Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32332d3233203d3e203238333630.roa
File:                     3133382e39342e31302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          htYLnh4BxTv530S2UgC90OrT174E3uJHqqCMI+2lI9g=
Subject key identifier:   07:36:0C:98:7A:6E:40:E3:F7:6A:D2:59:37:53:6C:43:0B:F2:B0:18
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       3C2B6B11F873A439B30C0192852466BCDDFB57D5
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32332d3233203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:37 +0000
ROA not before:           Thu 17 Nov 2022 17:58:37 +0000
ROA not after:            Thu 16 Nov 2023 18:03:37 +0000
asID:                     28360
IP address blocks:        138.94.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2b:6b:11:f8:73:a4:39:b3:0c:01:92:85:24:66:bc:dd:fb:57:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:37 2022 GMT
            Not After : Nov 16 18:03:37 2023 GMT
        Subject: CN=07360C987A6E40E3F76AD25937536C430BF2B018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:af:54:85:34:21:4b:b1:fb:a6:43:6f:63:
                    07:e5:a5:ba:0c:0d:03:36:9b:aa:81:5a:f1:cf:1a:
                    85:67:ec:c0:5b:f6:a2:8d:83:ca:af:a4:94:a7:4a:
                    b5:ea:d5:ee:8c:3d:15:90:1c:a2:c1:4a:27:d4:bd:
                    da:94:c0:1f:12:dd:b0:eb:6c:cd:58:32:e8:56:f4:
                    b5:60:9e:77:be:04:de:f9:ba:5e:cf:5f:f6:ee:4b:
                    16:5f:5f:34:0c:46:d1:6d:ee:8e:bd:0e:96:d0:18:
                    17:57:35:60:70:74:df:1f:a5:4b:f8:8e:1c:af:77:
                    4a:94:ed:0f:3b:1b:81:68:63:51:a3:64:58:7c:01:
                    33:8d:64:de:3d:d2:e2:fb:85:4c:f2:07:51:bf:58:
                    ce:23:13:f7:d6:62:cf:4b:33:f5:42:ec:d8:ab:61:
                    ef:f9:b2:e7:50:0c:33:88:f0:72:34:ae:fd:74:a0:
                    18:29:7f:02:19:bc:0a:8b:b1:b7:a2:89:ef:ce:9e:
                    46:ee:61:c9:13:13:e5:bf:7f:2e:9b:d3:80:70:d5:
                    0a:b0:69:cb:67:48:15:f4:c3:ed:e5:f0:54:69:24:
                    b6:7b:82:dd:71:47:76:91:fd:b1:3d:e0:b0:26:9b:
                    88:5a:7a:c2:e0:79:a1:e0:13:99:33:8f:4c:ae:02:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:0C:98:7A:6E:40:E3:F7:6A:D2:59:37:53:6C:43:0B:F2:B0:18
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:1a:3b:f0:2c:24:bd:0b:16:0f:e7:4b:b5:bd:9b:77:ca:
         fc:d5:6c:f7:70:6c:73:5b:77:6f:38:87:a7:e8:91:c6:da:88:
         89:6e:6f:07:2e:3d:bb:1b:8a:24:27:3f:78:b3:4e:1f:80:27:
         e8:59:28:3e:c4:ba:05:56:37:71:85:0e:5c:14:0d:ef:be:d2:
         03:ef:7b:01:66:58:db:6a:d9:e2:27:3a:f0:13:d8:5d:04:7d:
         bd:9b:01:47:16:a4:4b:74:90:68:8a:40:a3:3e:0e:a7:14:4a:
         99:f9:db:20:1d:92:5d:bc:60:4d:06:6a:19:2a:88:a6:08:ba:
         24:03:ee:b6:29:cf:6e:cb:af:9d:09:ff:dd:00:ad:f8:9c:16:
         80:7e:3f:ee:30:ec:b8:5b:a8:f5:f3:c4:8a:3c:53:e7:19:96:
         e6:ff:55:19:bd:26:7d:3d:10:91:20:fa:e0:ac:44:14:56:69:
         b6:d5:18:1c:1a:f4:1a:81:8e:c1:35:e6:a5:a6:0c:07:3b:6b:
         f9:c6:0f:18:cf:d8:cd:75:a3:6d:70:64:11:e8:ae:63:c4:dd:
         0f:d4:42:c8:e1:d0:46:4c:ba:9e:60:2b:b8:98:92:8e:f6:13:
         26:11:32:b0:b0:da:42:fc:ce:cf:11:56:28:80:90:f6:e8:16:
         1b:22:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org