3EAD759D27879C6B0B008C1
        Validity
            Not Before: Apr  8 17:04:29 2024 GMT
            Not After : Apr  7 17:09:29 2025 GMT
        Subject: CN=9D7B2A2A34CE8C4D4065023DFFCE7BABE99FD564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:e6:ae:39:1f:6d:37:4f:c4:e1:30:6d:cf:
                    e6:af:bc:ed:96:38:60:4b:83:ce:61:ea:e6:9f:52:
                    ec:d6:f6:c2:50:52:fd:3b:c9:7c:24:29:76:66:b2:
                    8d:1b:5e:10:a0:9c:54:01:38:01:8b:7a:97:7b:a2:
                    87:3a:1f:46:d8:e0:1d:04:41:73:b1:fa:64:91:5b:
                    97:93:43:f5:85:bd:e0:0a:cd:e2:4f:c6:0e:de:55:
                    cd:87:a6:5d:36:22:f7:6e:91:60:e7:55:41:c5:37:
                    75:41:da:b6:3b:64:4d:4a:4c:af:b0:57:f6:92:84:
                    11:3c:25:26:84:86:63:d5:8b:24:dd:e2:df:8d:47:
                    ce:28:8d:cd:5d:5a:a3:d1:64:6d:da:33:c6:4d:01:
                    a0:7f:c7:f3:21:75:78:c7:62:50:31:69:9d:ea:d4:
                    46:b0:89:b9:69:d9:a7:04:9f:f1:6b:71:f3:de:d5:
                    58:07:2e:d6:39:fd:ad:8b:ea:1b:78:01:e4:3f:3d:
                    0e:25:6a:0c:b0:6c:8a:c7:1d:8d:d4:ca:68:4f:3f:
                    a3:95:6f:87:0d:35:1d:1e:af:52:f6:b0:23:91:66:
                    74:0b:11:5a:fb:8b:aa:83:04:1c:d9:a5:6e:1f:58:
                    f4:b2:72:9e:9f:3b:c7:7d:54:ad:bd:69:5c:56:72:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7B:2A:2A:34:CE:8C:4D:40:65:02:3D:FF:CE:7B:AB:E9:9F:D5:64
            X509v3 Authority Key Identifier:
                keyid:60:78:71:1E:4D:16:F9:76:E3:EA:D7:59:D2:78:79:C6:B0:B0:08:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6078711E4D16F976E3EAD759D27879C6B0B008C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/1/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:74:96:e8:52:1f:f3:37:e6:7b:02:8d:fb:b7:e5:08:28:
         c9:24:ef:74:e3:2e:f4:67:17:8d:8e:63:8f:f2:26:1e:b3:84:
         4f:d0:52:20:b9:31:05:15:7e:86:54:fc:4d:41:f6:85:f9:01:
         e9:dc:b1:6d:7f:e8:0b:69:d3:9e:71:bd:fb:37:2e:3b:04:0e:
         eb:4f:db:20:b2:b4:ab:5f:2f:c7:42:8f:0b:13:93:18:3e:01:
         b8:fd:11:22:5c:5c:93:03:b2:b6:5e:6d:93:57:63:94:cd:91:
         b7:df:9e:71:6e:89:1b:eb:2e:e8:bf:13:5b:b4:4e:f8:2a:25:
         54:1c:e8:f9:55:c9:b8:04:13:6b:ec:37:69:fa:e0:b9:f7:cb:
         72:92:76:b5:50:cf:86:c0:42:4d:eb:d5:70:e5:16:d2:e3:25:
         7f:d8:1f:10:4e:01:3c:54:c8:3f:ff:9d:7b:e0:2d:53:da:ef:
         8b:1b:96:9b:6e:df:29:c3:8d:fe:5f:52:39:20:da:28:9c:81:
         d6:20:bb:37:87:03:56:d4:f0:b9:5d:89:23:b8:87:53:12:b0:
         28:5b:18:68:36:1a:bd:ef:7c:04:b6:15:8d:09:b2:d5:23:d3:
         aa:fb:91:c3:73:e0:ab:3e:b8:2c:e8:7c:75:f9:75:ce:8e:78:
         3e:a8:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org