Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa
File:                     3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          ihZ/izJ1Q+pKOmtLk8FxIbNCMXQjcWA76qHREUHdV1Y=
Subject key identifier:   EB:DC:E3:63:BE:42:5F:1A:A9:82:C3:ED:CB:E4:64:78:69:5A:B8:73
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       732AF516A31965AE5805A40F626C4E0F0166476F
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        138.122.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2a:f5:16:a3:19:65:ae:58:05:a4:0f:62:6c:4e:0f:01:66:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=EBDCE363BE425F1AA982C3EDCBE46478695AB873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:06:4b:a5:df:fb:c5:e5:17:3b:c4:ea:aa:
                    74:c0:5e:01:f4:15:0d:cc:a7:d9:24:da:52:d0:a3:
                    27:0d:35:cf:c0:88:4d:7e:5a:83:da:ce:0c:ff:6b:
                    b8:d3:c4:a2:b9:4c:33:7c:24:db:c7:e3:ba:ee:bf:
                    d0:10:5c:1b:0c:54:0a:c9:23:77:f4:92:33:f2:88:
                    6e:f7:87:49:f0:1a:69:d8:48:37:d4:a2:2e:80:92:
                    bc:14:7c:4d:ed:92:52:44:bc:83:2c:6e:8d:6f:55:
                    10:eb:fc:82:51:19:90:21:b7:93:9f:32:fa:5b:6b:
                    b3:b3:ef:ac:54:06:82:5a:4c:56:85:4e:06:ef:67:
                    f7:44:d5:03:ac:f5:37:f5:f0:17:50:1d:e9:ae:67:
                    b8:03:55:6c:85:7a:11:72:fb:ee:c2:92:6c:aa:be:
                    35:d9:5e:e7:73:0a:b6:5a:b1:23:aa:da:45:37:b4:
                    65:ac:94:a1:b8:38:4c:0d:1c:cc:9e:83:a2:dd:49:
                    ce:2d:43:c2:17:38:bb:cf:64:e0:9e:50:8a:f9:8c:
                    47:11:9d:a7:c6:db:c7:17:23:bd:45:a2:87:e9:79:
                    c5:49:e3:9e:43:3c:3a:fc:6e:2e:b6:52:db:60:8f:
                    55:e1:91:a8:8f:e1:bc:f9:b9:50:89:8b:f8:1c:8f:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:E3:63:BE:42:5F:1A:A9:82:C3:ED:CB:E4:64:78:69:5A:B8:73
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134302e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:86:1b:6f:22:6b:24:ae:c3:ce:08:8c:59:6b:94:db:36:68:
         4b:f5:df:ca:20:4c:1b:7a:f2:54:80:6e:a1:e4:45:0a:07:b1:
         71:9e:fa:57:9e:44:9f:69:8b:e5:7c:cc:ea:aa:10:c4:a2:93:
         36:c4:be:d6:ea:16:4b:bd:09:cf:7d:74:31:12:b8:d3:0d:d4:
         f8:b1:91:cd:bf:51:4f:8c:97:8e:b3:f2:5e:bd:81:2c:fb:e7:
         ec:f0:28:a8:b6:54:ad:b7:d0:28:ef:76:c7:ee:49:a0:da:aa:
         d9:88:10:03:0d:57:16:7a:1e:6b:8e:bc:24:72:d1:42:b4:41:
         34:b6:48:e2:f5:86:0e:b5:a0:10:b8:0d:fe:ac:86:01:96:9d:
         49:20:dd:0f:23:d4:cf:ff:60:39:56:11:af:8d:34:a5:7c:67:
         4c:84:62:72:55:ff:91:e4:f6:cd:a6:89:3d:f3:60:d2:cc:e3:
         a9:ce:16:04:2c:6a:39:2e:6d:7f:73:8d:e7:63:83:ea:8d:f5:
         c5:03:51:40:9d:4d:fb:77:9a:53:58:20:32:c3:04:41:5f:ac:
         14:be:33:82:17:0d:b3:29:64:33:b7:34:82:ce:f0:ba:78:66:
         9a:f9:9f:15:9f:e7:88:d0:4e:d9:a1:c8:06:f4:a1:97:94:39:
         9f:ad:63:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org