Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32332d3233203d3e203238333630.roa
File:                     3133382e39342e382e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          Jn/Glrh2bbM2dxrrmqOOQq8Gu8qI43EjLcJi3KvgeZU=
Subject key identifier:   D9:90:17:CB:4B:D4:D5:A2:F5:FB:13:3B:26:62:EC:C3:65:DA:FA:90
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       6D8DA87224327BF75868CA2549D84E1A5ECBB16B
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32332d3233203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:34 +0000
ROA not before:           Thu 17 Nov 2022 17:58:34 +0000
ROA not after:            Thu 16 Nov 2023 18:03:34 +0000
asID:                     28360
IP address blocks:        138.94.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8d:a8:72:24:32:7b:f7:58:68:ca:25:49:d8:4e:1a:5e:cb:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:34 2022 GMT
            Not After : Nov 16 18:03:34 2023 GMT
        Subject: CN=D99017CB4BD4D5A2F5FB133B2662ECC365DAFA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:fb:14:23:ac:d2:a2:2a:d2:36:83:d6:00:
                    c5:0c:01:b4:07:2b:fd:4b:6a:0e:52:59:15:84:9a:
                    aa:19:21:45:1c:36:1f:db:9b:56:61:2f:e1:7c:32:
                    b6:bd:80:35:8b:cc:c9:3c:c0:cd:ab:f3:86:03:2e:
                    a9:68:b7:8c:b6:63:66:da:49:90:2b:17:69:e1:9a:
                    a9:8c:3e:35:73:cb:d1:8d:2a:43:5d:f1:6d:be:12:
                    40:68:69:42:3d:08:c7:8a:e1:31:f8:b6:99:45:2e:
                    8a:bf:8d:c3:1c:73:05:a6:a6:44:f7:5e:62:45:17:
                    42:72:0d:ad:cd:75:ff:df:cc:7e:d4:09:db:40:85:
                    4f:57:84:4d:4d:4a:37:05:18:44:1d:ae:d2:08:c8:
                    7e:37:fa:f6:f5:45:7f:9e:d3:41:ce:06:1e:84:4b:
                    2b:7a:83:db:a4:62:c6:ba:db:fd:85:c7:7c:74:2b:
                    29:b0:2f:4f:f8:46:b0:e6:44:5f:28:8e:fe:af:b3:
                    73:16:0c:97:b4:6a:31:6b:cd:72:58:77:70:2d:76:
                    10:7b:26:2a:01:84:d2:0c:3a:a2:47:2a:a9:ef:7b:
                    d0:da:c5:23:07:1c:9b:44:f8:9a:1a:b3:56:62:f8:
                    42:19:76:41:01:3a:b5:8e:da:5f:68:f6:85:b4:ec:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:90:17:CB:4B:D4:D5:A2:F5:FB:13:3B:26:62:EC:C3:65:DA:FA:90
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:2f:b0:e4:77:92:db:00:ea:81:30:77:f1:50:68:41:ab:
         20:e1:26:72:af:d6:27:bf:d6:51:51:cd:57:46:b8:33:c8:87:
         92:73:52:4f:16:0f:a2:02:37:92:9a:c1:98:08:8d:d9:eb:77:
         c3:46:66:fe:1d:fd:af:7b:37:0c:c7:95:00:86:c1:5c:d0:6c:
         ed:70:d4:34:26:9e:85:5d:2d:1d:6c:eb:42:f5:81:e1:f7:1d:
         10:64:26:77:79:ad:28:3e:27:05:00:64:45:1f:20:72:c8:15:
         9c:09:93:f8:8c:fd:d9:f7:60:0b:98:8f:3b:30:b8:51:64:90:
         0e:43:4a:75:11:ef:9f:3b:93:85:f1:20:18:a1:c8:0f:15:e8:
         49:d0:47:2c:98:cb:fe:95:26:ae:b4:5c:15:0b:fd:f0:a1:7a:
         8d:34:9e:5d:82:5c:ef:c2:cb:2e:60:43:e5:4b:e1:56:56:0c:
         ed:bc:3b:72:7d:bc:a2:c8:40:59:23:5a:26:f7:06:72:94:ec:
         61:74:d5:e3:6f:01:30:da:d4:ce:18:55:cb:76:a2:45:66:75:
         f9:3b:5f:9b:0a:af:26:d2:c1:88:6a:9c:a8:5f:40:7e:df:49:
         af:6c:be:8e:b9:93:dc:e7:45:ef:b5:3e:04:03:12:33:33:05:
         7e:9b:a3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org