Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
File:                     3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier:          q5hjkEr8VmP0k/n5TL1oX67FZWXb87KA2XX2LrSFi4w=
Subject key identifier:   F1:3D:40:D5:98:B9:F6:96:83:74:BD:9C:61:FF:B4:52:6B:B8:1C:79
Certificate issuer:       /CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Certificate serial:       14C7A9A223941B9A5C7FF0C649C0A7E11794636B
Authority key identifier: 71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa
Signing time:             Wed 03 Apr 2024 12:36:50 +0000
ROA not before:           Wed 03 Apr 2024 12:31:50 +0000
ROA not after:            Wed 02 Apr 2025 12:36:50 +0000
asID:                     264565
IP address blocks:        138.36.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c7:a9:a2:23:94:1b:9a:5c:7f:f0:c6:49:c0:a7:e1:17:94:63:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
        Validity
            Not Before: Apr  3 12:31:50 2024 GMT
            Not After : Apr  2 12:36:50 2025 GMT
        Subject: CN=F13D40D598B9F6968374BD9C61FFB4526BB81C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:44:58:88:9d:ef:3f:68:b1:c2:37:02:3d:
                    4d:97:9a:ce:1d:28:5b:12:50:58:b7:17:86:d2:7e:
                    f4:be:3a:7d:a2:66:68:0a:4f:e4:0c:3b:a6:a3:6d:
                    5c:6a:b2:9d:ca:5d:b3:1a:5e:34:96:d6:56:47:68:
                    02:d5:ba:10:ef:22:22:e5:cd:4a:c3:a3:1b:4e:cf:
                    30:9c:35:8f:a9:aa:c7:3b:43:69:f8:72:c1:7b:de:
                    1d:90:0d:5d:6a:5c:61:ef:b9:2f:3c:03:ac:f8:b0:
                    7f:f5:d0:6c:1f:17:71:b2:01:66:b6:bf:37:d6:bb:
                    54:d5:32:09:72:d3:f1:08:ec:c0:de:82:5f:86:89:
                    95:46:3d:9e:cf:26:7f:dc:55:71:9b:13:d8:e3:79:
                    77:c5:5f:57:d6:22:be:07:1e:49:a9:cd:38:0d:e8:
                    33:f3:bc:14:8b:72:cb:ac:7b:39:31:0b:61:18:f5:
                    42:78:fc:50:db:af:6e:0c:62:51:3a:fa:95:a6:b0:
                    14:68:52:cd:40:27:bc:3d:85:66:c1:2b:d9:54:12:
                    46:ef:10:89:c8:ea:3b:30:d1:f3:1f:ab:1e:f3:f8:
                    ef:b9:6d:43:1c:bd:58:5c:00:ec:7d:84:4e:14:cf:
                    48:cf:4e:3c:38:9b:1f:5a:10:cc:ae:c7:13:c3:e6:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:40:D5:98:B9:F6:96:83:74:BD:9C:61:FF:B4:52:6B:B8:1C:79
            X509v3 Authority Key Identifier:
                keyid:71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/3133382e33362e34342e302f32322d3234203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:08:cc:9b:23:8b:98:5e:1a:35:f2:34:c6:90:83:b1:cb:55:
         3d:c5:b9:01:84:04:8a:38:03:7f:c9:56:86:22:51:e1:b4:1b:
         54:31:88:66:41:5e:25:b4:4c:0c:4b:7a:09:94:c9:0b:01:24:
         cc:85:7e:89:bd:70:75:2f:68:01:08:6d:f4:f1:3c:6b:4d:e4:
         1b:5b:dc:e7:19:f7:01:8b:f9:62:f1:e6:26:4f:c3:c2:4c:8e:
         7b:c8:03:37:f5:b0:3c:74:73:52:7e:e4:3a:28:ed:44:57:45:
         a9:ed:c9:40:8f:16:98:90:a9:f4:8f:21:de:b4:99:04:4d:da:
         30:d1:8c:80:7c:7b:75:20:4b:f8:8a:29:0d:9a:10:6f:64:01:
         63:65:76:da:42:a1:17:9a:e2:f8:a6:21:a7:8a:6a:1e:a4:70:
         ae:26:1e:02:7d:80:fe:f1:fa:48:43:a9:d8:5c:6c:7b:29:73:
         74:39:bd:87:f1:9c:49:0e:f9:b5:d2:25:f5:64:db:c5:7a:ad:
         d5:4b:cb:e5:16:be:6b:cd:a3:24:05:e9:4f:83:61:58:46:a3:
         64:20:1a:f0:5e:a6:d4:7c:cf:08:3c:a7:2b:12:97:79:fe:89:
         ab:2a:85:eb:0b:f0:bd:57:29:82:c4:55:54:d4:7e:2b:b2:da:
         75:ce:ea:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org