Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3234203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32332d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          oTRRsf8sicrfpOLf5w8AQqd3hxNKukyngBKLMEPE3Mw=
Subject key identifier:   62:FF:30:D0:08:49:5B:C3:87:0D:10:D5:4B:EE:54:06:97:29:7C:9B
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       30EF658184BF48C820EFABF83A868968EF2C4BEF
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3234203d3e20323634313236.roa
Signing time:             Sat 28 Jan 2023 03:51:46 +0000
ROA not before:           Sat 28 Jan 2023 03:46:46 +0000
ROA not after:            Sat 27 Jan 2024 03:51:46 +0000
asID:                     264126
IP address blocks:        138.59.200.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ef:65:81:84:bf:48:c8:20:ef:ab:f8:3a:86:89:68:ef:2c:4b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Jan 28 03:46:46 2023 GMT
            Not After : Jan 27 03:51:46 2024 GMT
        Subject: CN=62FF30D008495BC3870D10D54BEE540697297C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:9f:12:80:ce:70:8f:51:93:dc:5b:44:15:
                    9e:a8:c0:bf:b3:fa:42:2b:f4:61:d6:58:43:02:e9:
                    66:bd:f3:bf:74:a7:62:31:ca:71:6d:99:ce:b3:c0:
                    b1:88:b3:39:92:66:0c:ef:f1:49:75:7b:3d:92:0b:
                    2a:2e:dc:59:bc:f9:ae:87:5d:a0:4e:e1:af:78:a3:
                    72:aa:4a:2d:d9:32:7d:31:ae:cd:95:1c:cc:b0:13:
                    b5:10:bb:39:c9:35:36:e3:29:18:50:69:5e:f9:9c:
                    13:55:93:0c:b3:2d:69:92:2b:5f:4b:a6:f4:09:d4:
                    1c:dd:c4:12:07:3b:69:4b:82:78:0b:1d:18:af:31:
                    23:be:60:62:10:a5:fa:ba:e9:bb:3b:45:47:c3:8b:
                    c6:47:2f:5b:23:7d:ae:d2:64:8b:f9:96:b4:e2:37:
                    3a:1e:fa:16:a2:ef:b4:84:7d:d2:53:85:75:0e:b3:
                    0d:46:a4:cc:48:84:c5:ec:06:d4:b9:3a:a4:eb:0d:
                    94:45:f5:2d:87:15:ff:56:6b:8b:8b:f7:01:5a:ed:
                    79:d9:c9:34:64:44:21:b6:0d:46:71:5d:fa:62:b0:
                    79:13:ec:c8:6b:53:81:8f:31:b0:09:b6:36:ea:c4:
                    9c:4d:d8:ee:f8:8c:e5:60:94:08:0a:40:d3:4e:9a:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:30:D0:08:49:5B:C3:87:0D:10:D5:4B:EE:54:06:97:29:7C:9B
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32332d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:d3:06:76:d9:9b:c3:fb:d5:56:83:75:23:f1:56:10:e7:
         87:34:12:4a:9d:ff:3e:69:3f:b0:2b:33:38:6a:e3:f9:7d:bf:
         8f:8c:44:d4:66:fd:db:59:50:78:21:2c:ea:73:d5:73:1b:56:
         04:7b:21:28:4c:cf:5e:4d:42:4d:60:cf:b2:55:e2:3e:d5:95:
         4d:41:08:5f:b2:9f:41:ab:84:ff:4f:36:81:9c:0b:e0:a8:98:
         ba:7c:20:60:84:8c:25:d6:31:37:a1:64:dd:f2:cd:5c:7b:69:
         59:33:30:8d:f0:57:dd:7c:c7:ed:34:ab:32:08:b7:f8:9d:3e:
         23:32:7f:34:a7:0f:e7:a9:b3:dc:7b:61:b3:fd:1f:72:a0:0d:
         e9:19:a2:48:7c:27:42:80:d1:0d:d3:63:1d:c7:39:de:d2:a2:
         0c:41:b9:b0:1e:29:73:dc:d5:23:f3:e8:a2:4a:fa:78:66:e3:
         6b:f2:2f:5d:d1:54:b7:e0:cb:35:6c:19:0d:16:66:0b:d3:97:
         18:28:b8:6f:48:33:b3:a6:fd:b8:16:29:96:e1:3c:6e:07:33:
         3f:04:6c:7c:b2:6e:4a:e8:04:7d:8f:0c:2d:80:9d:8d:b9:45:
         0c:23:2b:23:94:1e:15:f7:4c:b5:91:11:85:c1:4d:8c:fe:28:
         67:2b:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org