Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa
File:                     3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (raw, json)
Hash identifier:          9/SLEBw8DkdncL2SeJ2q4D+m/HJAMIyRYwcEgCFI2TA=
Subject key identifier:   FE:AE:B0:71:B6:78:18:FB:AC:B5:AC:34:91:EE:DA:A9:E8:C0:31:08
Certificate issuer:       /CN=1D3F19360D7AC4E9902F8B30805ADA33235167B4
Certificate serial:       544F8DD8B66E2AAD699E45C7E10F76C61C9FB0D1
Authority key identifier: 1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa
Signing time:             Thu 25 Jan 2024 13:05:55 +0000
ROA not before:           Thu 25 Jan 2024 13:00:55 +0000
ROA not after:            Thu 23 Jan 2025 13:05:55 +0000
asID:                     270891
IP address blocks:        138.121.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4f:8d:d8:b6:6e:2a:ad:69:9e:45:c7:e1:0f:76:c6:1c:9f:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3F19360D7AC4E9902F8B30805ADA33235167B4
        Validity
            Not Before: Jan 25 13:00:55 2024 GMT
            Not After : Jan 23 13:05:55 2025 GMT
        Subject: CN=FEAEB071B67818FBACB5AC3491EEDAA9E8C03108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:8c:c3:b4:ad:b3:b2:54:6e:42:1d:c4:82:
                    de:41:68:39:e0:98:69:90:dd:14:08:30:f7:a6:11:
                    6d:47:6a:99:d5:0e:38:e4:dd:e9:ba:fb:27:52:e0:
                    f0:bc:14:7d:bd:b4:3a:02:fd:ff:ac:95:fd:9f:63:
                    85:6e:c2:07:6c:88:f9:7c:83:19:5b:ab:8d:07:d8:
                    a4:94:be:ab:1d:00:ae:22:c7:8b:e6:36:00:cf:b6:
                    a5:34:61:9d:b6:64:90:c6:df:1e:cd:3d:c5:0e:df:
                    19:4a:fb:63:86:17:1e:74:d7:8f:d7:d3:25:62:85:
                    4c:bb:1d:44:52:b2:2a:ba:ae:f9:2e:d8:e7:99:64:
                    31:8f:93:74:e3:4e:e9:58:74:1c:fc:b7:40:2f:98:
                    d5:6a:0b:4c:43:6a:e8:6a:26:ca:1b:5f:be:16:59:
                    1a:8c:d9:df:4c:d0:39:42:21:c8:b4:c7:2b:17:8a:
                    2a:70:3b:e9:07:58:a2:84:07:e4:be:7d:77:dc:89:
                    1c:d4:2e:b4:af:7b:40:ef:0f:93:d4:dc:c1:93:2c:
                    99:98:44:4d:f7:c1:a1:d1:60:c4:93:2c:50:c6:90:
                    a5:e6:e8:e8:18:c8:24:e4:f2:d2:32:34:4d:ec:2c:
                    48:ef:73:07:f0:be:9b:83:27:27:a4:2a:79:7c:e4:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AE:B0:71:B6:78:18:FB:AC:B5:AC:34:91:EE:DA:A9:E8:C0:31:08
            X509v3 Authority Key Identifier:
                keyid:1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:16:01:d2:5f:ca:73:dc:a6:9d:73:54:a7:3e:d0:87:47:26:
         0d:3a:2a:bd:d8:6d:c5:f7:59:8c:46:72:6a:d5:95:e6:01:d7:
         2c:c1:da:8a:08:aa:0a:df:ce:d6:54:67:b5:89:38:c2:7c:b0:
         23:9e:0a:7f:7a:92:e5:c4:b1:f2:ce:ae:d6:01:fa:44:20:68:
         bd:3e:6b:17:0f:9b:74:a3:03:e0:b1:c7:dc:57:e1:da:e6:80:
         f0:50:0c:42:77:d7:3f:30:71:d7:c8:a6:e0:b0:4e:64:af:03:
         d5:15:ae:44:04:e1:cd:b5:7b:9e:c1:9d:09:d6:42:8e:cd:c0:
         30:e5:54:eb:73:fe:58:92:63:10:7e:90:89:ca:c9:5e:c1:a5:
         38:08:41:a5:94:d5:80:45:e0:13:80:2a:52:c9:f7:03:ab:22:
         72:28:13:63:27:54:a7:71:51:88:fb:9b:4c:cf:2f:89:7e:53:
         49:3b:89:78:d6:db:7a:69:da:80:aa:9e:65:6b:62:f1:47:24:
         6a:98:5f:1d:d9:38:2c:91:f8:1b:d3:78:ab:da:31:6a:a4:7d:
         a5:58:61:3f:40:d5:77:56:92:e0:19:2b:58:81:71:96:8d:35:
         30:53:72:d0:77:a8:a2:c7:ee:37:48:2b:f2:b4:e0:09:2c:0c:
         dc:a7:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org