Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34342e302f32322d3332203d3e203532353430.roa
File:                     3133382e3138352e34342e302f32322d3332203d3e203532353430.roa (raw, json)
Hash identifier:          zD1AYcjCS1XYyFTQ0hcJIKpF9Lb8+Ja7Rg7q1q+e4nY=
Subject key identifier:   89:F0:9B:95:EE:8A:71:4F:14:39:40:5F:02:DD:44:2A:8B:0B:21:59
Certificate issuer:       /CN=6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7
Certificate serial:       60F76FCCF49ACDFDF0CC5B226C8F792AF396C658
Authority key identifier: 6A:72:73:FC:2D:F7:3E:03:B2:D4:59:E6:7E:6A:CA:D6:55:59:A2:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34342e302f32322d3332203d3e203532353430.roa
Signing time:             Fri 07 Jul 2023 16:21:48 +0000
ROA not before:           Fri 07 Jul 2023 16:16:48 +0000
ROA not after:            Fri 05 Jul 2024 16:21:48 +0000
asID:                     52540
IP address blocks:        138.185.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f7:6f:cc:f4:9a:cd:fd:f0:cc:5b:22:6c:8f:79:2a:f3:96:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7
        Validity
            Not Before: Jul  7 16:16:48 2023 GMT
            Not After : Jul  5 16:21:48 2024 GMT
        Subject: CN=89F09B95EE8A714F1439405F02DD442A8B0B2159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:ac:5d:94:56:8b:29:9a:37:df:06:b1:6c:
                    15:bf:c6:06:5d:aa:f4:72:04:72:c3:0c:c5:f0:75:
                    ad:a0:38:43:4a:92:4d:18:21:08:2b:3a:ca:2f:4c:
                    63:1a:ff:6f:1e:c2:66:f9:fb:61:8e:73:4c:b4:7d:
                    01:f6:36:52:1f:91:13:ad:e4:bd:44:eb:fd:09:8e:
                    32:7c:81:53:f6:de:1a:ce:c5:fe:fd:4f:11:ba:e8:
                    41:09:0a:9d:0b:6b:37:76:03:83:7e:e2:f8:67:0c:
                    94:87:ac:d0:bd:ec:f1:ae:f7:3a:b0:73:8e:7c:ca:
                    c0:25:c8:29:5b:37:8f:1f:ba:8d:2d:35:c9:82:7c:
                    9a:46:6c:e5:1c:c2:fa:04:01:0e:d5:27:fd:cf:64:
                    71:22:e8:a8:54:8d:67:45:2e:5b:66:78:82:4e:bc:
                    90:2d:48:7f:94:de:04:5a:83:f3:c4:15:87:e7:b2:
                    8a:6e:41:9a:f2:18:40:c9:12:c5:cb:ac:d1:04:8a:
                    83:ad:99:29:69:b5:82:cb:59:16:5f:36:6b:36:df:
                    16:42:c7:f6:e5:4d:9c:bd:27:77:f8:05:5b:c2:3b:
                    85:64:e2:f1:8d:48:6f:86:e6:d7:2e:8f:b0:87:3c:
                    a0:17:f9:0e:ec:95:8d:ab:47:d5:39:98:fe:be:c1:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:9B:95:EE:8A:71:4F:14:39:40:5F:02:DD:44:2A:8B:0B:21:59
            X509v3 Authority Key Identifier:
                keyid:6A:72:73:FC:2D:F7:3E:03:B2:D4:59:E6:7E:6A:CA:D6:55:59:A2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34342e302f32322d3332203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:c9:ef:ad:af:da:f9:d3:82:8a:2c:49:b3:96:d1:65:d4:
         9d:ca:81:39:26:22:38:c9:01:bc:f8:71:83:75:9f:6d:18:cc:
         49:8c:9c:3a:9c:9e:1c:68:a7:80:50:15:75:4c:0f:d6:27:28:
         79:99:0a:9e:d3:62:24:a7:b6:dd:42:d7:e2:fb:25:c5:1b:f5:
         5f:38:c5:1e:5a:63:16:4b:80:37:7b:fd:40:14:42:df:2f:8e:
         72:b4:00:c4:ed:48:f9:6a:e4:6e:93:d3:15:52:fe:10:eb:8e:
         e6:3e:4a:86:fc:88:3a:06:48:44:b8:c6:85:18:d8:d3:2e:f7:
         6a:73:a6:43:84:cb:31:a6:60:c3:2e:5d:13:4d:46:76:bd:95:
         88:f7:a8:cb:2b:7c:af:64:79:2d:b7:11:b9:b3:0b:0a:5f:7d:
         4e:fd:4f:9b:7f:a3:f2:88:e9:e9:06:94:bf:24:92:9a:1b:4f:
         07:b2:75:74:b8:17:ad:32:c6:6e:21:3b:6b:82:bc:84:6e:4f:
         d9:55:29:85:ee:e8:df:62:16:44:e2:c2:09:00:63:a6:db:34:
         ce:7f:a9:ae:83:11:99:43:d6:1a:4c:8e:71:b8:42:6d:50:97:
         bf:80:3f:02:7a:66:31:bd:25:b3:c4:de:f2:97:23:65:b1:03:
         4c:3d:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org